Safe Returner

It is back to normal...

Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 13/03/2011
Time: 1:17:52 PM
User: xxxxxxxxxx\<myname>
Computer: xxxxxxxxxx
Description:
The RegKernelHelp service was successfully sent a start control.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

 

thanks for your update

The RegKernelHelp.sys is a dirver to detect hide rootkit registery keys.

 

You're welcome.

 

I not sure if this change in the registry is Ok, or not. What is catchmevspm.sys?

Also see google search - http://www.google.com/search?hl=en&...OV9KH0Bw&ved=0CBIQvgUoAA&q=catchmevspm&nfpr=1

 

After a reboot, the registry entry has reverted. Back to normal?

 

It use Catchme to check if a hide file is exists.

There is a short COPYRIGHT description in EULA.rtf file

SrKillKit.dll
Copyright © Catchme.exe from http://www2.gmer.net/

catchmevspm.sys is the driver from Catchme.

 

So, if as what you say, above, catchmevspm.sys is a (valid) driver...what does that make catchme.sys? ...Equally, a valid driver?...and, interchangeable?

 

I also do not know why it does that change.

Maybe it is a protected method to help Catchme run well or something else.

 

Well...I did have to ask!

 

I refer to my post last October- https://www.wilderssecurity.com/showpost.php?p=1766426&postcount=85

Same thing has just started happening again.

There hasn't been an update in quite awhile.

I wonder if development of this program has stalled?

 

Yeah i get the same error but when i click on ok the scan simply continues. Why this is suddenly happening again is something i do not know. As for the update, for me the last update was 13-1-2011, so yeah it is sadly lacking behind in my opinion.

 

Sacre Bleu! Mon Dieu! ...an update!

It is functioning.

 

good

 

Just updated...

 

New Safe Returner review from malwaretips.com

thanks MrXidus

here is the link

http://malwaretips.com/Thread-Safe-Returner-1-28-Test-And-Review-by-MrXidus?pid=13420#pid13420


I have say something about the review video.

In our home page we say

It did kill all processes of the active rogues and after a scan/reboot none of the rogues were active allowing a scan of Malwarebytes which cleaned up the dregs.

1. Safe Returner does not have any malware database,so we could not give your any malware name about the threat.

2. You will see lots of *.vir files which Safe Returner has been deleted and rename it to *.vir

=============================================================================

For example, we use Safe Returner and Malwarebytes both use the database with 2 month ago.

Then we do the review just like MrXidus do

what will do it happen about the result?

Does Malwarebytes could remove the active malware that do not have include in its malware database?

There are 5 months that Safe Returner does not update its database but it still detect lots of threat in the video.

Safe Returner is less than 4 MB include database but what a large database about Malwarebytes.

I could not say Safe Returner is better than Malwarebytes but it is a different product from Malwarebytes.

If you kill malware failed while use Malwarebytes,then try Safe Returner!

 

Anyone know what happened with this program? The last database file release was dated 1/13/11. The website is still up, but development seems to have stopped. It's a nice little program, disappointed that it seems to have died.

 

Just got an update to v1.28.3

 

Any free version on the cards?

 

Do you mean you want a free license?

I will send u one if you PM me with your email.

 

Justed updated to 1.28.4

 

I tried downloading a free trial of Safe Returner but it was blocked with this message. I've included a screen shot.