WinMHR Malware Security Tool

[Ritho]

Internet security research group Team Cymru (pronounced kum-ree) has finally re-released their free tool called WinMHR. It is based on a vast malware hash registry and came out earilier this year, but was pulled shortly after because of a major bug. They have finally got it fixed and it is once again available for download.
I have not found information on actual detection rates.
http://www.team-cymru.org/Services/MHR/WinMHR/

I have been using their Firefox download hash check plugin for sometime, and it has worked without problems.

http://www.team-cymru.org/Services/MHR/FirefoxMHR/

I do find the news on their site very informative, and it seems like they are really on top of their game.

This sounds really cool http://www.team-cymru.org/Services/battle.html but is only available to law enforcement agencies.

[MidnightCowboy]

Looks like a really useful tool but on my XPSP3 system began using CPU @ 30%. Rebooted and it was no different so unfortunately I've had to remove it
Strange as this PC doesn't even have an AV installed currently and there's nothing else I can think of that would cause a conflict.

[garth]

Originally Posted by MidnightCowboy

Looks like a really useful tool but on my XPSP3 system began using CPU @ 30%. Rebooted and it was no different so unfortunately I've had to remove it

Same as MC except my cpu just jumped to around 45% - 50%, and 90%+ while scanning. Using Win7. In fact, it's now thrashing my AMD dual core at 100%....nothing i've run on this thing has done that until now. Gonna have to take it off again.

later...
@MC
Apologies for adding to this post again but how exactly did you remove this thing? As far as Revo and Windows uninstaller are concerned it doesn't exist on my machine. I even searched the registry for it and can find no trace. Weird.

[MidnightCowboy]

This actually was the tipping point for me. In a way I enjoy researching security programs but on the other hand it all takes up so much time.

Managed to get my spare machine back into action so this now has a wobbly install of Windows 7 on it which I will use with my wireless modem when the cable connection is down. My main PC which won't connect using wireless (damaged card) now contains PCLinuxOS from which I am writing this

So, no more need for firewalls, AV's or other types of bug hunters for MC

[Ritho]

Man! MC changes operating systems as often as he changes his socks!

[Ritho]

Same as MC except my cpu just jumped to around 45% - 50%, and 90%+ while scanning. Using Win7. In fact, it's now thrashing my AMD dual core at 100%....nothing i've run on this thing has done that until now. Gonna have to take it off again.

Sorry to hear this. If I remember right, the bug they were supposedly fixing when they pulled the download the first time was causing a similar problem with system resources.

The firefox plugin is still worth a shot though, since it only checks downloads against the online registry when you request it to.

[garth]

Originally Posted by Ritho

The firefox plugin is still worth a shot though, since it only checks downloads against the online registry when you request it to.

Thanks Ritho i'll give that a go
I worked out why i couldn't get rid of it....i installed it in the sandbox without realising and now i feel quite silly

[MidnightCowboy]

Originally Posted by Ritho

Man! MC changes operating systems as often as he changes his socks!

Haven't worn socks since I left the UK!

[eyeb]

i tried the firefox addon :S wished it autochecked and wasn't manual...
another thing is i dont have download box opening on download and no history so once downloads are done, i got no time to click to check before its off list lol