MCShield Anti-Malware version 3 Released!

Discussion in 'other anti-malware software' started by ifacedown, Jan 25, 2014.

Thread Status:
Not open for further replies.
  1. ifacedown

    ifacedown Registered Member

    Joined:
    Oct 12, 2013
    Posts:
    120
    Location:
    Philippines
    Wow!

    My favourite removable drive disinfection tool has just been upgraded and is now a lot BETTER than before!

    http://mcshield.net/index.html

    Changelog:

    v3.0.3.26 v3 final: 25th January 2014.

    - completely redesigned user interface with additional features;
    - new tab in Control Center: "Status" used to
    - - view & change main functions;
    - - view system information & main settings;
    - new tab in Control Center: "Logs" for easy logfile access and manipulation;
    - new tab in Control Center: "MCS Cloud" providing stats and latest news;
    - new option "Add Scan with MCShield to drives' menu" in Control Center > General:
    - - possibility to start on demand scans via right click menu;
    - new option "Visual style" in Control Center > General:
    - - possibility to select one of four visual styles;
    - new option "Don't scan autorun.inf" in Control Center > Scanner:
    - - possibility to completely disable AntiAutorun (processing of autorun files);
    - additional heuristics (AntiRep4) for another family of replicating worms (CryptoLocker and similar);
    - additional heuristics (AntiScript) for all types of vbscript based worms:
    - - on the fly decryption, code format & contents analysis;
    - - support for extremely large malicious files;
    - improved detection (FME) of worms mimicking legitimate files;
    - improved detection (AntiRep3) of several replicating worms;
    - added Simplified Chinese language (thanks to translator Anan);
    - added Swedish language;
    - updated all languages for v3 (except Brasilian Portuguese);
    - fixed an issue that caused the MD5 not to be shown for suspicious files in interactive mode;
    - improved program initialization time by removing obsolete on-start routines;
    - digitally signed all executable components:
    - - improving compatibility and ease of use alongside other security software;
    - - giving users the possibility to verify the origin and authenticity of the software;
    - various other improvements (code stability, graphics, program logic...).
     
  2. sbwhiteman

    sbwhiteman Registered Member

    Joined:
    Jul 20, 2009
    Posts:
    63
    This looks like an interesting program. However, could you please explain why it's needed if you're running a regular antivirus realtime?

    Thanks.
     
  3. ifacedown

    ifacedown Registered Member

    Joined:
    Oct 12, 2013
    Posts:
    120
    Location:
    Philippines
    To be honest, if you're using a GOOD antivirus/antimalware with automatic scanning of removable media enabled (like ESET, AVAST, [Baidu and Avg not so good on this]), using MCShield or like software seem to be not necessary at all.

    However, this programs especializes on this and since using it, my netbook cannot be anymore malware infected via removable media. If you plan to use mcshield, you have first to disable ESET (or others AV)'s automatic scanning of removable media. trust me, MCSHIELD can handle even zero-day malware. And in some rare cases even if some got through, ESET/other AV's realtime protection will catch them even if their automatic scanning of removable media is disabled.
     
  4. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,713
    Location:
    Kolkata, India
    1. MCShield can detect malware files in any external drives on connection or on startup.
    2. It can find and delete invalid nonmalware files (.lnk) and folders that common antimalwares left behind after disinfection.
    3. It can fix even non-malicious autorun files and cure those annoying instances where a removable drive looks like a folder or something else.

    The last two things are usually undone by normal AMs.

    Like ifacedown, I also prefer to disable removable drive scanning component of my antimalware and let this software to do that thing. It does that faster and often better.
     
  5. sbwhiteman

    sbwhiteman Registered Member

    Joined:
    Jul 20, 2009
    Posts:
    63
    I see. Thanks guys, may give it a try.
     
  6. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    5,123
    Location:
    USA
    Thanks! I was using v2 and this is a nice update.
     
  7. trott3r

    trott3r Registered Member

    Joined:
    Jan 21, 2010
    Posts:
    830
    Location:
    UK
    Looks interesting for my x61 laptop going to college without av (HIPS and hmpalert/himan pro scanner MBAE only)

    Are there any other usb scanners that are like this?

    Downloaded and testing thanks ifacedown :)
     
    Last edited: Jan 31, 2014
  8. trott3r

    trott3r Registered Member

    Joined:
    Jan 21, 2010
    Posts:
    830
    Location:
    UK
    So tried it on my laptop x61 and the good thing is that it is light on memory usage and cpu usage when its not scanning.

    Downsides:
    -45% on a dual core processor when scanning.
    -No scanning progress details: has a popup thats says its still scanning
    : The shield twirls on scanning

    -The whitelist works at the end of the scan.
    ie i had an asrock setup.exe file it doesnt like and it says it is an infection until the scan finishes then it says its ok.
     
  9. JoeBlack40

    JoeBlack40 Registered Member

    Joined:
    Apr 1, 2009
    Posts:
    1,572
    Location:
    Romania
    Thanks for the heads-up.
     
  10. ifacedown

    ifacedown Registered Member

    Joined:
    Oct 12, 2013
    Posts:
    120
    Location:
    Philippines
    Other products:

    USB Disk Security
    SMADAV

    However, I would recommend MCShield among the three. USB Dick Security - low detection. SMADAV - does not unhide hidden files/folders.

    I only found out that MCShield v3 is sometimes buggy, so install first the version 2. I already reported to MCShield the bugs.
     
  11. trott3r

    trott3r Registered Member

    Joined:
    Jan 21, 2010
    Posts:
    830
    Location:
    UK
    What bugs did you find in v3 been ok so far on my quick test.

    Where is v2 BTW?

    thanks for the opinions on the other usb scanners.
    Martin
     
  12. Oximoronman

    Oximoronman Registered Member

    Joined:
    Jun 7, 2013
    Posts:
    87
    That program is crap of ****,recommende not use it!
     
  13. ifacedown

    ifacedown Registered Member

    Joined:
    Oct 12, 2013
    Posts:
    120
    Location:
    Philippines
    You can go to their website. They have updated the product to fix the issues. Thanks.
     
  14. trott3r

    trott3r Registered Member

    Joined:
    Jan 21, 2010
    Posts:
    830
    Location:
    UK
    Were the bugs just crashing as that is all that is fixed with the newer version?

    Been ok so far on my system so i think i will download the new version but only upgrade if i do get problems

    Martin
     
  15. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    5,123
    Location:
    USA
    FYI the new version is 3.0.4.27 and it's being offered through the internal updater as well as available for download from the website.
     
  16. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    5,123
    Location:
    USA
    Can you please say what the issues were which have been fixed in the new build?
     
  17. trott3r

    trott3r Registered Member

    Joined:
    Jan 21, 2010
    Posts:
    830
    Location:
    UK
    Ok i have downloaded again on the desktop ready to put on the laptop.

    Bug fixes changelog is on their website.
     
  18. JoeBlack40

    JoeBlack40 Registered Member

    Joined:
    Apr 1, 2009
    Posts:
    1,572
    Location:
    Romania
    Please enlighten us why and explain.
     
  19. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    5,123
    Location:
    USA
    v 3.0.4.27: 2nd February 2014.

    - fixed an issue that caused the scanner to crash on certain locked files;
    - updated Vietnamese language.
     
  20. Solarlynx

    Solarlynx Registered Member

    Joined:
    Jun 25, 2011
    Posts:
    1,915
    Thank you for pointing at this app. I never used it.
     
  21. bobby100

    bobby100 Registered Member

    Joined:
    Jan 13, 2007
    Posts:
    5
    Hi,

    we (the developers of MCShield) are also here, me and dr_Bora.
    If you have any questions for us, please ask.
     
  22. FOXP2

    FOXP2 Guest

    @bobby100 and/or dr_Bora
    Thank you for distributing MCShield as free/donationware. Using 3.0.4.27/2014.2.2.1 on Win7hpSP1x64

    From the details on your Web site, I had assumed this app was, well, to quote it... "an Anti-Malware program designed to prevent infections transmitted via removable drives." As well, "USB" is a point of focus and emphasis.

    Yet I find it scans my C: D: & E: hard drive partitions. I don't want/need those scanned.

    I have an eSATA drive used for scheduled backups and while it is (of course) removable, it remains connected 99% of the time. MCShield treats it as an internal SATA drive and I don't want/need it scanned either.

    Upon mounting a TrueCrypt file, it gets scanned. There is a reason why I have TrueCrypt mounts and it's certainly NOT for cloud-enabled scanning!

    I thought I could Whitelist all those but when Add item is selected only the Libraries are presented. What good is that?

    MCShield uninstalled. :(

    MCS.jpg
     
    Last edited by a moderator: Feb 6, 2014
  23. bobby100

    bobby100 Registered Member

    Joined:
    Jan 13, 2007
    Posts:
    5
    Hi FOXP2,

    Certain infections add autorun.inf to the root of HDD partitions. Just the root of the partitions is scanned.
    Apart of that, you could disable this scan - on Scanner tab you could uncheck the scanning of HDDs.

    As for getting into Libraries folder at adding an item to Whitelist - please blame MS and Windows for this logic. On my PC it opens "Computer". It seems to behave different because of different preferences and system settings. As a quick solution (until next update), you can type "Computer", instead of "Libraries", and you will get into My Computer.
    I'll take a look at this, thanks for the bug report. I'll try to force it to open "Computer".

    How do you mean "cloud-enabled" scanning? MCS Cloud do not provide any signatures for scanning, or some community file-rating system. MCS Cloud provide usage statistics to us (how many installations of MCShield, how many files are disinfected...) and it will send us signatures of files marked as suspicious (file suspect.txt from MCShield data folder). There are internet databases where we can check these signatures after that, and decide if it needs to be whitelisted or added to malware signatures. One more time, to be clear - except of suspect.txt, none of your files is sent because of MCS Cloud, and no file is automatically deleted because of MCS Cloud. Also, you can disable MCS Cloud anytime, you just need to uncheck it on General tab.

    It is your decision. Please, read the provided documentation next time, it could help you making better decisions :)
     
    Last edited: Feb 7, 2014
  24. co22

    co22 Registered Member

    Joined:
    Nov 22, 2011
    Posts:
    253
    Location:
    router
    hi
    what is it info when i check for update?
    Local file parsed
    Problem with remote file

    also can you remove vertical image from right click menu on system tray icon?(Besides clock) it to wide.
    also option to load program without skin can be good.
    i like simple interface like NetWorx or similar tool.
    also thank you very much for your great program
     
  25. bobby100

    bobby100 Registered Member

    Joined:
    Jan 13, 2007
    Posts:
    5
    Hi,
    It means it can't get to the update-server.
    To see if there is some update, MCShield compares the version from local files with the version of files on the web-server. "Local file parsed" means that it got the version from files on your PC, and "Problem with remote file" means it can't access the files on the web-server. So, there is a problem either with your internet connection, or with our server.
    It would be too much work to have two versions, one with and one without that bar. Same goes for skin. Only thing I could do is to make a skin that would resemble the default WinXP controls look & feel.
     
Loading...
Thread Status:
Not open for further replies.