RunScanner 1.0 released! (out of beta)

system · 2007-08-18T00:08:10.000Z

I suggest downloading the zip file … especially if on dial-up like I am.

Edit:

That worked very good and it found nothing … well, nothing to worry about.

system · 2007-08-19T15:20:13.000Z

Well still, you never really know…

I mean what do we really know about the author of RunScanner, or even Lusher? For all you know they are bad guys…

You guys are way too trusting… I mean sure, you probably scanning it with Virustotal or something, but you really think malware these days won’t be tweaked to avoid detection by them?

BTW I found a major bug in RunScanner, and as such a new update is available.

Runscanner changelog

Changelog 1.0.1 (Bugfix)
Fixed bug with AppInit_DLLs (Thanks to Lusher for reporting the bug)

essexboy · 2007-08-19T15:22:43.000Z

Runscanner is currently a visiting consultant at Geeks to Go and and is helping use work out how to use the programme to best effect

system · 2007-08-20T11:49:26.000Z

AVG detects RunScanner has a trojan. ;D

system · 2007-08-20T13:20:41.000Z

ran avast!-bitdefender online scan-kaspersky online scan
ad-aware 2007-superasntispyware-spyware doctor full version & ewido online scanner
my annual monday morning once a week routine and ““found nothing”” ???
i have the latest version of runscanner and its not install anyways-it just goes through a run command to activate…
are you talking about avg antispyware or the virus program ???
probably a false positive which i am already am tooooo familiar with the word false positive 8)

system · 2007-08-20T16:35:39.000Z

The antivirus.

system · 2007-08-20T16:40:32.000Z

still probably a false postive…knowing avg-why are you using avg in the first place ???
try this- http://www.kaspersky.com/kos/english/kavwebscan.html & http://www.bitdefender.com/ click on scan now- both online not resident
and see if they detect anything :
what is the name of the trojan ???

system · 2007-08-20T17:02:26.000Z

drhayden1 post:15:

still probably a false postive…knowing avg-why are you using avg in the first place ???
try this- http://www.kaspersky.com/kos/english/kavwebscan.html & http://www.bitdefender.com/ click on scan now- both online not resident
and see if they detect anything :
what is the name of the trojan ???

Trojan horse SHeur.GYL.

I scan with 30 different antivirus/antispyware (including KAV and bitdefender) using multiple engine scan, much easier than using the two you mention.

And no I don’t use AVG (not mainly), I’m just reporting what i found.

But I’m not a dr like you, so I bow to your superior expertise with antiviruses.

Lisandro · 2007-08-20T17:26:33.000Z

drhayden1 post:13:

ran avast!-bitdefender online scan-kaspersky online scan
ad-aware 2007-superasntispyware-spyware doctor full version & ewido online scanner

Also
a-squared: clean
SpywareTerminator: clean
AVGas: clean

Strange that the ‘good’ guys does not detect the suspicious ‘bad’ guy… uh?

Lisandro · 2007-08-20T17:27:21.000Z

Lusher post:14:

The antivirus.

The well known false positives of Grisoft…

system · 2007-08-20T17:30:42.000Z

Tech™ post:17:

drhayden1 post:13:

ran avast!-bitdefender online scan-kaspersky online scan
ad-aware 2007-superasntispyware-spyware doctor full version & ewido online scanner

Also
a-squared: clean
SpywareTerminator: clean
AVGas: clean

Strange that the ‘good’ guys does not detect the suspicious ‘bad’ guy… uh?

Not so strange, I have found any number of ‘bad guys’ that initally only 1 or 2 scanners out of 30+ at virustotal find something fishy (via heuristics) so it is not so unthinkable that RS might be malware and only AVG and counterspy are seeing something possibly malicious via heuristics.

Not saying it is, mind you, just saying it is not impossible.

system · 2007-08-20T17:31:28.000Z

Tech™ post:18:

Lusher post:14:

The antivirus.

The well known false positives of Grisoft…

Is counterspy known to have high FP rates too?

system · 2007-08-20T17:40:21.000Z

Changelog 1.0.2
Fixed bug with “problem with shortcut , searching for file gui”
Fixed false positive warning with AVG antivirus
(Thanks to Lusher for reporting the bug)

Changelog 1.0.1 (Bugfix)
Fixed bug with AppInit_DLLs (Thanks to Lusher for reporting the bug)

Lisandro · 2007-08-20T17:42:03.000Z

Lusher post:20:

Is counterspy known to have high FP rates too?

As far I know, yes.

Lusher post:19:

Not so strange, I have found any number of ‘bad guys’ that initally only 1 or 2 scanners out of 30+ at virustotal find something fishy (via heuristics) so it is not so unthinkable that RS might be malware and only AVG and counterspy are seeing something possibly malicious via heuristics. Not saying it is, mind you, just saying it is not impossible.

Isn’t this just FUD?

system · 2007-08-20T17:51:31.000Z

at least it wasn’t found on my two computers and i have had bad experiences with false positives as tech and many others on this forum know
and that trojan you posted was misspelled-could find in couple of databases ???

http://i14.tinypic.com/5zbacnk.jpg

system · 2007-08-20T17:52:00.000Z

Tech™ post:22:

Lusher post:20:

Is counterspy known to have high FP rates too?

As far I know, yes.

Lusher post:19:

Not so strange, I have found any number of ‘bad guys’ that initally only 1 or 2 scanners out of 30+ at virustotal find something fishy (via heuristics) so it is not so unthinkable that RS might be malware and only AVG and counterspy are seeing something possibly malicious via heuristics. Not saying it is, mind you, just saying it is not impossible.

Isn’t this just FUD?

No it isn’t. Unless you think that there is no malware that isn’t detected by majority (or even all) of the scanners, but I know a person of your experience definitely isn’t so ignorant. Many (most?) new malware start out undetected by all the scanners (some might guess using heuristics), I reported 3 such samples in the last month and I wasn’t even hunting for them on purpose.

Besides a little bit of caution is hardly FUD, and I’m insulted you would accuse me of that!

system · 2007-08-20T17:53:19.000Z

drhayden1 post:23:

at least it wasn’t found on my two computers and i have had bad experiences with false positives as tech and many others on this forum know
and that trojan you posted was misspelled-could find in couple of databases ???

http://i14.tinypic.com/5zbacnk.jpg

Nah, it’s correctly spelled. It is clearly a heuristic (maybe generic?) type detection , you will never find information about it.

Lisandro · 2007-08-20T17:56:17.000Z

Lusher post:24:

Besides a little bit of caution is hardly FUD, and I’m insulted you would accuse me of that!

I’m not accusing anybody of nothing… just my personal impression and my experience with RunScanner.

system · 2007-08-20T18:01:22.000Z

you will never find information about it

so what's the point then looking for something that doesn't EXIST ??? ::)

system · 2007-08-20T18:06:58.000Z

drhayden1 post:27:

you will never find information about it
so what's the point then looking for something that doesn't EXIST ??? ::)

Hmm maybe you don’t know that much about antiviruses.

Some antivirus have a generic name given for malware that is detected by heuristics. It’s a placeholder name.

Normally an antivirus has a specific signature for a certain malware, so it can give it a proper name.

But heuristics are just a “guess”, so they don’t have actual names for it, just placeholder generic names. Until it is properly analysed , then a specific signature will be created for it, and a specific name.

Announcements