Continues development for the improvement of features of Network

Transcription

Continues development for the improvement of features of Network
Continues development for the improvement of features of Network Malware Cleaner,
yield a more powerful version of EMCO Network Malware Cleaner that provides the
flexibility of creating custom signatures. This means that you can define your custom
scan criteria for searching a signature. Built-in Custom Signature builder makes signature
definitions fast and easy. You can specify a file name or a version of a file, search for
existence of a directory, registry key exist, registry value exist, registry values/data exist
or application installed in Add/Remove. You can also set different actions to be taken if a
selected signature is found on a machine.
This new feature is very useful in case when you need to remove a virus infection
manually. It could also be helpful when you need to remove some extra file or registry
settings or directories created by some Adware or some unknown tool.
You can add following items to your custom signatures:
•
•
•
•
•
•
•
•
File Exists
File Version Exist
File MD5 Exist
Directory Exist
Registry Key Exist
Registry Value Exist
Registry Value/Data Exist
Application Installed in Add/Remove
We will discuss each of above mentioned item in detail in the next sections.
Adding File Exist Option
To create a custom signature:
To create a custom signature in EMCO Network Malware Cleaner; perform the following
steps:
1. Select Add/Edit Custom Signatures menu item under Create Custom
Signatures menu.
2. Custom Signatures Database dialog box will appear on the screen.
3. Click the Add button to add the required option.
4. Each one of the above options is discussed in detail in next section.
Adding File Exist option
To add File Exist option:
To add File Exist option, perform the following steps:
1. Click Add button on the Custom Signatures Database, a popup menu will
appear on the screen.
2. Click File Exist menu item under add
3. File Exist Dialog box will appear on the screen.
4. Type in the name of your signature in the Name textbox.
5. Type in the path of the file in the Path to File.
6. Click Assign Action button.
7. Actions dialog box will appear on the screen.
8. Select the required action from the Actions drop down list.
9. The added action will appear on the Action Info.
10. To add, multiple actions select you actions that you want to add; one by one from
the dropdown list. Click Add button to add your actions.
11. Click Add button on the File Exist dialog box.
12. Your added signature will appear in the custom signatures list.
Adding File Version Exist option
To add File Version Exist option:
To add File Version Exists option, perform the following steps:
1. Click Add button on the Custom Signatures Database, a popup menu will
appear on the screen.
2. Click File Version Exist menu item under add
3. File Version Exist dialog box will appear on the screen.
13. Type in the name of your signature in the Name textbox.
4. Type in the location of the program in the Path to File textbox.
5. Type in the version of the program in the Version textbox.
6. Click Assign Actions button.
7. Actions dialog box will appear on the screen.
8. Select the required action from the Actions dropdown list.
9. Click the Add button to add your actions.
10. Click the Add button on the File Version Exist dialog box.
11. Your added signature will appear in the custom signatures list.
Adding File MD5 option
To add File MD5 Exist option:
To add File MD5 Exists option, perform the following steps:
1. Click Add button on the Custom Signatures Database, a popup menu will
appear on the screen.
2. Click File MD5 Exist menu item under add
3. File MD5 Exist dialog box will appear on the screen.
4. Type in the name of your signature in the Name textbox.
5. Type in the location of the file in the Path to File textbox.
6. Type in the MD5 value in the MD5 Value textbox.
7. To Fetch MD5 value from a file click Fetch MD5 button and select a file.
8. Click Assign Action button.
12. Actions dialog box will appear on the screen.
13. Select the required action from the Actions dropdown list.
14. Click the Add button to add your actions.
15. Click the Add button on the File MD5 Exist dialog box.
16. Your added signature will appear in the custom signatures list.
Adding Directory Exist Option
To add Directory Exist option:
To add Directory Exist option, perform the following steps:
1. Click Add button on the Custom Signatures Database, a popup menu will
appear on the screen.
2. Click Directory Exist menu item under add
3. Directory Exist dialog box will appear on the screen.
4. Type in the name of your signature in the Name textbox.
5. Type in the location of the directory in the Path to the Directory textbox.
6. Click Assign Actions button.
7. Actions dialog box will appear on the screen.
8. Select the required action from the Actions dropdown list.
9. Click Add button to add your actions.
10. Click Add button on the Directory Exist dialog box.
11. Your added signature will appear in the custom signatures list.
Adding Registry Key Exist
To add Registry Key Exist option:
To add Registry Key Exist option, perform the following steps:
1. Click Add button on the Custom Signatures Database, a popup menu will
appear on the screen.
2. Click Registry Key Exist menu item under add
3. Registry Key Exist dialog box will appear on the screen.
4. Type in the name of your signature in the Name textbox.
5. Select the root registry key from the Root Key dropdown list.
6. Type in the registry key in the Registry Key textbox.
7. Click Assign Actions button.
8. Actions dialog box will appear on the screen.
9. Select the required action for the Actions dropdown list.
10. Click Add button to add your action.
11. Click Add button on the Registry Key Exist dialog box.
12. Your added signature will appear in the custom signatures list.
Adding Registry Value Exist option
To Add Registry Value Exist option
To Add Registry Value Exist option, perform the following steps:
1. Click Add button on the Custom Signatures Database, a popup menu will
appear on the screen.
2. Click Registry Value Exist menu item under add
3. Registry Value Exist dialog box will appear on the screen.
4. Type in the name of your signature in Name textbox.
5. Select the root key from the Root Key dropdown list.
6. Type in your key in the Registry Key textbox.
7. Type in the value of the registry key in the Registry Value textbox.
8. Click Assign Actions button.
9. Actions dialog box will appear on the screen.
10. Select the required action from the actions drop down list.
11. The added action will appear on the Action Info.
12. To add, multiple actions select you actions that you want to add; one by one from
the dropdown list. Click Add button to add your actions.
13. Click Add button on the Registry Value Exist dialog box.
14. Your added signature will appear in the custom signatures list.
Adding Registry Value/Data Exist Option
To add Registry Value/Data Exist
To add Registry Value/Data Exist, perform the following steps:
1. Click Add button on the Custom Signatures Database, a popup menu will
appear on the screen.
2. Click Registry Value/Data Exist menu item under add
3. Registry Value/Data Exist dialog box will appear on the screen.
4. Type in the name of your signature in the Name textbox.
5. Select the root key form the Rook Key dropdown list.
6. Type in the registry key in the Registry Key textbox.
7. Type in the registry value in the Registry Value textbox.
8. Type in the registry data in the Registry Data textbox.
9. Click Assign Actions button.
10. Actions dialog box will appear on the screen.
11. Select the required action from the Actions drop down list.
12. The added action will appear on the Action Info.
13. To add, multiple actions select you actions that you want to add; one by one from
the dropdown list. Click Add button to add your actions.
14. Click Add button on the Registry Value/Data Exist dialog box.
15. Your added signature will appear in the custom signatures list.
Adding Application installed in Add/Remove Option
To add Application installed in Add/Remove:
To add Application installed in Add Remove, perform the following steps:
1. Click Add button on the Custom Signatures Database, a popup menu will
appear on the screen.
2. Click Application installed in Add/Remove menu item under add
3. Application Add/Remove dialog box will appear on the screen.
4. Type in the name of your signature in the Name textbox.
5. Type in the name of your application in the Application Name textbox.
6. Type in the application version in the Application Version textbox.
7. Click Assign Actions button.
16. Actions dialog box will appear on the screen.
17. Select the required action from the actions drop down list.
18. The added action will appear on the Action Info.
19. To add, multiple actions select you actions that you want to add; one by one from
the dropdown list. Click Add button to add your actions.
20. Click Add button on the Applications in Add/Remove dialog box.
21. Your added signature will appear in the custom signatures list.