New
#51
Hi, I just wanted to give a quick heads-up on the drivers/services that SAS uses/installs...
SAS Core Service - this is a slave process that SAS uses to perform actions for which the current user does not have permission (i.e. Limited User or Admin User with UAC enabled).
SASKUTIL - this will give SAS some additional permissions that the core service is unable to enable (like rootkit detection).
SASDIFSVC - this will delete files that were detected as threats when the computer is restarting. It happens very early in the boot process, before something can re-create itself.
The two drivers do nothing while the computer is running, the core service does nothing unless SAS is running... they're just installed to be used when needed.
Also, the data System Investigator sends to our whitelist server is an MD5 hash of the file data, the filename and your vote selection if you've voted. The results contain only executable program files (no documents, images, etc) and we tokenize the folders to remove the user's name from the path if needed (i.e. C:\Users\Dave\Program.exe turns into %UserProfile%\Program.exe). This data is completely anonymous, your privacy is very important to us. This minimum amount of information is needed for us to research items to whitelist.
Welcome to Seven Forums Dave. Thanks for contributing to this thread. It's good to have someone from the company here. A Guy
Thanks for the welcome; I'm not too active on forums, but I'll chime in if I spot a question that I can answer.
Found this thread while searching google for feedback on the new System Investigator tool. This feature was my idea and design so I'm interested to hear how it's doing out in the wild.
Yep mate I have been using it for some time now after our late Gary put me onto it ADW and SAS .
I only usually use the Emergency and Command line scans with Emsisoft as they pick up the majority of the rubbish and to be honest MBAM hardly picks up a thing - mind you I am running it real time with Kaspersky.
As a by the by my own doctor who I have had a working relationship in the past swears by the Emsisoft paid for software.
But for on call scanners I still reckon this is the best listing around.
Probably the Best Free Security List in the World - Part I They have changed the particular link to this but it covers just about everything. They also have other security stuff ie for rookits and some in depth scanning programs too that I have used on occasion etc etc. It is one of my main bookmarks when I am scratching around re malware stuff and a mile of really useful links.
Welcome to SevenForums SASDave,
Love the product here's an avatar if you want to use it :)
Attachment 329488
Last edited by ThrashZone; 22 Feb 2015 at 19:58.
Sorry Dave please forgive the manners but welcome and I do like the new GUI and it seems to be so much faster than it was before.:)
John