Safe Returner

Discussion in 'other anti-malware software' started by sg09, Jun 14, 2010.

Thread Status:
Not open for further replies.
  1. whitedragon551

    whitedragon551 Registered Member

    Joined:
    Sep 30, 2008
    Posts:
    3,264
    Location:
    USA
    Still not working here in Win 7 x64 Pro.
     
  2. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    Is there any error message happened in your 64 bit Windows 7?

    or please look at %appdata%/safereturner/debug/

    there are error messages located.
     
  3. whitedragon551

    whitedragon551 Registered Member

    Joined:
    Sep 30, 2008
    Posts:
    3,264
    Location:
    USA
    Heres my message:

     
  4. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    it's working fine here;)
     
  5. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    Hi,

    thanks for your test.

    there is no true FP in the image you uploaded.

    Please note that in expert mode,it lists all the startup files that do not have digital signature.

    Only with red socre items will be identified as a malware in expert mode.

    please read more on help document.

    thanks.

    =====================

    1. yes,you coulde contact me with the email in the help tap.
    2.maybe my english is poor ,so there is some mistakes.if any please let me know.
     
  6. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    Hi,I'm sorry for the bug.

    I only tested it in XP 64 bit,and Windows 7/vista/Xp/2003 server 32 bit.

    I admit it is a bug in Windows 7 64 bit.

    Sorry,and I will try to fix it.
     
  7. smith2006

    smith2006 Registered Member

    Joined:
    Mar 28, 2006
    Posts:
    808
    I am also running PE Guard.

    Safe Returner (with the latest definitions) is no longer detected it as a malware.
     
  8. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    thanks smith;) for this info:thumb:
     
  9. leofelix

    leofelix Registered Member

    Joined:
    Sep 6, 2009
    Posts:
    175
    Location:
    Italy
    Hi egomo Hi all
    sorry for late reply.
    Indeed, I realized I was wrong only later.
    Your antimalware works fine and my system is clean!:)

    Thank you again for your replies




     
    Last edited: Jul 19, 2010
  10. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,297
    I also refer to safe returner 1.27.3 release > https://www.wilderssecurity.com/showthread.php?t=278841&page=3

    I addition to the database, not being updated since AUG 30, there is a new problem, that I have noticed since my last scan on OCT 7.

    When I click on OK, the GUI just vanishes.

    Just wondering...have not heard from the developer for awhile. ;)

    See screenshots:
     

    Attached Files:

  11. whitedragon551

    whitedragon551 Registered Member

    Joined:
    Sep 30, 2008
    Posts:
    3,264
    Location:
    USA
    I was wondering the same thing. Havent seen an update recently.
     
  12. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    Same Problem here...:(
     
  13. whitedragon551

    whitedragon551 Registered Member

    Joined:
    Sep 30, 2008
    Posts:
    3,264
    Location:
    USA
    Just got done reinstalling IPP and with its latest rankings with low FP's and very high detections it picked up one of Safe Returners files. The IEXPLORER.EXE was flagged as a W32.Hijacker.
     
  14. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    I submitted that some days back. I guess they have not added it yet....
     
  15. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    Hi,

    I'm so sorry for that.

    The "Time out " error message may occur each computer on 1.27.3 as the version of expired day is 2010-10-10

    So Tarnak will say that it work well at OCT 7.

    after that day,if you run the 1.27.3 version it will get the above error message.

    I'm busy with another project so I take less time on Safe Returner in the last 30 days.

    I have update to 1.27.4,and sorry again for that

    there is something new in 1.27.4 with rootkit detection

    I will add a note with the new version later.
     
    Last edited: Oct 13, 2010
  16. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115

    The "IEXPLORER.EXE" is a tool like Rkill tool from bleepingcomputer.com which is only terminates processes. Please open it first when you have launched Safe Returner but it can not run or closed by an exe killing rogue.

    It maybe identified as a FP by other AV product.
     
  17. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,297
    Yes...thanks egomoo! :)

    I have updated to version 1.27.4 successfully. Have noted about the new rookit dll, that the Emsisoft Anti-Malware popup indicted and I allowed.

     

    Attached Files:

  18. whitedragon551

    whitedragon551 Registered Member

    Joined:
    Sep 30, 2008
    Posts:
    3,264
    Location:
    USA
    Egomoo I found 6 more false positives. 3 of which are very well known programs.
     
  19. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    Thanks.

    I have checked it,and it is only one truely Fp.

    c:\program files\immunet protect\tetra\scan.dll


    Safe Returner offers a expert mode view to display more information of all the startup entry for advanced pc users.

    It contains both legitimate programs and malicious softwares that are automatically started by Windows.

    It is up to you which one should be removed or not.

    So there is NO FPs about expert mode as I don't say they are malware.

    It only give u a startup list that do not have digital signature,and each one has a risk score.

    In many case, the red color score will be identified as a threat in default detection.

    Others in the expert mode are safe.
     

    Attached Files:

    • 112.jpg
      112.jpg
      File size:
      125.3 KB
      Views:
      268
  20. Adric

    Adric Registered Member

    Joined:
    Feb 1, 2006
    Posts:
    1,762
    http://www.safereturner.com/download.html still shows 1.27.3

    Where did you get 1.27.4 from?

    Al
     
  21. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    @Adric: I got that through Autoupdate. There is Signature update as well as version update.

    @egomoo:
    In normal mode scan SR detected two FPS.
    BoostService.exe file in C:\Program Files\Common Files\2ToX Common
    That file is downloaded from
    http://www.appsmaker.com/files/product.php?prodID=1&details
    noautorun.exe in C:\Program Files\NoAutorun
    Downloaded from
    http://sourceforge.net/projects/noautorun/

    I think in the right click menu of detection there should be a form where info about FP can be written.
     
  22. Adric

    Adric Registered Member

    Joined:
    Feb 1, 2006
    Posts:
    1,762
    Hmmm, I can only manually do definition updates. Is the version update supposed to happen automatically?

    I guess the trial period has ended, because it will no longer scan either..

    Al
     
  23. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    Version update will happen when you try to do a scan within trial.
     
  24. whitedragon551

    whitedragon551 Registered Member

    Joined:
    Sep 30, 2008
    Posts:
    3,264
    Location:
    USA
    Dr Web Antivirus also flags Safereturner.scr, SafeReturners main GUI.
     
  25. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    That's a old problem of Dr Web. I upload that in every edition and in the next edition it still detects that.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.