Thema: RogueKiller

[SiLæncer]

Whats new: >>

Removed a ZeroAccess false detection
Fixed a bug in registry module (introduced in 9.2.5)

http://tigzy.geekstogo.com/roguekiller.php

[SiLæncer]

Whats new: >>

V9.2.8 08/15/2014
=================
- Added detections

V9.2.7 08/15/2014
=================
- Added scan of Search Page/Start Page for Internet Explorer
- Added scan of Start Page for Firefox
- TrueSight 1.0.2: Process Kill
- TrueSight 1.0.2: Registry key Kill
- TrueSight 1.0.2: File Kill
- RogueKiller: Implementation of new Truesight features
- RogueKillerCMD: Implementation of new Truesight features

http://tigzy.geekstogo.com/roguekiller.php

[SiLæncer]

Whats new: >>

Updated Yara to 3.1.0
Added detections
Firefox PUM.HomePage is using domain whitelist

http://tigzy.geekstogo.com/roguekiller.php

[SiLæncer]

Whats new: >>

Fixed a bug in Yara scanner
Fixed a bug in language module
Fixed a crash dump uploader (due to surlatoile.org move to https)
Added service binary path in report

http://tigzy.geekstogo.com/roguekiller.php

[SiLæncer]

Whats new: >>

Added detection to new Poweliks variant
Fixed a bug of infinite wait when COM objects are broken

http://tigzy.geekstogo.com/roguekiller.php

[SiLæncer]

Whats new: >>

- TrueSight: 1.0.3: Fixed a Kernel stack overflow leading to a BSoD
- Better handling of multistring registry value/key names (ZeroAccess/Poweliks)
- Added Poweliks detections - Added detections

http://tigzy.geekstogo.com/roguekiller.php

[SiLæncer]

Whats new: >>

- Fixed a bug in registry module introduced in 9.2.12
- Fixed a bug in process engine that forbids svchost processes to be killed
- Added detections

http://tigzy.geekstogo.com/roguekiller.php

[SiLæncer]

Whats new: >>

- New Rules engine. Easier to maintain, more robust.
- Fixed a lot of bugs in Scanner engines.
- Added detections

http://tigzy.geekstogo.com/roguekiller.php

[SiLæncer]

Whats new: >>

- Major UI changes
- Added support for future Premium version
- Added support for ShellIconOverlayIdentifiers and ShellServiceObjectDelayLoad  keys
- Now CLSIDs are scanned for path and memory
- Added detections

http://tigzy.geekstogo.com/roguekiller.php

[SiLæncer]

Whats new: >>

Improvements in Process library
Added COM integrity check to disable COM calls when server is corrupted (Poweliks)
Fixed Poweliks rule
Added detections
Fixed Bug in registry module
Fixed a bug in logging

http://tigzy.geekstogo.com/roguekiller.php

[SiLæncer]

Whats new: >>

Added detection of services hidden from SCM and from registry
Dropped command line support in free version
Removed EAT hooks (useless)
Improved IAT hooks scanner (now scans all modules instead of main module)
Fixed a bug in driver library (driver could not load under certain circumstances)
Added Czech translation
Added tooltip with detection level (for colorblind people)
Added detections

http://tigzy.geekstogo.com/roguekiller.php

[SiLæncer]

Whats new: >>

New user-agent: Now sends extended vendor names for real time monitoring
Added detections

http://tigzy.geekstogo.com/roguekiller.php

[SiLæncer]

Whats new: >>

Added link to translations in language menu
Added Delay IAT in PE module
Added Delay IAT hooks in antirootkit
Now IAT hooks are printed to UI as they are scanned
Removed ctfmon from sensitive processes
Now detects Zeus variants
Now informative texts are not elided
Better choices (currency/amount) for Paypal form
Removed unused resources
Improvements in quarantine module
Now DNS entries show country IP in text report
PREMIUM: Added quarantine handler
Added detections

http://tigzy.geekstogo.com/roguekiller.php

[SiLæncer]

Whats new: >>

Now AV processes are whitelisted
Added language separator for "Your language here"
Added Injected process heuristic detection
Fixed bad Zeus signature
More aggressive against Poweliks processes
Added detections
Updated links

http://tigzy.geekstogo.com/roguekiller.php

[SiLæncer]

Whats new: >>

- Fixed a bug in Process module (not enough rights to get process path)
- Fixed a bug in AV whitelist detection
- Added detections

http://tigzy.geekstogo.com/roguekiller.php