Softpedia >Windows >Security >Security Related >RunScanner >  Changelog

RunScanner Changelog

What's new in RunScanner 2.0.0.60

Mar 6, 2012
  • Fixed bugs in 64 bit software scanning

New in RunScanner 2.0.0.50 (Aug 30, 2010)

  • Fixed an important problem where some malware files prevented Runscanner from starting.
  • Fixed a problem where the scanning was locked during process scanning.

New in RunScanner 2.0.0.47 (Aug 2, 2010)

  • Fixed a bug where the scanning process freezes after loaded modules.
  • Added 4 command line parameters:
  • /beginner : start the program in beginner mode
  • /beginnerscan : start the program in beginner mode and start scanning
  • /expert : start the program in expert mode
  • /expertscan : start the program in expert mode and start scanning

New in RunScanner 2.0.0.44 (Jul 27, 2010)

  • 64 bit windows support !
  • Enhanced whitelisting
  • Updated to virustotal 2.0 uploader
  • Minor bug fixes
  • Added Launch/hijack locations:
  • 012 S-1-5-XX\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (+subkeys)
  • 013 S-1-5-XX\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce (+subkeys)
  • 014 S-1-5-XX\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx (+subkeys)

New in RunScanner 1.9.0.9 (Sep 16, 2009)

  • Enhanced whitelisting
  • Windows 7 support (32 bit)
  • Run files now include the list of installed software on the computer.
  • Minor bug fixes

New in RunScanner 1.8.1.0 (May 31, 2009)

  • Enhanced whitelisting
  • Minor bug fixes

New in RunScanner 1.8.0.0 (Jan 21, 2009)

  • Switched to Delphi 2009 unicode
  • Run files have a new slightly smaller format
  • Added new certificates to the whitelist
  • Added filename lookup to systemlookup.com
  • Removed Castlecops.com search
  • Fixed several unicode issues
  • Canvas does not allow drawing error
  • Online analysis sometimes not working
  • Fixed several access violation errors
  • AppInit_Dlls value now recognizes spaces and commas as delimiter. (used to hide malware)
  • Fixed bug where some startup items with parameters could not be restored
  • Fixed bug when some important registry settings could not be restored (LSA authentication packages)
  • Added Launch/hijack locations:
  • 250 HKCUSoftwareClassesDirectoryShellexDragDropHandlers
  • 251 HKLMSoftwareClassesDirectoryShellexDragDropHandlers
  • 252 HKCUSoftwareClassesDirectoryShellexPropertySheetHandlers
  • 253 HKLMSoftwareClassesDirectoryShellexPropertySheetHandlers
  • 254 HKCUSoftwareClassesDirectoryShellexCopyHookHandlers
  • 255 HKLMSoftwareClassesDirectoryShellexCopyHookHandlers

New in RunScanner 1.7.0.0 (Aug 18, 2008)

  • Full unicode support!
  • New layout to fit more items on the screen
  • Removed classic mode and merged it with the expert mode.
  • New and faster scan engine
  • Runscanner now scans all loaded modules by default
  • Runscanner text logfiles are redesigned to better fit in forums
  • Filepaths are no longer converted into lowercase
  • Run files now include all loaded modules
  • Old run files are no longer compatible with the new version.
  • Bug fixed: some incorrect "file not found" fixed for filenames
  • Bug fixed: no description shows for some items
  • Bug fixed: drwtsn32 -p %ld -e %ld -g could not be parsed
  • Fixed error with some unknown datatypes (systemcheck2 error)
  • Fixed error some items could not be deleted when a certain filter was set
  • Added new publishers to the whitelist.
  • Online whitelisting improved
  • History database no longer uses MSaccess (no more mdac errors)

New in RunScanner 1.6.3.0 (Mar 12, 2008)

  • MD5 calculation now uses the windows api for improved speed.
  • Added warning when access denied on reading/writing hosts file.
  • Fixed bug with copying MD5 hashes to clipboard.
  • Fixed bug with incorrect files not found.
  • Fixed bug when fixing some items, the items were fixed but not removed from the selection list
  • Fixed problem with invalid datatype for the internet explorer search page.
  • Added more safe publishers to the list.
  • Added Launch/hijack locations:
  • 153 HKLMSoftwareMicrosoftWindows NTCurrentVersionDrivers32 Midi, Midi1 -> Midi9 (used by the silentbanker worm)
  • 220 HKCUSoftwareClasses*ShellExContextMenuHandlers
  • 221 HKLMSoftwareClasses*ShellExContextMenuHandlers
  • 222 HKCUSoftwareClassesAllFileSystemObjectsShellExContextMenuHandlers
  • 223 HKLMSoftwareClassesAllFileSystemObjectsShellExContextMenuHandlers
  • 224 HKCUSoftwareClassesFolderShellExContextMenuHandlers
  • 225 HKCUSoftwareClassesFolderShellExContextMenuHandlers
  • 226 HKCUSoftwareClassesDirectoryShellExContextMenuHandlers
  • 227 HKLMSoftwareClassesDirectoryShellExContextMenuHandlers
  • 228 HKCUSoftwareClassesDirectoryBackgroundShellExContextMenuHandlers
  • 229 HKLMSoftwareClassesDirectoryBackgroundShellExContextMenuHandlers
  • 230 HKCUSoftwareClassesFolderShellexColumnHandlers
  • 231 HKLMSoftwareClassesFolderShellexColumnHandlers
  • 240 HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerShellIconOverlayIdentifiers
  • 241 HKLMSoftwareMicrosoftWindowsCurrentVersionExplorerShellIconOverlayIdentifiers

New in RunScanner 1.6.1.0 (Jan 3, 2008)

  • Bug fixed: Bitmap image is not valid. (corrupt embedded icon)
  • Bug fixed: malware analysis after import not working in expert mode
  • Bug fixed: Lookup at Runscanner when no MD5 available popupmenu
  • Sub run folders are now only scanned on windows 2000

New in RunScanner 1.5.0.39 (Dec 6, 2007)

  • New features in this version:
  • New design in all modes
  • Layout is now shown correctly for people with "large fonts" enabled
  • Certificates of files are now analysed in all modes for signer/issuer
  • Certificates are now shown as a certificate image in the grid instead of the green/red icons
  • Virusscanner integration with Virustotal (upload file for scanning)
  • Integration with Bit9 FileAdvisor (lookup MD5 hash)
  • Integration with CastleCops (lookup MD5 hash)
  • New Classic mode : This mode is targetted at removing hijacks, it only shows non-whitelisted items and there is an easy "Fix selected items" button, all other "safe" startup items can still be found in the expert mode.
  • Added "Item fixer" tab in expert mode.
  • Added "classic mode / hijack" tab in expert mode.
  • Quick scan is removed in expert mode.
  • New in expert mode : loaded modules analyzer.
  • Warning if windows version is not supported. (Only win2000 or higher is supported)
  • Added drivers with type = 2
  • Disabled drivers and services are now automatically whitelisted in classic mode.
  • Runscanner now finds drivers with undefined imagepath.
  • Scanning is done a bit faster, the most processor intense part of the scan is still calculating the MD5 hashes
  • No internet connection is needed anymore during the scan.
  • Vista : Process killer now shows also protected processes
  • Bug fixes:
  • Fixed bug with corrupt MDAC installation in windows XP (used by history database)
  • Fixed visual bug with screen flash after quit.
  • Fixed bug with EOleSysError on incorrect/corrupt startup shortcuts.
  • Fixed bug with corrupt taskscheduler service.
  • Fixed bug with corrupt .run files.
  • Whitelist added:
  • A list of safe certificate publishers (56)
  • Standard search pages
  • Standard start pages
  • Standard safe zones (microsoft,...)
  • Blacklisted dangerous policies (DisableTaskMgr,DisableRegistryTools,DisableCMD,...)