AfterDawn | News | Guides | Software downloads | Tech Support | Forums | HIGH.FI
AfterDawn

Version history for RogueKiller (32/64 bit)

<<Back to software description

Changes for v13.1.8.0 - v13.1.9.0

  • - Fixed marketing notification, now won't show at startup after first time
  • - Updated to core 3.0.7
  • * Fixed crash in notifications engine
  • * Fixed COM initialization in real time services
  • * Fixed Scanner queue initialization
  • * MSHTA and WScript detections
  • * Minor Bug fixes



Changes for v13.1.7.0 - v13.1.8.0

  • - Updated to core 3.0.6
  • * Bug fixes



Changes for v13.1.6.0 - v13.1.7.0

  • - Updated to core 3.0.5
  • * Fixed WebScanner mitigation
  • * Disabled PUM.StartMenu for RogueKiller
  • * Fixed Appdata scan duplicate
  • * Fixed LocalAppdata scan duplicate
  • - Fixed an issue with renewal links



Changes for v13.1.4.0 - v13.1.6.0

  • - Updated to core 3.0.4
  • * Added Firefox registry addons search
  • * Fixed registry items duplicates on scan
  • - Fixed translations
  • - Removed tray icon in portable version
  • - Fixed freeze on custom scan selection
  • - Fixed autostart minimize on Free version
  • - Fixed autostart initial state
  • - Minor fixes
  • V13.1.5 02/18/2019
  • =================
  • - Updated to core 3.0.3
  • * Added ability to read encrypted signatures packages (AV detection mitigation)



Changes for v13.1.1.0 - v13.1.4.0

  • - Updated to core 3.0.2
  • * Fixed a crash in ZIP module
  • * Fixed an issue in Folder creation (preventing creating working directory when executing from non system drive)
  • * Now VT.Unknown is not treated as a threat anymore
  • * Now updater runs installer with /silent
  • - Updated shop links to use download API
  • - Updated marketing notification from every 1 hour to every 3 hours



Changes for v13.0.15.0 - v13.0.20.0

  • - Updated to core 2.2.2
  • * Fixed an issue with installer and updater/DLL - Part 2
  • * Fixed possible crash on File IO operations



Changes for v12.12.8.0 - v12.12.9

  • - Added detections
  • - Update Korean translation



Changes for v12.11.31.0 - v12.12.3.0

  • - Added detections



Changes for v12.11.27 - v12.11.29.0

  • - Added detections
  • - Fixed Windows Defender FP



Changes for v12.11.25.0 - v12.11.27

  • - Fixed potential issue with "device not found, insert disk" messages
  • - Added detections



Changes for v12.11.23.0 - v12.11.24.0

  • Added detections



Changes for v12.11.20.0 - v12.11.23.0

  • Added detections



Changes for v12.11.19 - v12.11.20.0

  • Added detections



Changes for v12.11.14.0 - v12.11.16

  • Added detections



Changes for v12.11.12.0 - v12.11.14.0

  • - Added detections
  • V12.11.13 09/04/2017
  • =================
  • - Added detections
  • - Added msiexec handler to pathparser



Changes for v12.11.11.0 - v12.11.12.0

  • - Added detections



Changes for v12.11.9.0 - v12.11.11.0

  • - Added detections
  • - Dutch translation update



Changes for v12.11.8 - v12.11.9.0

  • - Added detections
  • - Fixed POST requests with proxy
  • - Fixed Upload timeout (crash upload/support form)



Changes for v12.11.6.0 - v12.11.7

  • - Added detections
  • - Added Proxy configuration



Changes for v12.11.5.0 - v12.11.6.0

  • - Added detections



Changes for v12.10.10 - v12.11.0.0

  • - Added detections
  • - NEW! MalPE module (BETA)
  • - NEW! RogueKillerAdmin V2 compatible
  • - DEPRECATED: RogueKillerAdmin V1



Changes for v12.10.8.0 - v12.10.9.0

  • - Added detections



Changes for v12.10.7.0 - v12.10.8.0

  • - Added detections
  • - Fixed a bug in settings where Offline registry setting wasn't saved



Changes for v12.10.6.0 - v12.10.7.0

  • - Added detections
  • - Fixed a possible crash in COM module
  • - Fixed a possible crash in Path parser



Changes for v12.10.4 - v12.10.5

  • Added detections



Changes for v12.4.0 - v12.4.1

  • - Added detections
  • - Shortcuts scanner now cleans them instead of removing



Changes for v11.0.14 - v12.1.0

  • - Added detections
  • - NEW! Tools menu
  • - NEW! Hosts File Tools menu (Premium)
  • - Updated translations
  • - Fixed a bug in context menu actions



Changes for v10.10.8 - v10.10.9

  • - Fixed bug in Disk module
  • - Fixed bug in IAT parser



Changes for v10.10.3 - v10.10.5

  • - Added detections
  • V10.10.4
  • - Added detections
  • - Updated links
  • - (Premium) Added notification when license is about to expire
  • - Fixed bug in Disks module



Changes for v10.10.0.0 - v10.10.1.0

  • - Added detections
  • - (Premium) Added message when Updater is not present and program is outdated
  • - Updated translations
  • - Added link to public Trello board
  • - Added version check in about form
  • - NEW! VirusTotal choice for upload
  • - NEW! (Premium) VirusTotal choice setting
  • - Fixed automatic updates when Updater is not present
  • - NEW! EULA will show up again if a new version is present
  • - Extended injection signature search to 4 sections (instead of 1), to better identify injection code.
  • - Now infection urls for antirootkit point to non technical posts
  • - Resized main and about forms
  • - (Premium) Added more information in licensing server check
  • - (Premium) Prepared for annual subscription switch



Changes for v10.7.0 - v10.8.0.0

  • - Updated database
  • - Fixed a bug in reporting
  • - Disabled PUM.DesktopIcons (too confusing, and not critical)
  • - Disabled PUM.Orphan (too confusing, not critical)
  • - Better unit testing
  • - Initialization optimizations
  • - Updated translations
  • - NEW! (Premium) Web service
  • - NEW! Web service /info url (get version info)
  • - NEW! Web service /scan/new url (start new scan)
  • - NEW! Web service /scan/status url (get scan status)
  • - NEW! Web service /report/last url (get last report)
  • - NEW! (Premium) -pupismalware command line parameter + setting
  • - NEW! (Premium) -pumismalware command line parameter + setting
  • - Reverted portable fixed location in rk_config.ini
  • - Fixed error message when too many instances
  • - Setup now adds RogueKiller bin folder to %PATH%
  • - Updated userland certificate
  • - NEW! Promotional nag.



Changes for v10.6.2 - v10.6.3

  • - Added detections
  • - Fixed a bug in File Search module
  • - Increased feed rotation time
  • - Better UI information
  • - Deactivated VT IP scan (too many FPs)



Changes for v10.1.2 - v10.5.3.0

  • - Fixed a bug in Path module where all shortened path were not properly expanded (Ex: LogMe~ => LogMeIn Rescue Applet)



Changes for v10.1.0 - v10.1.2

  • - Added detections
  • - Updated Spanish translation
  • - Added Italian translation
  • - Added hook signatures engine
  • V10.1.1 12/23/2014
  • =================
  • - Added detections
  • - PREMIUM: Added settings form
  • - PREMIUM: Added MBR Scan setting
  • - PREMIUM: Added Honey Scan setting
  • - PREMIUM: Added Antirootkit Scan setting
  • - PREMIUM: Added Open website setting
  • - Added Dutch translation
  • - Added Italian translation
  • - Added sanity check for website opening



Changes for v10.0.8 - v10.1.0

  • - Added detections
  • - Fixed mbamservice false positive
  • V10.0.9
  • =================
  • - Fixed Xpaj false positive with DiskCryptor MBR
  • - Added DiskCryptor MBR signature
  • - Added detections
  • - TrueSight 1.0.4: Better shellcode module detection
  • - IAT Hooks: Better shellcode module detection



Changes for v10.0.6 - v10.0.8

  • - Added detections
  • - Fixed bug of processes not killed
  • - Now process memory is scanned before path scan
  • V10.0.7 11/20/2014
  • =================
  • - Now process pages are scanned for whitelist
  • - Updated Yara engine
  • - Added detections
  • - Reverted some command line to free version: -nodriver -nokill -nopop -nothirdparty



Changes for v10.0.5.0 - v10.0.6

  • - Fixed a bug in Process module (not enough rights to get process path)
  • - Fixed a bug in AV whitelist detection
  • - Added detections



Changes for v10.0.0 - v10.0.5.0

  • - Now AV processes are whitelisted
  • - Added language separator for "Your language here"
  • - Added Injected process heuristic detection
  • - Fixed bad Zeus signature
  • - More aggressive against Poweliks processes
  • - Added detections
  • - Updated links



Changes for v9.2.8.0 - v9.3.0

  • - New Rules engine. Easier to maintain, more robust.
  • - Fixed a lot of bugs in Scanner engines.
  • - Added detections



Changes for v9.2.5.0 - v9.2.6.0

  • Removed a ZeroAccess false detection
  • Fixed a bug in registry module (introduced in 9.2.5)



Changes for v8.8.4 - v8.8.5

  • Added debug trace for dllhost issue
  • Added rogue detections
  • Fixed duplicates in Firefox Addons list
  • Added extensions.json / extensions.sqlite in the firefox watch list
  • Now kills firefox before removing extensions



Changes for v8.8.3 - v8.8.4

  • Added ACL module.
  • Fixed bug with ACLs when replacing patched file [Black Screen - Zekos]
  • Restored Zekos signatures



Changes for v8.8.2 - v8.8.3

  • NEW! Extension removal for IE / Firefox (context menu)
  • Neutralized Zekos signatures to avoid black screen at replacement. [To be fixed]



Changes for v8.8.1 - v8.8.2

  • NEW! Miuref detection and removal
  • Added Zekos x64 detection
  • Fixed a bug in honey module
  • Fixed a bug in core module
  • Fixed a bug in driver module



Changes for v8.7.14 - v8.8.1

  • Fixed bug in registry module
  • Fixed a bug in file module
  • NEW! Zekos detection and removal.



Changes for v8.7.13 - v8.7.14

  • NEW! web browser addons are listed (Internet Explorer | Firefox )
  • NEW! Cryptolocker pattern
  • NEW! Killed process verifier. If some processes remain, they are killed by their whole tree.
  • Added detections



Changes for v8.7.12 - v8.7.13

  • Translated Paypal Icon
  • Fixed a bug in GUI lib
  • Added PUP pattern
  • Fixed a bug in File lib (ZeroAccess detection)
  • Added addons tab



Changes for v8.7.11 - v8.7.12

  • Windows 8.1 detection
  • Fixed bug in Shortcut mode
  • Refactoring of File lib
  • Added detections
  • RogueKillerCMD 0.1.2
  • Added process list



Changes for v8.7.10 - v8.7.11

  • Fixed a bug in UI lib



Changes for v8.7.9 - v8.7.10

  • Added detections
  • RogueKillerCMD 0.1.1
  • Fixed DLL dependencies



Changes for v8.7.8 - v8.7.9

  • - Fixed a bug in regex parsing
  • - Optimization of regex
  • - Added 2 new methods for registry Read/Write
  • - NEW! Honey module now uses the Win32 API Offline method (Safer)
  • - Fixed a bug in script cleanup
  • - Fixed a bug in mbr module
  • - Added detections



Changes for v8.7.7 - v8.7.8

  • NEW! Added Zlib compression for crash dump sending
  • Improvement of args handler



Changes for v8.7.6 - v8.7.7

  • NEW! new banner
  • Fixed bugs in Registry module
  • Fixed bug in PeParser
  • Added progress window for crash report uploading
  • Now collecting FUll dumps [This can be long, be patient!]



Changes for v8.7.5 - v8.7.6

  • Changed crash feedback for sending crash dump instead of custom crash logs
  • Fixed bug in PeParser



Changes for v8.7.4 - v8.7.5

  • Added useragent in debug log sending
  • NEW! Geoloc for proxy / DNS IPs
  • Fixed bug on TaskMan value
  • NEW! -report_output and -hide switches
  • NEW! Stop button



Changes for v8.7.3 - v8.7.4

  • Added COUNTRY in user agent of statistic module



Changes for v8.7.1 - v8.7.3

  • NEW! Detection/Removal of generic name mismatches in registry key/values (API fool trick -Rootkit)
  • Fixed a bug in HiveReader module
  • Fixed a bug in Pattern module



Changes for v8.7.0 - v8.7.1

  • Fixed bugs in PeParser
  • Fixed bug in IAT/ETA hooks
  • NEW! Listview sorting



Changes for v8.6.12 - v8.7.0

  • NEW! Scan IAT/ETA of sensible processes
  • NEW! Filesystem userland antirootkit
  • Added colors to differenciate type of objects
  • Added Romanian language
  • Fixed bug in file deletion
  • Fixed bugs in Pe parser
  • Optimizations: Com library
  • Fixed bug in GUI library
  • Added detections



Changes for v8.6.11 - v8.6.12

  • Added detections
  • Added MBR infos
  • Added PUM label, and more consitent colors
  • Fixed a bug in MBR module



Changes for v8.6.10 - v8.6.11

  • Fixed a crash a startup on x64 OS



Changes for v8.6.8 - v8.6.10

  • - Fixed a bug in PeParser
  • - TrueSight 0.9.1
  • v8.6.9
  • =================
  • - Fixed a bug in PeParser
  • - Added Export parsing
  • - Fixed a bug in SSDT parsing
  • - Added detections



Changes for v8.6.7 - v8.6.8

  • - Fixed a bug in peParser
  • - Truesight v0.9



Changes for v8.6.3 - v8.6.4

  • - Fixed display bugs
  • - Added tab icons
  • - NEW! One scan can allow user to trigger each option once (Delete, HostsFix, DNSFix, ProxyFix)
  • - Fixed bug in DLL module
  • - Modified Honey display in report
  • - Fixed bugs in PeParser
  • - Fixed bug in file parser
  • - Added detections
  • - Database queries switched to UNICODE



<<Back to software description