RunScanner is a completely free windows system utility which scans your system for all configured running programs. You can use runscanner to detect autostart programs, spyware, adware, homepage hijackers, unverified drivers and other problems.

For beginner and expert users

Beginner mode:

• "Safe mode" : no changes can be made by the user.
  
• Targetted at novice computer users that want support from a forum or from a malware specialist.
  
• Beginners can upload or post a text of binary ".run" file. Experts can load it up into runscanner, examine it for malware and mark entries for removal and repost it. The beginner can reload the file and it will automatically make entries for removal.
  
  Expert mode:
  
• Targetted at expert users, this is the most powerful mode.
  
• All delete, filter, export, lookup ... features are available.

Easy to use | Log Analysis made Easy | Malware Removal Abilities | Process Manager | Hosts File Editor | MD5 Hash Calculator | Regedit jump - Explorer jump | History database with backup / restore | Online Lookup | Online malware analysis

Revisions History Log | More Info & Download: RunScanner.net

Click to view attachment

RunScanner version 1.6.1 released
21 December 2007

Changelog:
Bug fixed: Bitmap image is not valid. (corrupt embedded icon)
Bug fixed: malware analysis after import not working in expert mode
Bug fixed: Lookup at Runscanner when no MD5 available popupmenu
Sub run folders are now only scanned on windows 2000

Info - Download»

Runscanner version 1.6.3.0 is released.
Download at http://www.runscanner.net

Changelog 1.6.3.0

• MD5 calculation now uses the windows api for improved speed.
• Added warning when access denied on reading/writing hosts file.
• Fixed bug with copying MD5 hashes to clipboard.
• Fixed bug with incorrect files not found.
• Fixed bug when fixing some items, the items were fixed but not removed from the selection list
• Fixed problem with invalid datatype for the internet explorer search page.
• Added more safe publishers to the list.
• Added Launch/hijack locations:
  • 153 HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32\ Midi, Midi1 -> Midi9 (used by the silentbanker worm)
  • 220 HKCU\Software\Classes\*\ShellEx\ContextMenuHandlers
  • 221 HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers
  • 222 HKCU\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers
  • 223 HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers
  • 224 HKCU\Software\Classes\Folder\ShellEx\ContextMenuHandlers
  • 225 HKCU\Software\Classes\Folder\ShellEx\ContextMenuHandlers
  • 226 HKCU\Software\Classes\Directory\ShellEx\ContextMenuHandlers
  • 227 HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers
  • 228 HKCU\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers
  • 229HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers
  • 230 HKCU\Software\Classes\Folder\Shellex\ColumnHandlers
  • 231 HKLM\Software\Classes\Folder\Shellex\ColumnHandlers
  • 240 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers
  • 241 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers

Info - Download »

RunScanner 1.7 released
(now with full unicode support)
17 August 2008
http://www.runscanner.net/why-runscanner.aspx

• Full unicode support
• New layout to fit more items on the screen
• Removed classic mode and merged it with the expert mode.
• New and faster scan engine
• Runscanner now scans all loaded modules by default
• Runscanner text logfiles are redesigned to better fit in forums
• Filepaths are no longer converted into lowercase
• Run files now include all loaded modules
• Old run files are no longer compatible with the new version.
• Bug fixed: some incorrect "file not found" fixed for filenames
• Bug fixed: no description shows for some items
• Bug fixed: drwtsn32 -p %ld -e %ld -g could not be parsed
• Fixed error with some unknown datatypes (systemcheck2 error)
• Fixed error some items could not be deleted when a certain filter was set
• Added new publishers to the whitelist.
• Online whitelisting improved
• History database no longer uses MSaccess (no more mdac errors)

Changelog Version 1.8.1.0

• Enhanced whitelisting
• Minor bug fixes

Changelog 1.8.0.0

• Switched to Delphi 2009 unicode
• Run files have a new slightly smaller format
• Added new certificates to the whitelist
• Added filename lookup to systemlookup.com
• Removed Castlecops.com search

Bugs fixed :

• Fixed several unicode issues
• Canvas does not allow drawing error
• Online analysis sometimes not working
• Fixed several access violation errors
• AppInit_Dlls value now recognizes spaces and commas as delimiter. (used to hide malware)
• Fixed bug where some startup items with parameters could not be restored
• Fixed bug when some important registry settings could not be restored (LSA authentication packages)

Added Launch/hijack locations:

• 250 HKCU\Software\Classes\Directory\Shellex\DragDropHandlers
• 251 HKLM\Software\Classes\Directory\Shellex\DragDropHandlers
• 252 HKCU\Software\Classes\Directory\Shellex\PropertySheetHandlers
• 253 HKLM\Software\Classes\Directory\Shellex\PropertySheetHandlers
• 254 HKCU\Software\Classes\Directory\Shellex\CopyHookHandlers
• 255 HKLM\Software\Classes\Directory\Shellex\CopyHookHandlers

Runscanner : Freeware startup and hijack analyzer
16 September 2009 : version 1.9.0.9 released
http://www.runscanner.net/download.aspx

Warning: Runscanner requires advanced knowledge about Windows. If you delete an item, without knowing what it is, it can lead to major Windows problems. If you are not sure what to delete, post your Run file to a helper forum.

Changelog:

• Enhanced whitelisting
• Windows 7 support (32 bit)
• Run files now include the list of installed software on the computer.
• Minor bug fixes