RunScanner - HiJack Analyzer

[Anupam]

I saw this program on Freewarefiles and decided to try it. It looks good to me.

According to the RunScanner site :

RunScanner is a freeware windows system utility which scans your system for all running programs, autostart locations, drivers, services and hijack points.
You can use Runscanner to detect changes and misconfigurations in your system caused by spyware, virusses or human errors.

There are other hijack analyzers too, the popular one being HiJackThis from Trend Micro. Other is A2HiJack Free, which also comes as a part of Emsisoft Anti-malware.

I found RunScanner offers a lot of information which could prove very useful for an experienced user.

There are two modes in the program : Beginner and Expert.

In the Beginner Mode, nothing can be changed, but results can be uploaded to malware specialist forum.

In the Expert Mode, scan can be done, and other features are activated to perform changes.

Looks like a useful software to have.

[MidnightCowboy]

Yes, looks good but it might be worth emphasizing this warning from their site:

Warning: Runscanner requires advanced knowledge about Windows. If you delete an item, without knowing what it is, it can lead to major Windows problems. If you are not sure what to delete, post your Run file to a helper forum

[Anupam]

Thanks for that MC. I should have expanded about the beginner mode more. Beginner Mode is for the inexperienced users. Here is what the site says about it :

Beginner mode
This is for novice users that want to do a scan and upload their results to a malware specialist forum.

So, inexperienced users should use the beginners mode, and take help of specialists by sending them the run file.

[26Dolphins]

Hi,
Just checked it out on Win XP. It does look interesting and provides a lot of info.
Maybe too much.
I got a log listing (in red!) a long series of missing drivers (.sys), which I shouldn't have anyway, like for SCSI, RAID, Fibre Channel, Compaq, Toshiba, Promise Technology and more, even for Windows 2000 & Vista.
So, it looks like the app compares your system to a whitelist and displays in red any differences found?
Maybe I got it all wrong.

Originally Posted by Anupam

...
So, inexperienced users should use the beginners mode, and take help of specialists by sending them the run file.

Given that the results in the log can be quite intimidating to inexperienced users, maybe they shouldn't use it at all before advancing their knowledge of Windows?


Here's a simpler alternative, FreeFixer
http://www.freefixer.com/
Like HiJackThis, but one can easily recognize if what's listed should be there or not.
If in doubt, there's an option to upload it for more info.

Cheers.

[Anupam]

It shows red entries for which it says "File not found". So, I think some application must have installed those files, and when the application was uninstalled, those registry entries, or files got left behind. This is the only explanation I have, as per myself.

Yes, the software provides quite a lot of info, maybe too much as you say. I found it to be more of a useful tool for experienced users.
But, for inexperienced users too, they have made it useful by providing them with Beginner Mode, where they absolutely cannot modify anything, but can upload the run file to help forums. So, its useful for inexperienced users too.

I had the FreeFixer software, but I had forgotten all about it. Thanks for reminding me about it . Yes, it is more useful I think. It presents the information in a clear, organized way. Also, it marks each entry with green, if its in the whitelist. FreeFixer is also very useful tool.

The only drawback is that it takes too long to scan. Other than that, its quite useful.

[bo.elam]

Some of those "file not found" are actually files that are used by the system
so they should not be deleted. For example, Changer, NAVLOGON, PCIDUMP.
There are about 12 files that are like that, so be very careful if you delete
something. I use runscanner to see changes from time to time but when
I started using it, I did investigate about those files and that's what I
came out with.

Bo

[Anupam]

Thanks Bo, for the information.