Avast WEBforum
Other => General Topics => Topic started by: Lusher on August 17, 2007, 02:04:48 PM
-
RunScanner (http://www.runscanner.net/) is a completely free windows system utility which scans your system for all configured running programs. You can use runscanner to detect autostart programs, spyware, adware, homepage hijackers, unverified drivers and other problems.
(http://farm2.static.flickr.com/1332/1147492557_eaed4c53c6.jpg)
Very comprehensive autostart list
* Scanning of 80+ hijack locations, hosts file editor, process killer, online malware/whitelist analysis.
* Covers everything from Autoruns, HJT, Silentrunners and more.
* Malware will find it harder than ever to hide.
* Freeware.
For beginner and expert users
Beginner mode:
"Safe mode" : no changes can be made by the user.
Targetted at novice computer users that want support from a forum or from a malware specialist.
Beginners can upload or post a text of binary ".run" file. Experts can load it up into runscanner, examine it for malware and mark entries for removal and repost it. The beginner can reload the file and it will automatically make entries for removal.
Expert mode :
Targetted at expert users, this is the most powerful mode.
All delete, filter, export, lookup ... features are available.
Easier to use
* Online malware analysis of results. (optional, not required)
* Verification of authenticode signatures (Microsoft signed, signed by verified publisher, Whitelisted by online database )
* MD5 hash calculation of files + online file rating
* Online lookup of scanned entries. (Runscanner database + Google)
* RunScanner makes it easier to determine which entries are likely to be malicious.
* One executable, no installation required.
* Backup / restore of deleted items.
Log analysis made easy
* Saving and importing of text files to .run files (all information available)
* A user with problems can save the .run file, an expert can mark the items that need fixing and send the .run file back to the user
* Plain text file logging with only the items that need your attention.
Malware removal abilities and misc
* Powerful process killer
* Kill multiple processes at once
* Kill and rename
* Kill and delete
* Delete at next reboot
* Regedit jump
* Explorer jump
* Extended filters
* Marking of items.
-
I do recommend it 8)
-
just download it tech and looks promising 8)
her link above on my end doesn't work ???
Microsoft VBScript runtime error '800a0005'
Invalid procedure call or argument: 'right'
/err.asp, line 13
that's what i got ::)
http://www.runscanner.net/ this works here :)
(http://i16.tinypic.com/4vpgf40.gif)what's wrong garfield!
-
fixed the link. thanks.
-
no problem...works here now ;)
(http://i12.tinypic.com/5zm2pli.gif)
-
Runs very well.
I like it a lot.
-
Runs very well.
I like it a lot.
Totally agree ;D
excellent program to use along with Hijackthis
-
Concur finding my way around it now it is very easy for a novice to use
-
***
I suggest downloading the zip file ... especially if on dial-up like I am. :)
***
Edit:
That worked very good and it found nothing ... well, nothing to worry about. ;)
***
-
Well still, you never really know...
I mean what do we really know about the author of RunScanner, or even Lusher? For all you know they are bad guys...
You guys are way too trusting... I mean sure, you probably scanning it with Virustotal or something, but you really think malware these days won't be tweaked to avoid detection by them?
BTW I found a major bug in RunScanner, and as such a new update is available.
Runscanner changelog
Changelog 1.0.1 (Bugfix)
Fixed bug with AppInit_DLLs (Thanks to Lusher for reporting the bug)
-
Runscanner is currently a visiting consultant at Geeks to Go and and is helping use work out how to use the programme to best effect
-
AVG detects RunScanner has a trojan. ;D
-
ran avast!-bitdefender online scan-kaspersky online scan
ad-aware 2007-superasntispyware-spyware doctor full version & ewido online scanner
my annual monday morning once a week routine and ""found nothing"" ??? ;)
i have the latest version of runscanner and its not install anyways-it just goes through a run command to activate....
are you talking about avg antispyware or the virus program ???
probably a false positive which i am already am tooooo familiar with the word false positive 8)
-
The antivirus.
-
still probably a false postive...knowing avg-why are you using avg in the first place ???
try this- http://www.kaspersky.com/kos/english/kavwebscan.html & http://www.bitdefender.com/ click on scan now- both online not resident
and see if they detect anything ::)
what is the name of the trojan ???
-
still probably a false postive...knowing avg-why are you using avg in the first place ???
try this- http://www.kaspersky.com/kos/english/kavwebscan.html & http://www.bitdefender.com/ click on scan now- both online not resident
and see if they detect anything ::)
what is the name of the trojan ???
Trojan horse SHeur.GYL.
I scan with 30 different antivirus/antispyware (including KAV and bitdefender) using multiple engine scan, much easier than using the two you mention.
And no I don't use AVG (not mainly), I'm just reporting what i found.
But I'm not a dr like you, so I bow to your superior expertise with antiviruses.
-
ran avast!-bitdefender online scan-kaspersky online scan
ad-aware 2007-superasntispyware-spyware doctor full version & ewido online scanner
Also
a-squared: clean
SpywareTerminator: clean
AVGas: clean
Strange that the 'good' guys does not detect the suspicious 'bad' guy... uh?
-
The antivirus.
The well known false positives of Grisoft...
-
ran avast!-bitdefender online scan-kaspersky online scan
ad-aware 2007-superasntispyware-spyware doctor full version & ewido online scanner
Also
a-squared: clean
SpywareTerminator: clean
AVGas: clean
Strange that the 'good' guys does not detect the suspicious 'bad' guy... uh?
Not so strange, I have found any number of 'bad guys' that initally only 1 or 2 scanners out of 30+ at virustotal find something fishy (via heuristics) so it is not so unthinkable that RS might be malware and only AVG and counterspy are seeing something possibly malicious via heuristics.
Not saying it is, mind you, just saying it is not impossible.
-
The antivirus.
The well known false positives of Grisoft...
Is counterspy known to have high FP rates too?
-
Changelog 1.0.2
Fixed bug with "problem with shortcut , searching for file gui"
Fixed false positive warning with AVG antivirus
(Thanks to Lusher for reporting the bug)
Changelog 1.0.1 (Bugfix)
Fixed bug with AppInit_DLLs (Thanks to Lusher for reporting the bug)
-
Is counterspy known to have high FP rates too?
As far I know, yes.
Not so strange, I have found any number of 'bad guys' that initally only 1 or 2 scanners out of 30+ at virustotal find something fishy (via heuristics) so it is not so unthinkable that RS might be malware and only AVG and counterspy are seeing something possibly malicious via heuristics. Not saying it is, mind you, just saying it is not impossible.
Isn't this just FUD?
-
at least it wasn't found on my two computers and i have had bad experiences with false positives as tech and many others on this forum know :)
and that trojan you posted was misspelled-could find in couple of databases ???
(http://i14.tinypic.com/5zbacnk.jpg)
-
Is counterspy known to have high FP rates too?
As far I know, yes.
Not so strange, I have found any number of 'bad guys' that initally only 1 or 2 scanners out of 30+ at virustotal find something fishy (via heuristics) so it is not so unthinkable that RS might be malware and only AVG and counterspy are seeing something possibly malicious via heuristics. Not saying it is, mind you, just saying it is not impossible.
Isn't this just FUD?
No it isn't. Unless you think that there is no malware that isn't detected by majority (or even all) of the scanners, but I know a person of your experience definitely isn't so ignorant. Many (most?) new malware start out undetected by all the scanners (some might guess using heuristics), I reported 3 such samples in the last month and I wasn't even hunting for them on purpose. :)
Besides a little bit of caution is hardly FUD, and I'm insulted you would accuse me of that!
-
at least it wasn't found on my two computers and i have had bad experiences with false positives as tech and many others on this forum know :)
and that trojan you posted was misspelled-could find in couple of databases ???
(http://i14.tinypic.com/5zbacnk.jpg)
Nah, it's correctly spelled. It is clearly a heuristic (maybe generic?) type detection , you will never find information about it.
-
Besides a little bit of caution is hardly FUD, and I'm insulted you would accuse me of that!
I'm not accusing anybody of nothing... just my personal impression and my experience with RunScanner.
-
you will never find information about it
so what's the point then looking for something that doesn't EXIST ??? ::)
-
you will never find information about it
so what's the point then looking for something that doesn't EXIST ??? ::)
Hmm maybe you don't know that much about antiviruses.
Some antivirus have a generic name given for malware that is detected by heuristics. It's a placeholder name.
Normally an antivirus has a specific signature for a certain malware, so it can give it a proper name.
But heuristics are just a "guess", so they don't have actual names for it, just placeholder generic names. Until it is properly analysed , then a specific signature will be created for it, and a specific name.
-
(http://i16.tinypic.com/62dheo7.gif)
Hmm maybe you don't know that much about antiviruses.
i was just making a general comment and not to get in a who knows what and who doesn't :o
better things to do with my time that worry about a little computer bug-when i have some real ones in real life to worry about and for knowing about anti-viruses and viruses-more that you will ever know ::) 8)
-
and for knowing about anti-viruses and viruses-more that you will ever know ::) 8)
I have no doubt about that. Everyone of you AVAST! evangelist has forgotten more stuff about antiviruses than I will ever know.
-
1. The new AVG "sheur.xxx" engine is well-known for a large number of false positives. It has been released just recently, and is not quite ready for the prime time. See e.g.
http://forum.grisoft.cz/freeforum/read.php?4,104095
http://forum.grisoft.cz/freeforum/read.php?4,106051
http://forum.grisoft.cz/freeforum/read.php?4,106099
http://forum.grisoft.cz/freeforum/read.php?4,105579
http://forum.grisoft.cz/freeforum/read.php?4,105529
and many more.
2. I'm quite sure RunScanner is a legit application. It is published by a Dutch guy called Moernaut (http://www.moernaut.com) and the setup file is even digitally signed.
3. There's no reason to argue on this forum, especially about "who knows more about antiviruses" and the like. Please stay on-topic and follow the forum rules.
Thanks
Vlk
-
Vlk, given that's I'm the guy who is single handedly posting about this app, as well as it seems one of the few people helping to check for bugs, I'm also like you "quite sure" the app is legit.
But you never know. I mean just because the file is digitally signed doesn't mean much really, unless you can trust the person signing it. But you already knew that , I'm just saying...
Did anyone notice this latest version is > 2.5x bigger than the older one when it just fixes one minor bug? I wonder if this is connected with how this version no longer is flagged by AVG.... :)
-
Changelog 1.0.3
Added trusted zones HKLM
Added HKCU\Software\Classes\Folder\Shellex\ColumnHandlers
Added HKCU\SOFTWARE\Microsoft\Active Setup\Installed Components
Added HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Added HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
Added 105 HKCU\Software\Microsoft\Internet Explorer\MenuExt
Fixed minor bug with incorrect filter
Fixed minor sorting bug in text log file
Changed behaviour with 068 -> download lsp-fix
Changed ctrl+c (copy) formatting
Google lookup now also searches for GUID, registry entry if no exename available.