Обзор Furtivex Malware Removal Script 4.8.5

[akok]

Это программа, предназначенная для сканирования вашего компьютера на наличие вредоносного ПО, выступающая в качестве дополнительного уровня защиты, дополняя основное антивирусное или защитное программное обеспечение. Основной антивирус может обнаруживать и удалять большинство угроз, но вспомогательный инструмент помогает выявить вредоносное ПО, которое могло остаться незамеченным, обеспечивая дополнительную проверку.

Такие инструменты часто специализируются на обнаружении угроз, которые ваш основной антивирус может не распознать. Они могут использовать различные методы обнаружения, такие как эвристический анализ, сканирование на основе сигнатур или облачные технологии. Эти программы особенно полезны в случаях, когда вы подозреваете, что ваш компьютер заражен, даже если основное антивирусное ПО не сообщает о каких-либо проблемах.

 

[furtivex]

furtivex updated Furtivex Malware Removal Script with a new update entry:

Furtivex Malware Removal Script

• Dutch translation support - Thanks Maxstar
• Microsoft Edge Chromium Cleanup - Push Notifications. Support for up to 3 Profiles
• Microsoft Edge Cache Cleanup - Support for up to 3 Profiles

Read the rest of this update entry...

 

[Phoenix]

Спойлер: кодировка

 

[furtivex]

furtivex updated Furtivex Malware Removal Script with a new update entry:

More Push Notification cleaning

• Support Google Chrome Push Notification removal
• Log output fine tuning

Read the rest of this update entry...

 

[furtivex]

Спойлер: кодировка

Посмотреть вложение 112050Посмотреть вложение 112051Посмотреть вложение 112052

Thank you. I'm going to check it out.

Спойлер: кодировка

Посмотреть вложение 112050Посмотреть вложение 112051Посмотреть вложение 112052

Have you rebooted since running FMRS? For me, the encoding was working properly after a registry patch FMRS implements. So it felt like on first run it's a problem, but subsequent runs it's ok? Thanks for your help, it's my first time trying to make a multi-language support tool. Looking through what you linked me now

 

[furtivex]

furtivex updated Furtivex Malware Removal Script with a new update entry:

ScreenConnect

• Heuristic detections for ScreenConnect misuse
• Heuristic detections for Scheduled Tasks using auditpol.exe

Read the rest of this update entry...

 

[Dragokas]

Have you rebooted since running FMRS? For me, the encoding was working properly after a registry patch FMRS implements. So it felt like on first run it's a problem, but subsequent runs it's ok? Thanks for your help, it's my first time trying to make a multi-language support tool. Looking through what you linked me now

It seems you're displaying UTF8 (65001) text on console set up as 1251 codepage.
To make a proper display, both codepages should match.
E.g.:

No registry fix required.

@echo on
chcp 65001
echo Привет мир
pause

It is, however, may be not applicable for MessageBox. Depending on what exactly code do you execute to display it.
If issue still persists for it, please, write down which code do you use. I can help (7+ years of active batch files coding and lot of tutorials xD).

 

[furtivex]

It seems you're displaying UTF8 (65001) text on console set up as 1251 codepage.
To make a proper display, both codepages should match.
E.g.:
Посмотреть вложение 112083
No registry fix required.

@echo on
chcp 65001
echo Привет мир
pause

It is, however, may be not applicable for MessageBox. Depending on what exactly code do you execute to display it.
If issue still persists for it, please, write down which code do you use. I can help (7+ years of active batch files coding and lot of tutorials xD).

Thanks Dragokas. I'll test it out and let you know I really appreciate your help and expertise

 

[furtivex]

Hi, here's my results with this so far
Inconsistent results on my end from my testing today on 2 different computers and 1 VM

Only the main PC supports cmd.exe, infobox, and log in Cyrillic

However, on Windows 10 PC and Windows 11 VM, I get a working infobox and log output, but the cmd is BLANK. seen here

Спойлер: 1

Whether chcp is 65001 or 855, the results are the same for these 2 computers

it should be like this, but this only works for the 1 computer.

Спойлер: 2

Thanks for your patience

 

[Phoenix]

Спойлер: admin

 

[furtivex]

Спойлер: admin

Посмотреть вложение 112102

The latest version of FMRS includes chcp 866 for operating systems with Russian as the default language. Can you see if it works on your end? Maybe it's because I'm trying to 'spoof' my operating system language that it doesn't work as intended on some of my own computers.

 

[furtivex]

Is it any better with v4.5.2? I got it working for 2 computers consistently here. However, I think it requires Lucida Console, or a similar 'TrueType' font. New concept to me, still reading

 

[Phoenix]

Сейчас есть только 4.3.7 для скачивания. Скрипт не воспринимает шрифт consolas. В lucida console всё отображается.

 

[furtivex]

furtivex updated Furtivex Malware Removal Script with a new update entry:

Language Support + Whitelists

• Polish language adjustments / improvements -- thanks picasso
  [*]Updated Task and Process whitelist
• More Language support for different operating system languages.
• Minor bug fixes

Read the rest of this update entry...

 

[furtivex]

Сейчас есть только 4.3.7 для скачивания. Скрипт не воспринимает шрифт consolas. В lucida console всё отображается.

That should work. The download link from the Resource should automatically download the latest version. At least that's how it is behaving for me. Thank you for trying the tool

 

[Phoenix]

Спойлер: download

Only the latest version is available for download = 4.3.7! 4.5.3==4.3.7

Спойлер: hash

 

[regist]

@Phoenix по этой ссылке https://furtivex.net/FMRS.exe
Что у тебя скачивается?
Правильный
Имя: FMRS.exe
Размер: 1148228 байтов : 1121 KiB
CRC32: 460256D2
CRC64: BCDD2EC33F0D5F99
SHA256: 0aaabfd6a9f5eb4cf87918ed8247917b4b75e6d154364bdf0d84ac10ce275029
SHA1: 5d6be315eba6413729698cbd26261feb0a32f60f
BLAKE2sp: bbfb6f282e5ee4f3b19756f6fbeb9b6ff06352702ec53ff539b241845653450e
XXH64: AE6E1B60DE4B8F8C
MD5: 74dc4b81c585961f3e14d8bc10ebe782

 

[Phoenix]

@regist
==================================================
Filename : FMRS (7).exe
MD5 : 784472dd0803de9b137f05f2844e7b48
SHA1 : cdb73cb468333a9ff6c1b9ffa2d48e7ac921060f
CRC32 : 594a2dd4
SHA-256 : 59c7eb7d0311d381ccdb005cf71c64469d75b21091a201e23caadb3b3ec493e3
SHA-512 : 1689ab703f3771b72b8d18259675f850aa56c3e6539768583e4e848c9f2569137681e3b61b01c6c3c20d0375e6aea25a0ddd49d71f4cf1da2b21491fa4f3ebc8
SHA-384 : 13c8de19d2239afeaccb8c2fe7610be6038fc5847f9bfd0f48a959073a2f39fa5cf03ae3e9f6e44d934ebb14ad3973d8
Full Path : C:\Users\XenOS\Downloads\FMRS (7).exe
File Version : 4.3.7
Product Version : 4.3.7
Modified Time : 05.01.2025 19:24:01
Created Time : 05.01.2025 19:24:01
Entry Modified Time: 05.01.2025 19:24:01
File Size : 1 146 474
Identical : 1
Extension : exe
File Attributes : A
==================================================

Странно, wget скачал 4.5.5
Last-Modified: Sun, 05 Jan 2025 08:13:03 GMT
ETag: "1185ff-62af114b5f36a"
Accept-Ranges: bytes
Content-Length: 1148415

 

[regist]

Странно, wget скачал 4.5.5

Что-то кеширует у тебя. Тебе лучше знать что именно, а так пока можешь проверить в другом браузере или в приватном режиме.

 

[furtivex]

I can start renaming the file instead of overwriting it on the webserver. Not sure if it will help. I've experienced this as well. v4.5.7 available