Version history for RogueKiller (32/64 bit)
<<Back to software description
Changes for v13.1.8.0 - v13.1.9.0
- - Fixed marketing notification, now won't show at startup after first time
- - Updated to core 3.0.7
- * Fixed crash in notifications engine
- * Fixed COM initialization in real time services
- * Fixed Scanner queue initialization
- * MSHTA and WScript detections
- * Minor Bug fixes
Changes for v13.1.7.0 - v13.1.8.0
- - Updated to core 3.0.6
- * Bug fixes
Changes for v13.1.6.0 - v13.1.7.0
- - Updated to core 3.0.5
- * Fixed WebScanner mitigation
- * Disabled PUM.StartMenu for RogueKiller
- * Fixed Appdata scan duplicate
- * Fixed LocalAppdata scan duplicate
- - Fixed an issue with renewal links
Changes for v13.1.4.0 - v13.1.6.0
- - Updated to core 3.0.4
- * Added Firefox registry addons search
- * Fixed registry items duplicates on scan
- - Fixed translations
- - Removed tray icon in portable version
- - Fixed freeze on custom scan selection
- - Fixed autostart minimize on Free version
- - Fixed autostart initial state
- - Minor fixes
- V13.1.5 02/18/2019
- =================
- - Updated to core 3.0.3
- * Added ability to read encrypted signatures packages (AV detection mitigation)
Changes for v13.1.1.0 - v13.1.4.0
- - Updated to core 3.0.2
- * Fixed a crash in ZIP module
- * Fixed an issue in Folder creation (preventing creating working directory when executing from non system drive)
- * Now VT.Unknown is not treated as a threat anymore
- * Now updater runs installer with /silent
- - Updated shop links to use download API
- - Updated marketing notification from every 1 hour to every 3 hours
Changes for v13.0.15.0 - v13.0.20.0
- - Updated to core 2.2.2
- * Fixed an issue with installer and updater/DLL - Part 2
- * Fixed possible crash on File IO operations
Changes for v12.12.8.0 - v12.12.9
- - Added detections
- - Update Korean translation
Changes for v12.11.31.0 - v12.12.3.0
- - Added detections
Changes for v12.11.27 - v12.11.29.0
- - Added detections
- - Fixed Windows Defender FP
Changes for v12.11.25.0 - v12.11.27
- - Fixed potential issue with "device not found, insert disk" messages
- - Added detections
Changes for v12.11.23.0 - v12.11.24.0
- Added detections
Changes for v12.11.20.0 - v12.11.23.0
- Added detections
Changes for v12.11.19 - v12.11.20.0
- Added detections
Changes for v12.11.14.0 - v12.11.16
- Added detections
Changes for v12.11.12.0 - v12.11.14.0
- - Added detections
- V12.11.13 09/04/2017
- =================
- - Added detections
- - Added msiexec handler to pathparser
Changes for v12.11.11.0 - v12.11.12.0
- - Added detections
Changes for v12.11.9.0 - v12.11.11.0
- - Added detections
- - Dutch translation update
Changes for v12.11.8 - v12.11.9.0
- - Added detections
- - Fixed POST requests with proxy
- - Fixed Upload timeout (crash upload/support form)
Changes for v12.11.6.0 - v12.11.7
- - Added detections
- - Added Proxy configuration
Changes for v12.11.5.0 - v12.11.6.0
- - Added detections
Changes for v12.10.10 - v12.11.0.0
- - Added detections
- - NEW! MalPE module (BETA)
- - NEW! RogueKillerAdmin V2 compatible
- - DEPRECATED: RogueKillerAdmin V1
Changes for v12.10.8.0 - v12.10.9.0
- - Added detections
Changes for v12.10.7.0 - v12.10.8.0
- - Added detections
- - Fixed a bug in settings where Offline registry setting wasn't saved
Changes for v12.10.6.0 - v12.10.7.0
- - Added detections
- - Fixed a possible crash in COM module
- - Fixed a possible crash in Path parser
Changes for v12.10.4 - v12.10.5
- Added detections
Changes for v12.4.0 - v12.4.1
- - Added detections
- - Shortcuts scanner now cleans them instead of removing
Changes for v11.0.14 - v12.1.0
- - Added detections
- - NEW! Tools menu
- - NEW! Hosts File Tools menu (Premium)
- - Updated translations
- - Fixed a bug in context menu actions
Changes for v10.10.8 - v10.10.9
- - Fixed bug in Disk module
- - Fixed bug in IAT parser
Changes for v10.10.3 - v10.10.5
- - Added detections
- V10.10.4
- - Added detections
- - Updated links
- - (Premium) Added notification when license is about to expire
- - Fixed bug in Disks module
Changes for v10.10.0.0 - v10.10.1.0
- - Added detections
- - (Premium) Added message when Updater is not present and program is outdated
- - Updated translations
- - Added link to public Trello board
- - Added version check in about form
- - NEW! VirusTotal choice for upload
- - NEW! (Premium) VirusTotal choice setting
- - Fixed automatic updates when Updater is not present
- - NEW! EULA will show up again if a new version is present
- - Extended injection signature search to 4 sections (instead of 1), to better identify injection code.
- - Now infection urls for antirootkit point to non technical posts
- - Resized main and about forms
- - (Premium) Added more information in licensing server check
- - (Premium) Prepared for annual subscription switch
Changes for v10.7.0 - v10.8.0.0
- - Updated database
- - Fixed a bug in reporting
- - Disabled PUM.DesktopIcons (too confusing, and not critical)
- - Disabled PUM.Orphan (too confusing, not critical)
- - Better unit testing
- - Initialization optimizations
- - Updated translations
- - NEW! (Premium) Web service
- - NEW! Web service /info url (get version info)
- - NEW! Web service /scan/new url (start new scan)
- - NEW! Web service /scan/status url (get scan status)
- - NEW! Web service /report/last url (get last report)
- - NEW! (Premium) -pupismalware command line parameter + setting
- - NEW! (Premium) -pumismalware command line parameter + setting
- - Reverted portable fixed location in rk_config.ini
- - Fixed error message when too many instances
- - Setup now adds RogueKiller bin folder to %PATH%
- - Updated userland certificate
- - NEW! Promotional nag.
Changes for v10.6.2 - v10.6.3
- - Added detections
- - Fixed a bug in File Search module
- - Increased feed rotation time
- - Better UI information
- - Deactivated VT IP scan (too many FPs)
Changes for v10.1.2 - v10.5.3.0
- - Fixed a bug in Path module where all shortened path were not properly expanded (Ex: LogMe~ => LogMeIn Rescue Applet)
Changes for v10.1.0 - v10.1.2
- - Added detections
- - Updated Spanish translation
- - Added Italian translation
- - Added hook signatures engine
- V10.1.1 12/23/2014
- =================
- - Added detections
- - PREMIUM: Added settings form
- - PREMIUM: Added MBR Scan setting
- - PREMIUM: Added Honey Scan setting
- - PREMIUM: Added Antirootkit Scan setting
- - PREMIUM: Added Open website setting
- - Added Dutch translation
- - Added Italian translation
- - Added sanity check for website opening
Changes for v10.0.8 - v10.1.0
- - Added detections
- - Fixed mbamservice false positive
- V10.0.9
- =================
- - Fixed Xpaj false positive with DiskCryptor MBR
- - Added DiskCryptor MBR signature
- - Added detections
- - TrueSight 1.0.4: Better shellcode module detection
- - IAT Hooks: Better shellcode module detection
Changes for v10.0.6 - v10.0.8
- - Added detections
- - Fixed bug of processes not killed
- - Now process memory is scanned before path scan
- V10.0.7 11/20/2014
- =================
- - Now process pages are scanned for whitelist
- - Updated Yara engine
- - Added detections
- - Reverted some command line to free version: -nodriver -nokill -nopop -nothirdparty
Changes for v10.0.5.0 - v10.0.6
- - Fixed a bug in Process module (not enough rights to get process path)
- - Fixed a bug in AV whitelist detection
- - Added detections
Changes for v10.0.0 - v10.0.5.0
- - Now AV processes are whitelisted
- - Added language separator for "Your language here"
- - Added Injected process heuristic detection
- - Fixed bad Zeus signature
- - More aggressive against Poweliks processes
- - Added detections
- - Updated links
Changes for v9.2.8.0 - v9.3.0
- - New Rules engine. Easier to maintain, more robust.
- - Fixed a lot of bugs in Scanner engines.
- - Added detections
Changes for v9.2.5.0 - v9.2.6.0
- Removed a ZeroAccess false detection
- Fixed a bug in registry module (introduced in 9.2.5)
Changes for v8.8.4 - v8.8.5
- Added debug trace for dllhost issue
- Added rogue detections
- Fixed duplicates in Firefox Addons list
- Added extensions.json / extensions.sqlite in the firefox watch list
- Now kills firefox before removing extensions
Changes for v8.8.3 - v8.8.4
- Added ACL module.
- Fixed bug with ACLs when replacing patched file [Black Screen - Zekos]
- Restored Zekos signatures
Changes for v8.8.2 - v8.8.3
- NEW! Extension removal for IE / Firefox (context menu)
- Neutralized Zekos signatures to avoid black screen at replacement. [To be fixed]
Changes for v8.8.1 - v8.8.2
- NEW! Miuref detection and removal
- Added Zekos x64 detection
- Fixed a bug in honey module
- Fixed a bug in core module
- Fixed a bug in driver module
Changes for v8.7.14 - v8.8.1
- Fixed bug in registry module
- Fixed a bug in file module
- NEW! Zekos detection and removal.
Changes for v8.7.13 - v8.7.14
- NEW! web browser addons are listed (Internet Explorer | Firefox )
- NEW! Cryptolocker pattern
- NEW! Killed process verifier. If some processes remain, they are killed by their whole tree.
- Added detections
Changes for v8.7.12 - v8.7.13
- Translated Paypal Icon
- Fixed a bug in GUI lib
- Added PUP pattern
- Fixed a bug in File lib (ZeroAccess detection)
- Added addons tab
Changes for v8.7.11 - v8.7.12
- Windows 8.1 detection
- Fixed bug in Shortcut mode
- Refactoring of File lib
- Added detections
- RogueKillerCMD 0.1.2
- Added process list
Changes for v8.7.10 - v8.7.11
- Fixed a bug in UI lib
Changes for v8.7.9 - v8.7.10
- Added detections
- RogueKillerCMD 0.1.1
- Fixed DLL dependencies
Changes for v8.7.8 - v8.7.9
- - Fixed a bug in regex parsing
- - Optimization of regex
- - Added 2 new methods for registry Read/Write
- - NEW! Honey module now uses the Win32 API Offline method (Safer)
- - Fixed a bug in script cleanup
- - Fixed a bug in mbr module
- - Added detections
Changes for v8.7.7 - v8.7.8
- NEW! Added Zlib compression for crash dump sending
- Improvement of args handler
Changes for v8.7.6 - v8.7.7
- NEW! new banner
- Fixed bugs in Registry module
- Fixed bug in PeParser
- Added progress window for crash report uploading
- Now collecting FUll dumps [This can be long, be patient!]
Changes for v8.7.5 - v8.7.6
- Changed crash feedback for sending crash dump instead of custom crash logs
- Fixed bug in PeParser
Changes for v8.7.4 - v8.7.5
- Added useragent in debug log sending
- NEW! Geoloc for proxy / DNS IPs
- Fixed bug on TaskMan value
- NEW! -report_output and -hide switches
- NEW! Stop button
Changes for v8.7.3 - v8.7.4
- Added COUNTRY in user agent of statistic module
Changes for v8.7.1 - v8.7.3
- NEW! Detection/Removal of generic name mismatches in registry key/values (API fool trick -Rootkit)
- Fixed a bug in HiveReader module
- Fixed a bug in Pattern module
Changes for v8.7.0 - v8.7.1
- Fixed bugs in PeParser
- Fixed bug in IAT/ETA hooks
- NEW! Listview sorting
Changes for v8.6.12 - v8.7.0
- NEW! Scan IAT/ETA of sensible processes
- NEW! Filesystem userland antirootkit
- Added colors to differenciate type of objects
- Added Romanian language
- Fixed bug in file deletion
- Fixed bugs in Pe parser
- Optimizations: Com library
- Fixed bug in GUI library
- Added detections
Changes for v8.6.11 - v8.6.12
- Added detections
- Added MBR infos
- Added PUM label, and more consitent colors
- Fixed a bug in MBR module
Changes for v8.6.10 - v8.6.11
- Fixed a crash a startup on x64 OS
Changes for v8.6.8 - v8.6.10
- - Fixed a bug in PeParser
- - TrueSight 0.9.1
- v8.6.9
- =================
- - Fixed a bug in PeParser
- - Added Export parsing
- - Fixed a bug in SSDT parsing
- - Added detections
Changes for v8.6.7 - v8.6.8
- - Fixed a bug in peParser
- - Truesight v0.9
Changes for v8.6.3 - v8.6.4
- - Fixed display bugs
- - Added tab icons
- - NEW! One scan can allow user to trigger each option once (Delete, HostsFix, DNSFix, ProxyFix)
- - Fixed bug in DLL module
- - Modified Honey display in report
- - Fixed bugs in PeParser
- - Fixed bug in file parser
- - Added detections
- - Database queries switched to UNICODE