Program Features
Total Page:16
File Type:pdf, Size:1020Kb
MCShield is an antimalware tool designed to prevent infections transmitted via removable drives (USB flash drives, memory cards (cameras, phones, GPS devices…), external hard drives). Program features: detection of newly connected drives and automatic scanning; automatic removal mode which makes use of this software possible to everyone regardless of their operating system and malware related knowledge; interactive mode for advanced users who desire more control over the scan process; ultra fast scanning of root and certain special folders on the hard drives and adaptive scanning of removable drives; on demand drive scanning; advanced general and infection specific heuristics; automatic database and program updates; completely negligible impact on system performance; optimal functionality without any additional settings; possibility to modify the programs behavior according to specific user’s needs; various color schemes for the user interface; creation of backup copies of everything that program detects and deletes; display of real-time global statistics and news; localization (18 languages at the moment); and more… The largest part of MCShield’s detections is based on generic routines designed for detection of certain prevalent worm families and heuristical analysis of drives’ contents. The detection level is additionally improved through mathematical signatures, known bad file and folder names databases and digital signature checks using our database of trusted publishers. Usage safety and prevention of false detections is performed through multiple verification of legitimacy of files performed inside the detection routines and, additionally, by cross-referencing the scan results with the legitimate files database. To ensure the optimal protection level without decrease in functionality, MCShield enables it’s users to add their own files to the white list – items in this list shall never be detected regardless of how suspicious the program might consider them. Program’s main components Real-Time Monitor – is responsible for background monitoring and detection of new drives. When a new drive is detected, the Monitor will launch the Drive Scanner and instruct it to perform the scan. Monitor’s icon ( ) is placed in the notification area (“system tray”). Right click the icon to access the tray menu: Control Center – opens the Control Center; Stop the scan – stops the currently running scan (available only during the scan); Disable/Enable protection – disables/enables the protection; Game Mode – disables Monitor’s notifications; Update – performs an update; Exit – closes the Monitor and disables the protection. Left double click on the tray icon opens the Control Center. Drive Scanner – is responsible for drive scanning, detection and removal of malware. While the scan is in progress, the tray icon will be animated (rotation around the vertical axis) to let you know the program is working. If the scan takes more than 10 seconds, the Scanner may provide additional notifications in the tray area. When the scan is finished, the program will inform you that no malware was detected (if the drive was clean) or provide a log of all actions that have been taken (in case of infection). Control Center – enables you to choose the language and visual style, adjust the settings, perform an update, access the quarantine and the white list. Also, the Control Center provides access to statistics, news from our website and additional information about the program. Version 3 of the program comes with a brand new user interface featuring new tabs, options and can be customized by selecting one of the 4 visual styles. The following is a screenshot of Control Center using “MCS Blue” theme. Of course, you won’t see the red rectangles; they’re just there to help us explain different elements on the Status tab. Other visual styles: Status tab: our welcome screen providing diverse functions: 1 : the tab area. You’ll see this on all tabs. Just click to open the desired tab 2 : main status area. This is an active area. By clicking the graphical element (✔,−,✖) you can: enable / disable protection or start the Real-Time Monitor enable / disable automatic updates enable / disable MCS Cloud functions ✔ means the protection / option is enabled − means the protection / option is disabled (not recommended) ✖ means the Real-Time Monitor is not running (not recommended) 3 : this is an active area; click the icon to open our Facebook page, website or to send us an email 4 : “Info bar” provides information about your operating system, online status and selected settings: or - you are using 32 or 64 bit operating system or - you are using Windows 7 (or older) or Windows 8 (or newer) operating system - program has access to www.mcshield.net (grey icon = no access to our website) - program is set to start with Windows (grey = no autostart) - initial scan of hard drives is enabled (grey = hard drives are not scanned when program starts) - initial scan of flash drives is enabled (grey = flash drives are not scanned when program starts) - automatic removal mode is enabled (grey = interactive mode is enabled) - quarantine is enabled (grey = quarantine is disabled) - paranoid mode is enabled (grey = paranoid mode is disabled) - game mode is enabled (grey = game mode is disabled) 5 : Donate button (just in case you wish to support further development of MCShield) General tab: Language – language selection Visual style – visual style selection Run MCShield when Windows starts – starts the program with Windows (recommended) Allow MCS Cloud functions – enables statistics, news and reporting (see: MCS Cloud section) Add “Scan with MCShield” to drives’ menu – adds an option to the drives’ right click menu (Windows Explorer context menu) that can be used to manually start a scan (administrative privileges are required to change this option – a log in window or an UAC prompt might appear) Don’t show initial notifications – disables notifications that appear when the program starts Don’t show notifications about clean drives – disables notifications about clean drives Don’t show notifications about infected drives – disables notifications and prompts about infected drives Don’t show notifications during the scan – disables notifications that may appear during the scan Don’t prompt to show logs – disables prompts about whether the log is to be shown or not Always show the log file in case of infection – if malware was found, show the log file directly Defaults – selects the default settings on this tab Scanner tab: When MCShield starts, scan all: Flash drives and memory cards – enables initial scan of all flash drives Hard disk drives – enables initial scan of all hard drives Perform in-depth signature scan… – enables signature scan of all files on the drive (otherwise: scan only files in the root of the drive) … but only in case of infection – enables signature scan of all files on the drive but only if malware has already been found Enable extended heuristics – enables the most powerful feature of the Drive Scanner (highly recommended) Enable paranoid mode – instructs the Drive Scanner to be extremely aggressive to any executable code (use with caution and only if you suspect an infection and don’t mind a few false positives) Delete all suspicious files – deletes even only suspicious files (normally, they are just renamed) Always unhide items on removable drives – make files and folders on removable drives visible (normally not necessary, the program will do it automatically in case it detects specific malware) Interactive mode – enables interactive removal mode Don’t use quarantine – disables the quarantine (not recommended) Don’t scan autorun.inf – instructs the Drive Scanner to ignore all autorun.inf files Default – selects the default settings on this tab (recommended) Fastest – selects the settings that provide the fastest scan (note: this may decrease detection rate) Bulletproof – selects the settings that provide maximum protection (normally, not recommended because the scans take longer time and false positives occur more often) Update tab: Enable auto update – enables automatic updates (recommended; note: the Real-Time Monitor must be running for this to work) Update every (hours) – sets the interval for automatic updates Notify when new database is installed – shows a notification when database is updated Use proxy – instructs the program to use proxy server to perform updates Proxy address – the address of the proxy server to use Proxy port – port to use Username – username to use when working with the proxy server Password – password to use when working with the proxy server Update – performs an update Quarantine tab: List of items in the quarantine. Right click an item and select a desired action (you can select multiple items). Refresh – refreshes the list Restore – restores the selected item(s) Delete – deletes selected item(s) Delete all – empties the quarantine Whitelist tab: List of your files that the program should ignore. Right click the list and select a desired action. Add item – choose this to add a new file to the list Remove item – remove the selected item from the list Remove all – empty the list Logs tab: Here you can view and manage all logs made by MCShield. Use the horizontal tabs at the top to select a log: Use the buttons at the bottom to perform actions: Save – save the currently displayed log to your Desktop as MCShield-Log_Name (ex: MCShield- AllScans.txt)