Обзоры DoesNotBelong 11.4.4

[furtivex]

furtivex updated DoesNotBelong with a new update entry:

Changelog - v10.4.3 (02.08.2026) - v10.5.0 (02.17.2026)

10.5.0 (02.17.2026)
- Database update: Adware.DotDo

v10.4.9 (02.14.2026)

• Database update: Python malware, Rugmi
• Cache cleaning update: NVIDIA caches

v10.4.8 (02.14.2026)
- Database update: LOLMiner

v10.4.7 (02.14.2026)

• Updated antivirus detections
• Database update: Chrome credential stealing extensions, RemotePC Host

v10.4.6 (02.12.2026)
- Bug fix: Fixed issue with tool prematurely closing during Scanning Files stage

v10.4.5 (02.10.2026)
-...

Read the rest of this update entry...

 

[furtivex]

furtivex updated DoesNotBelong with a new update entry:

Changelog: 10.5.0 - 10.6.2

v10.6.2 (03.03.2026)
- Database update - Rugmi
- Removed some unncessary checks
- Sightly improved Registry Scan

v10.6.1 (03.02.2026)
- Miscellaneous logs gathering updated to March 2026
- Removed Sophos Scan & Clean from Miscellaneous log tracking (inactive tool)
- Database update - Rugmi

v10.6.0 (02.27.2026)
- Database update - Rugmi

v10.5.9 (02.25.2026)
- Task whiteliste updated: Microsoft\Windows\WlanSvc\CDSSync

v10.5.8 (02.23.2026)
- Bug fix: belenaEtcher cache is now properly...

Read the rest of this update entry...

 

[furtivex]

furtivex updated DoesNotBelong with a new update entry:

Changelog: v10.6.3 - v10.6.9

v10.6.9 (03.14.2026)
- Database update: Xiansearch

v10.6.8 (03.13.2026)
- Removed false positive: LetsView software

v10.6.7 (03.13.2026)

• Database update - MinerJohn
• Additional cleaning of custom proxies

v10.6.6 (03.11.2026)
- Database update

v10.6.5 (03.07.2026)

• Improvements to Services scan
• Some registry scans related to Win 7 - Win 8.1 have been removed

v10.6.4 (03.07.2026)
- Database update

v10.6.3 (03.06.2026)
- Database update

Read the rest of this update entry...

 

[Sandor]

Уже в нескольких темах по окончании работы программы не создаётся отчёт. Только папка с карантином.
Вот одна, вот вторая.

 

[furtivex]

furtivex updated DoesNotBelong with a new update entry:

Changelog v10.7.0 -> v10.7.6

v10.7.6 (03.28.2026)
- Database update with a focus on WMI hijacks.

v10.7.5 (03.27.2026)
- Database update
- The tool now also attempts to resolve issues with KB5079473. If anomalies are found, they will contain 'KB5079473 bug?'. A fairly thorough network reset is also performed if found and this portion is output to the Miscellaneous section of the log

v10.7.4 (03.26.2026)
- Database update: Rugmi, clearing of proxy settings

v10.7.3 (03.25.2026)
- Database update...

Read the rest of this update entry...

Уже в нескольких темах по окончании работы программы не создаётся отчёт. Только папка с карантином.
Вот одна, вот вторая.

Thank you, Sandor

I am aware of the issue. I've been trying to gather more data. You can track this issue here if interested

 

[Sandor]

У меня лог создался и в корне системного диска и на рабочем столе.
Удивила эта запись:

# DoesNotBelong v10.7.9
...
C:\Program Files (x86)\Kaspersky Lab\KES.12.9.0\avp.exe <-- Killed! Suspicious filepath

Why it is suspicious?

 

[furtivex]

Why it is suspicious?

The tool only knows its valid filepath as [A-Z]:\\Program Files( \(x86\))?\\Kaspersky Lab\\Kaspersky [0-9].*[0-9]\\avp\.exe
I'll include KES. in a future build. I assume it stands for Kaspersky Endpoint Security? Thank you for the report!

Edit: Should be resolved in the current version v10.8.0

 

[Sandor]

I assume it stands for Kaspersky Endpoint Security?

That's right, exactly.

 

[furtivex]

furtivex updated DoesNotBelong with a new update entry:

Changelog v10.7.6 -> v10.8.2

v10.8.2 (03.31.2026)
- Database update - Adware.WorldWideWeb

v10.8.1 (03.31.2026)
- Technician update - The tool will now report if Microsoft Basic Display Adapter was detected to the Miscellaneous section of the log
- Tracking of miscellaneous log files were updated to the month of April 2026

v10.8.0 (03.31.2026)
- Database update - Rugmi
- Antivirus detection update - Quick Heal
- False positive fixed - MacroscopConfig
- Process whitelist improved - Kaspersky related process if KES...

Read the rest of this update entry...

 

[furtivex]

Уже в нескольких темах по окончании работы программы не создаётся отчёт. Только папка с карантином.
Вот одна, вот вторая.

Might be fixed in 10.8.5.
Возможно, это будет исправлено в 10.8.5

 

[furtivex]

furtivex updated DoesNotBelong with a new update entry:

Changelog v10.8.2 -> v10.9.3

v10.9.3 (04.14.2026)
- Optimization update - Files scan speed improved
- Technician update - The tool now lists the present month's FRST and Addition logs and is appended to the Miscellaneous section

v10.9.2 (04.14.2026)
- Database update - +Rugmi

v10.9.1 (04.12.2026)
- Database update - +MrBeast (powershell)
- Language update - Minor fixes to LanguageWord to include parenthesis

v10.9.0 (04.11.2026)
- Database update - +Spyware.PasswordStealer.Gen

v10.8.9 (04.11.2026)
- Database...

Read the rest of this update entry...

 

[Severnyj]

furtivex, maybe add it to the databases?

108 Chrome Extensions Linked to Data Exfiltration and Sessio...

Campaign of 108 extensions harvests identities, steals sessions, and adds backdoors to browsers, all tied to the same C2 infrastructure.

socket.dev

 

[furtivex]

furtivex, maybe add it to the databases?

108 Chrome Extensions Linked to Data Exfiltration and Sessio...

Campaign of 108 extensions harvests identities, steals sessions, and adds backdoors to browsers, all tied to the same C2 infrastructure.

socket.dev

Nice find, thanks. I will add them

Added in v10.9.5 which is live now

 

[furtivex]

furtivex updated DoesNotBelong with a new update entry:

Changelog v10.9.4 -> v10.9.6

v10.9.6 (04.18.2026)
- Database update - +Rugmi, -CCleaner7

v10.9.5 (04.15.2026)
- Database update - +Chrome extensions

v10.9.4 (04.15.2026)
- Database update - +Rugmi

Read the rest of this update entry...

 

[furtivex]

furtivex updated DoesNotBelong with a new update entry:

Changelog v10.9.6 -> v11.0.9

v11.0.9 (05.03.2026)
- Database update - +Rugmi, -Copilot and Cortana traces that are protected

v11.0.8 (05.02.2026)
- Database update - TROJ.BTCMiner.John
- Browser update - Pale Moon (Firefox fork) is now also supported

v11.0.7 (04.29.2026)
- Database update - Minor various
- Many of the Spyware.PasswordStealer.Gen detections are renamed to RISK.NetSupport.Gen. Sorry for the anxiety this may have caused...
- The RISK.NetSupport.Gen heuristics have been updated to also catch .dll...

Read the rest of this update entry...

 

[furtivex]

If anyone is using the tool and is on a Russian, Ukraine, or German operating system.. can I please get some feedback of what's working well, what's broken, etc? I have some additional time to resolve issues and would like to understand where the shortcomings are.

Thank you

 

[furtivex]

furtivex updated DoesNotBelong with a new update entry:

Changelog v11.0.9 - v11.2.8

v11.2.8 (05.22.2026)
- Database update - Minor various

v11.2.7 (05.21.2026)
- Database update - +TROJ.BTCMiner.GoogleUp +RISK.NetSupport.Gen +AdBlock360

v11.2.6 (05.19.2026)
- Database update - Medium various
- Optimization update
- Caches update - Additional Temporary Internet Files folder

v11.2.5 (05.17.2026)
- Database update - +RISK.NetSupport.Gen, +Adware.WorldWideWeb
- Miscellaneous logs update - AdwCleaner logs added

v11.2.4 (05.16.2026)
- Adjusting variables, removed some...

Read the rest of this update entry...

 

[furtivex]

furtivex updated DoesNotBelong with a new update entry:

Changelog v11.2.8 - 11.4.4

v11.4.4 (06.03.2026)
- Database update - +DcomLaunch malware tampering check

v11.4.3 (06.02.2026)
- Database update - Minor various & finetuning
- Cache update - Roblox UniversalApp added - variant of Microsoft Edge WebView2
- Processes (Stage 1) scanner got an update. It should aid by listing the filepath particular processes were located. It will only attempt to close their processes for now. It does not quarantine their files unless it's known by the tool. This should help me add...

Read the rest of this update entry...