Safe Returner

Discussion in 'other anti-malware software' started by sg09, Jun 14, 2010.

Thread Status:
Not open for further replies.
  1. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    Thanks a lot for the offer..:)
     
  2. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,978
    Good to see it all panned out to be for real :thumb: Be interesting to see how well it progresses :)
     
  3. falkor

    falkor Registered Member

    Joined:
    Sep 26, 2009
    Posts:
    205
    I know Franklin . I read it . Tried both ways . No go and no problem . I have moved off of it and moved on .
     
  4. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    Hi, egomoo, while trying the product, during update I got two types of error message. And after that it stopped working.

    error.jpg
    error 2.jpg

    Please look over the problem.
     
    Last edited: Jun 16, 2010
  5. falkor

    falkor Registered Member

    Joined:
    Sep 26, 2009
    Posts:
    205
    Yep . That would be the same crap I got . Lol .:D
     
  6. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    You got the same error?
     
  7. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    the server has some a 500 error

    and now I have fixed it.

    Sorry for that.

    It's ok.
     
  8. AvinashR

    AvinashR Registered Member

    Joined:
    Dec 26, 2009
    Posts:
    2,063
    Location:
    New Delhi Metallo β-Lactamase 1
    Hi Egomoo,

    I have tried to test your software, but i have received some fatal errors. Even i was not able to scan anything. To be very honest, my first experience is really bad...:oops:

    But never mind, i am sure you'll look into the matter and convert the initial worst into final BEST !!

    I look forward to "hearing" from you soon..
     

    Attached Files:

  9. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    I'm so sorry that my web hosting server has some tech problem.

    I'm now try my best to fix them.

    Sorry.....
     
  10. AvinashR

    AvinashR Registered Member

    Joined:
    Dec 26, 2009
    Posts:
    2,063
    Location:
    New Delhi Metallo β-Lactamase 1
    I understand. Please try to fix it, so that i can able to test your software.

    With Best Regards,
     
  11. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,285
    I got the .com file and changed the extension to .exe and tried to run, but I got the following error message:

    ---------------------------
    Error
    ---------------------------
    Unable to execute file in the temporary directory. Setup aborted.



    Error 193: %1 is not a valid Win32 application.
    ---------------------------
    OK
    ---------------------------
     
  12. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    Problem solved. :D Thanks for the fast response.. :thumb:
    It detected two threats (FP),
    AWC.exe (advanced wall paper changer), for not having Company Name.
    btguard.sys (MBR Guard), very few google search result

    1.jpg

    But my question is many malwares has many google search results...


    My Verdict: I am quite satisfied... I expected it to detect MBR Guard. Not too many FP as I guessed as I have a few many Softwares installed.
     
  13. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    Update: A few more detections in Expert Mode. I like the threat ratings. First scan took a longer time compared to later scans. Also checks for updates before scan.

    Few Suggestion:
    1. Make the Window re-sizable.
    2. The application can be turned off from Task Manager. Better self protection is needed.
     
  14. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    does it have real time protection?
     
  15. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    YES,the Norton Power Eraser also detect btguard.sys as a threat because there is few folks use it.

    I agree with that many malwares has many google search results, but the scan engine do not base only "google result".

    The threat detail is a information for a novice to spot malware.

    It is easy to be recognised If they know it is installed by themselves.

    I will update the database ASAP to resolve the 2 FPs

    thanks for your test and advice.
     
    Last edited: Jun 17, 2010
  16. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    Safe Returner is not an anti-virus product, so it do not have real-time protection.

    Safe Returner focuses on the detection and removal of active malicious software.
     
  17. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    egomoo, can you get the latest version over to the download sites?
     
  18. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    Yes,I have upload a new install package to server.

    go here to download :

    http://www.safereturner.com/download.php

    it fix some bugs when run in windows 7 but the version is also 1.24.

    I hope have fixed AvinashR's error message.

    if there is no bugs in windows7 after AvinashR test,then I will change its version as 1.25

    thanks all
     
  19. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    Deep In Safe Returner

    I want to share something more with safeReturner

    the review below is makded by a expert on malware research group.

    the link is http://www.kernelmode.info/forum/viewtopic.php?f=11&t=188
    I want to say the review is fair after a quick test with little samples.

    But If you test more than 10 samples,or leanr more about the app for more time ,I believe you will like it.

    Most of the first experience is non-credible by techs because they know classical antimalware products has more large database,must take more time scan.(do not include CLOUD product

    They can not believe that such a small tool in such a short of time could remove lots of malware in common use.

    here is a story from a editor
     

    Attached Files:

    • 1.jpg
      1.jpg
      File size:
      35.7 KB
      Views:
      459
    • 2.jpg
      2.jpg
      File size:
      109.4 KB
      Views:
      457
    Last edited: Jun 18, 2010
  20. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    Thanks for your reply. Can you make some options available through which FP can be reported?
    Also, self protection is very important. Once malware writers come to know about your program they will device method to kill the process.
     
  21. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    1. if the app's purpose is getting bucks from unexperienced users.

    It must do not give 30 days all function for trial.

    And users do pay nothing remove malware in his 30 day trial.

    2. "Safe Returner uses termination of all non whitelisted processes at the beginning of scan"

    yes ,it will terminate most of process but not use a whitelisted database.

    In XP, it use the api function to let the process closed itself.

    ExitWindowsEx(EWX_LOGOFF,0);

    send a "LOGOFF" message to system,then all the other process receive the logoff message,and close itself.

    But in safereturner,it intercept "WM_QueryEndSession" event,so it sitll run and scan.

    3."However exists a lot of fake av's that blocks startup of applications that are not in their whitelist (usually by process name).
    So I doubt in real usefulness of this program in comparison with the classical antimalware products such as antiviruses.“

    Safe Returner is a none signature-base anti-malware tool.

    It has a cloud similar anlysis function but do not base on signature.

    All in one, It is a smart version of Sysinternal's Autoruns.

    Safe Returner could automatically remove most of malwares which could be removed by manually while use Autoruns with pc skill.

    So it's powerful in common use both novice and techs

    there are some malware that it could not remove at 1.24 version

    1. API hooks to prevent SafeReturner get the right startup item
    2. rootkits hide itself from normal detection
     
    Last edited: Jun 18, 2010
  22. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    thanks.

    please read on help document about "False Positive " subject.

    It has some features to report FP.

    further more,the scan log will automatically upload to the server so we will review it,then put it to the next database update

    self protection is very important for a famous tool,as safe returner is still on its beginning of development,so the protection features will be added in next version.
     
    Last edited: Jun 18, 2010
  23. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    Oho... Very sorry I didn't notice the FP Reporting part. :p

    Yes, Safe returner is in the early state and we wish it to be a very good product in future. That's why few more suggestion.
    1. Add a feature to protect the installation process like Kaspersky or Dr Web so that it can be installed on infected systems too. What about making a portable version like Dr.Web cure it..!!
    2. It may be a little silly but may be many of us don't like a security apps not having a digital signature..:p


    O.T: Just noticed you have been a member of Wilders since Aug 2007...o_O Why didn't you introduce your product before?
     
  24. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    :rolleyes:

    thanks for your suggestion,and I will add those to my next plan

    Yep, I'm a old man in malware research as a member of Wilders since Aug 2007.

    So the app is full of my wisdom from manually malware removal.

    And I finished its beta version on 2009 and after 6 months tested in normal user'pc as a free software.

    It collect more than 10000 users' system information to develop a less FP and effective scan engine.

    So that mean its Algorithm to detect malware have tested on lots of computers and have been adjusted.
     
    Last edited: Jun 18, 2010
  25. AvinashR

    AvinashR Registered Member

    Joined:
    Dec 26, 2009
    Posts:
    2,063
    Location:
    New Delhi Metallo β-Lactamase 1
    I am still receiving errors ...:rolleyes:
     

    Attached Files:

Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.