Scanning for Superfish and other Komodia-powered malware

Thought this would be the right place to share this:

A colleague of mine has made a small scanner to identify ANY apps that feature the infamous Komodia DLLs, regardless of their filenames (hash-based scan). There's a small post about it here:

http://hexatomium.github.io/2015/02/23/komodia-sha1-fast-finder/

Background info: http://arstechnica.com/security/201...tened-lenovo-users-found-in-a-dozen-more-apps

 

That link to the tester...hxxp://trax.x10.mx/files/komodia_sha1finder.exe ... "404 not found".

 

The link was wrong apparently. Works for me now - try to refresh the blog page.

 

Thanks...got it...Only 27 KB....Just have to see if it needs to run as Admin....

 

It works both as admin and non-admin, though it will (obviously) be able to scan more files as admin.

 

It is running now as non-admin.... Slowly...DefenseWall keeps warning...and I allow each time ...LOL

 

I am clear! ...it seems.

Spoiler: screenshot