« 
 »
Feb 22 2008

Malware Search – 0.7.2

Posted by GravityGripp in Malware Search

Well since I’m on a roll from yesterday, I figured I’d go ahead and add some more databases and fix a few more bugs and what not, so I have uploaded 0.7 for testing. I will not push this version until I feel that it won’t cause problems like the last time ;) . So if you guys could test it out, I would appreciate it.

Here is a few of the things I’ve added:

  • Version 0.7

    • I’ve also fixed some minor bugs and re-wrote some parts of it to try and be a little more efficient and easier to add new databases in the future.

    Thanks for your time.

    Edit: 0.7.1 fixes and issue with ThreatExpert.
    Edit: 0.7.2 changes the way the Microsoft DLL search is handled. Thanks Corrine.

    Download: [download#1]

    This entry was posted on Friday, February 22nd, 2008 at 4:54 pm and is filed under Malware Search. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

    2 Responses to “Malware Search – 0.7.2”
    1. Corrine says:
      February 23, 2008 at 2:18 pm

      Its working! :)

      No problems with Whois, Process Library or TuxMaster’s custom Google searches.

      Thank you for all those additions as well as my suggested addition of Microsoft DLL Search. Any chance the Microsoft DLL Search could be or include the option for “By File Only”? http://support.microsoft.com/dllhelp/?dlltype=file&l=55&alpha=&S=0&x=0&y=0

      For example, when searching xrxwiadr.dll by OS using Windows XP SP2, no results are found. However, when searching “By File Only” the search yields the following results:

      http://support.microsoft.com/dllhelp/?dlltype=file&l=55&alpha=xrxwiadr.dll&S=1&x=10&y=11

      Come to find out, the MS listing has that dll under XP Pro and XP SP1 but not SP2: http://support.microsoft.com/dllhelp/default.aspx?l=55&fid=41340

      As a result, a search by XP SP2 as seen in the HJT log would have missed the correct finding.

      Reply
    2. Corrine says:
      February 23, 2008 at 8:48 pm

      “0.7.2 changes the way the Microsoft DLL search is handled.”

      Beauiful! Thank you.

      Reply
    3.  
    Leave a Reply