Comments on: Top Rated FREE and Powerful Malware Cleaner http://www.raymond.cc/blog/top-rated-free-and-powerful-malware-cleaner/?utm_source=rss&utm_medium=rss&utm_campaign=top-rated-free-and-powerful-malware-cleaner Daily updated news of useful advanced computer tips and tricks Thu, 24 May 2012 09:17:17 +0000 hourly 1 http://wordpress.org/?v=3.3.2 By: paul goodeshttp://www.raymond.cc/blog/top-rated-free-and-powerful-malware-cleaner/#comment-494566 paul goodes Wed, 20 Oct 2010 22:00:55 +0000 http://www.raymond.cc/blog/archives/2007/08/22/top-rated-free-and-powerful-malware-cleaner/#comment-494566 hi, The 'download run scanner link' provided does NOT work, all I get is a 'page unavailable' notification. Is there another download link? hi,
The ‘download run scanner link’ provided does NOT work, all I get is a ‘page unavailable’ notification.
Is there another download link?

]]> By: 010827840http://www.raymond.cc/blog/top-rated-free-and-powerful-malware-cleaner/#comment-397859 010827840 Mon, 11 Aug 2008 17:15:03 +0000 http://www.raymond.cc/blog/archives/2007/08/22/top-rated-free-and-powerful-malware-cleaner/#comment-397859 erdou taallalt 2008 erdou taallalt 2008

]]> By: Top Rated FREE and Powerful Malware Cleaner « Raymundo’s Webloghttp://www.raymond.cc/blog/top-rated-free-and-powerful-malware-cleaner/#comment-286398 Top Rated FREE and Powerful Malware Cleaner « Raymundo’s Weblog Tue, 20 Nov 2007 17:05:22 +0000 http://www.raymond.cc/blog/archives/2007/08/22/top-rated-free-and-powerful-malware-cleaner/#comment-286398 [...] read more | digg story [...] [...] read more | digg story [...]

]]> By: Lusherhttp://www.raymond.cc/blog/top-rated-free-and-powerful-malware-cleaner/#comment-194763 Lusher Sat, 25 Aug 2007 14:21:56 +0000 http://www.raymond.cc/blog/archives/2007/08/22/top-rated-free-and-powerful-malware-cleaner/#comment-194763 Definitely FP, given that it's a heuristic detection only.It's lousy heuristics are probably picking up on the piece of codes that causes RunScanner to quickly assess several different autostart locations... Definitely FP, given that it’s a heuristic detection only.

It’s lousy heuristics are probably picking up on the piece of codes that causes RunScanner to quickly assess several different autostart locations…

]]> By: Raymondhttp://www.raymond.cc/blog/top-rated-free-and-powerful-malware-cleaner/#comment-194751 Raymond Sat, 25 Aug 2007 13:12:20 +0000 http://www.raymond.cc/blog/archives/2007/08/22/top-rated-free-and-powerful-malware-cleaner/#comment-194751 Scanned with 32 Anti-Virus and only AVG reports RunScanner as SHeur.IDY. Definitely a false alarm. Scanned with 32 Anti-Virus and only AVG reports RunScanner as SHeur.IDY. Definitely a false alarm.

]]> By: Matthttp://www.raymond.cc/blog/top-rated-free-and-powerful-malware-cleaner/#comment-194732 Matt Sat, 25 Aug 2007 11:40:06 +0000 http://www.raymond.cc/blog/archives/2007/08/22/top-rated-free-and-powerful-malware-cleaner/#comment-194732 AVG doesnt like it - trojan horse SHeur.IDY AVG doesnt like it – trojan horse SHeur.IDY

]]> By: Lusherhttp://www.raymond.cc/blog/top-rated-free-and-powerful-malware-cleaner/#comment-194344 Lusher Fri, 24 Aug 2007 20:05:20 +0000 http://www.raymond.cc/blog/archives/2007/08/22/top-rated-free-and-powerful-malware-cleaner/#comment-194344 If you use RunScanner using "quick scan" it will not carry out any network attempts.It is actually using winverifytrust api which connect to clr.microsoft.com, as well as certifying authorthites like Verisign, Comodo to check to see if the digitally signed files found are really verified. To see what is being sent, check with a packet filter....Why are such connections necessary?Bbecause once you can be sure a file is digitally signed by X and you trust X, you can be sure X isn't malware. You can then filter/hide those entries, leaving you to focus on the unknown ones.Microsoft might be a bastard, but filtering out MS signed entries, will make things a lot easier as you will be left with fewer entries to check. If you use RunScanner using “quick scan” it will not carry out any network attempts.

It is actually using winverifytrust api which connect to clr.microsoft.com, as well as certifying authorthites like Verisign, Comodo to check to see if the digitally signed files found are really verified. To see what is being sent, check with a packet filter….

Why are such connections necessary?

Bbecause once you can be sure a file is digitally signed by X and you trust X, you can be sure X isn’t malware. You can then filter/hide those entries, leaving you to focus on the unknown ones.

Microsoft might be a bastard, but filtering out MS signed entries, will make things a lot easier as you will be left with fewer entries to check.

]]>