========================================================= === === === RogueKillerCMD Changelog === === === ========================================================= ------------------- - Adlice Software - ------------------- V4.10.0 06/11/2024 ================= - Updated to core 7.0.0 * MalPE no longer in BETA * UCheck serialization * Winget truncation detection * Winget filtering empty sources * Now using rule threat level for classification * Encrypted quarantine * Fixed UTF8 serialization on sdk config * Fixed file encryption open flags * Minor fixes V4.9.0 02/09/2024 ================= - Updated to core 6.18.0 * Removed unneeded ACL reset * Replaced folder ACL reset by "Add World ACE" * Added IsInstalled verification in core * Now using current directory's subdir for non-installed core instances * Modular core, preparing for core optimizations * Added UCheck bitness detection algorithm * Minor fixes - Fixed infinite loop during scan - Fixed missing ucheck community updates status - Added "fully portable" feature, if not installed will work from a current dir's subdir V4.8.0 01/18/2024 ================= - Updated to core 6.17.2 * Error management in UCheck APIs * Fixed issue with json decoding from array * Better progress count * Fix for cloud config (proxy not applied) * Fixed potential crash in filesystem scanner * Fixed possible hang in scan worker * Minor fixes - Removed old translations (now only available in EN) V4.7.0 11/03/2023 ================= - Updated to core 6.14.0 * Truesight 3.4, fixed vulnerabilities * Truesight 3.4, fixed possible handle leak * Now avoiding killing protected processes * Minor Fixes V4.6.1 10/19/2023 ================= - Updated to core 6.13.3 * Fixed possible crashes on logging * Fixed potential crash on exiting core with a scan running * Fix for explorer path parser * Fixed performance issue in UCheck engine * Fixes for UCheck portable detection * Truesight 3.3 (fixed security issue) * Minor Fixes V4.6.0 08/30/2023 ================= - Updated to core 6.12.0 * Cloud config * Cloud scanning no increment on rescan * Minor Fixes V4.5.0 06/23/2023 ================= - Updated to core 6.11.0 * Deployed cloud config * Added cloud config for MalPE * Fixed potential crashes in DirectoryCounter * Fixed issue where files removed at reboot were not triggering user notice * Added SearchScope (Bing) search rules * Fixed issue where ACLs protected registry keys could not be read/deleted * Fixed minor issues for URL scanning * Fixed issue were Cloud mitigated detections were not showing in Diag * Minor Fixes V4.4.0 05/25/2023 ================= - Updated to core 6.10.0 * NTFS module * FileScanner fast enumeration during scan * Now showing progress during filesystem scanning * Minor Fixes V4.3.0 04/25/2023 ================= - Updated to core 6.8.0 * Now uploading unknown files using dedicated cloud API * Fixed an issue where directores with specific ACLs were not removed * Minor Fixes V4.2.2 03/22/2023 ================= - Updated to core 6.7.2 * Fixed an issue where volatile licenses were eating activations * Fixed encoding issue in installer translations * Fixed file types filtering in archives scanning * Minor Fixes - Fixed UI issue during CMD scan V4.2.1 03/06/2023 ================= - Updated to core 6.7.1 * Added client tagging on signatures check/update * Added scheduled scan type in config * Minor Fixes V4.2.0 01/26/2023 ================= - Updated to core 6.7.0 * Updated libraries (libyara) * Fixed issues on Windows XP * Fixed minor issue in Cloud scanner * Fixed multiple issues with cloud scanning * Minor Fixes V4.1.5 01/04/2023 ================= - Updated to core 6.5.8 * Fixed an issue with Curl network check * Minor Fixes V4.1.4 12/15/2022 ================= - Updated to core 6.5.7 * Fix for obtaining default browser path * Abortable scan report * Minor fixes V4.1.3 11/15/2022 ================= - Updated to core 6.5.5 * Minor fixes V4.1.2 10/13/2022 ================= - Updated to core 6.5.4 * Minor fixes V4.1.1 09/22/2022 ================= - Updated to core 6.5.2 * Fixed issue where scanning whitelisted folders' content was not honored in custom scan * Minor fixes V4.1.0 08/24/2022 ================= - Updated to core 6.5.0 * Minor fixes V4.0.3 06/13/2022 ================= - Updated to core 6.4.3 * Fixed a critical issue in signatures engine (some signatures were not working) V4.0.2 06/07/2022 ================= - Updated to core 6.4.2 * Truesight 3.1 (Win10+) - Fixed memory leaks - Fixed missing allocations tagging V4.0.1 05/04/2022 ================= - Updated to core 6.4.1 * Added CLI exclusions (-excluded-paths) * Windows 11 official support * Logs reduction * Fixed potential memory leak in zip module * Fixed issue in cloudscanner where empty batches were sent for analysis * MalPE mitigation: Unknown cloud files are no longer considered malicious * Added background scanner configs * Command scanner is now able to retrieve current process directory and use it for path resolution * Added first cloudscan config * Fixed an issue where detection was added even with a cloudscan invalidation * Fixed an issue where Windows backup history svchost was detected as DLP * Curl timeout increase * Minor fixes V4.0.0 01/26/2022 ================= - Updated to core 6.3.1 * Cloudscanner (new module, BETA) * New detection design (Pipeline, BETA) * Redesigned all command line arguments * Minor fixes * Redesigned usage command * Unified command line arguments * Removed nested arguments * Minor fixes V3.0.5 12/15/2021 ================= - Updated to core 6.1.8 * Fixed potential crash * Fixed possible crashes (log formatting) * Fixed possible crash (CLSID scanner) V3.0.4 11/03/2021 ================= - Updated to core 6.1.5 * Fixed an issue in path parser (task scheduler) * Minor fixes V3.0.3 10/11/2021 ================= - Updated to core 6.1.4 * Fixed an issue with scheduled scans not starting * Added ability to cancel scan during archive scanning * New scheduler * Added EDGE scanner * Minor fixes * New reporting * Fixed an issue when adding exclusions * Fixed a false detection on explorer / DocLock * Fixed an issue with scheduled scans not starting * Added ability to cancel scan during archive scanning V3.0.2 08/05/2021 ================= - Updated to core 6.0.11 * Fixed self folder scanning issue * Asynchronous logging * Fixed possible deadlock * Fixed possible infinite loop in config migration * certificate update * Fixed possible crashes when stopping * Quarantine delete all * Minor fixes - Fixed possible issue with information update at startup - Re-enabled thanks page opening - Deactivated Cloud Upload windows (later integrated into own worker) - Added Proxy authentication settings V3.0.1 06/15/2021 ================= - Updated to core 6.0.5 * Fixed potential crash getting username from session ID * Fixed crash issue when old config is present (Config migration) * Fixed an issue where dates are not saved properly in config file * Fixed potential crash in getting computer name * Fixed issue with Windows Updates status * Fixed issue with ucheck progress V3.0.0 05/25/2021 ================= - Updated to core 6.0.1 * Refactored using safer memory management (smart pointers) * Refactored with asynchronous initialization (faster to start) * Minor fixes - Replaced [O] (outdated), [M] (malware) and [P] (PUP/PUM) labels on results V2.14.3 03/25/2021 ================= - Updated to core 5.3.5 * Fixed potential stack overflows * Reducing Cloud.Generic FPs by ignoring some 3rd parties * Translations update * Minor fixes V2.14.2 02/15/2021 ================= - Updated to core 5.3.4 * Fixed possible hang on Zip * Fix for XP compat (CancelSynchronousIo) * Fix for disk enumeration hang * Fix for network file resolution hang V2.14.1 12/15/2020 ================= - Updated to core 5.3.1 * Fixed licensing issue with XP * Fixed issue in VTScanner on exit (submit on exit) * Fixed possible memory leak in scan items * Fixed possible memory leak in zlib module * Fixed possible memory leak in zip module * Fixed possible memory leak in COM module * Fixed possible memory leak in Event module * Fixed possible memory leak in SigCheck module * Fixed possible stack overflox in Time module * Fixed possible hang in Drives enumeration (async file opening) * Minor fixes V2.14.0 11/17/2020 ================= - Updated to core 5.3 * Fixed possible issue (small buffer) in filter com * Fixed VTScanner cache, not working in some conditions * Fixed FileMemoryScanner, archive not scanning in some conditions * Fixed DigisigScanner, suspicious CAs * Fixed multiple crashes in PE module * Fixed possible crashes (SO) in registry, path modules * Fixed possible crashes (except) in string, buffer, curl modules * Minor fixes V2.13.3 10/09/2020 ================= - Fixed an issue in -generate_portable where portable config did not have proper license info in some cases V2.13.2 10/08/2020 ================= - Updated to core 5.1.4 * Fixed potential crash in resources handler * Fixed Technician offline licensing recognition - Added -generate_portable CLI command, to create a portable configuration from Tech license - Fixed issue where PUP/PUM default action was "remove", now fully honoring -deleteall flag V2.13.1 09/15/2020 ================= - Updated to core 5.1.3 * Fixed several memory leaks * Fixed potential crash in digisig module for x86 * Fix for digisig module (check file from cert store) * Fixes for MalPE pre-filtering * Fixed crash in PE parser * Fixed crash in config Migration * Minor fixes V2.13.0 07/28/2020 ================= - Updated to core 5.0.1 * Fix for Bad.Extension on files disguised as performances * Minor fixes V2.12.0 06/16/2020 ================= - Updated to core 5.0.0 * Added more logs for Curl * Proxy validation * Trusight 3.0 (refactored with HLK validation) * Antirootkit module re-integrated (silent mode as a 1st step) * MalPE AI 0.6 * Added default printer location * Added Browser extension type for exclusions * Minor fixes V2.11.0 04/29/2020 ================= - Updated to core 4.3.3 * Fix for crash upload (limitation by dump is present) * Fixed pipe disconnect (retry logic) * Fixed pipe security * Fixed IPC cache * Added config auto-backup/restore * Fixed self-update task * Fixed crash reports upload V2.10.0 04/02/2020 ================= - Updated to core 4.3.0 * Fix for XP (libzip, openssl rebuilt) * Added scan warnings * Added filescanner warning on abnormally long folder scan * Added scan warnings JSON reporting * Size optimizations * Removed warnings * New advert payload * Added some logging * Minor fixes - Added -customscan command line arg - Added -scanoptions command line arg - Added -scanpaths command line arg - Added -listquarantine command line arg V2.9.0 03/24/2020 ================= - Updated to core 4.2.0 * Libraries update (libzip / sqlite) * New version manager (network failure proof) * Flush DNS cache on network domain resolve error * Fix for XP (libcurl rebuilt) * Fixed a possible crash in PE parser (VersionInfo) * Update to roguekillerdll 3.2.0 * Update to roguekillerupdater 3.4.0 * Fixes for early logging * Minor fixes V2.8.0 02/25/2020 ================= - Updated to core 4.1.3 * Fixed url for signatures download * Updated libraries (openssl / libssh2 / libcurl /libyara) * Fixed an issue in Path parser * Improved performances for scanning filesystem network resources V2.7.0 01/21/2020 ================= - Updated to core 4.1.0 * Fixed a possible crash in Buffer module (implicitcasts) * Fixed an issue where threat name wasn't properly parsed * Reduced API calls frequency * Fixed possible crash at exit * Updates libraries (jansson / cryptopp) V2.6.1 01/07/2020 ================= - Updated to core 4.0.5 * Fix for getting username from SYSTEM account * Fixes for scheduler engine * Fixed FP remediation for Proc.Svchost detections * Fixed exclusions when path have spaces * Fixed Bad.Extension on Zero-filled * Fixed heuristics in command-line scanner * Fix for telemetry * Fixed bad reference decrement in Yara scanner * Fixed initialization order in worker threads * Fixed ACLs removal in Debug module * Fixed potential crash in Exclusions and History Events modules * Minor fixes V2.6.0 12/17/2019 ================= - Updated to core 4.0.2 * Fixed possible crashes in logging * New telemetry data * Fixed possible crashes * MalPE model 0.5 (fast) * minor fixes V2.5.4 11/20/2019 ================= - Updated to core 3.2.17 * Fixed possible crash at scanner destroy * Minor fixes V2.5.3 11/08/2019 ================= - Updated to core 3.2.16 * Fixed possible crash when exiting during a scan * Minor fixes V2.5.2 10/24/2019 ================= - Updated to core 3.2.15 * Fixed common folders/files ACLs * Added registry setting to force debug logging * Fixed an issue where folders were not properly quarantined and removed * Added Critical flag manipulation before processes termination * Fixed an issue where exclusions were not working with shortcuts * Minor fixes V2.5.1 10/14/2019 ================= - Updated to core 3.2.13 * Fixed a possible deadlock and crash in scheduler/advert * Fixed an issue where Marketing request wasn't properly processed (notifications loop) * UCheck engine duplicates handle * Minor fixes V2.5.0 10/08/2019 ================= - Updated to core 3.2.10 * Fixed an issue where advert tasks were re-added (and cleared) on network issues * Fixed a handle leak when scanning big files * MalPE model 0.4 * Minor fixes V2.4.3 09/16/2019 ================= - Updated to core 3.2.6 * Minor fixes V2.4.2 08/20/2019 ================= - Updated to core 3.2.4 * Fixed an issue in WinTrust (part 2) * Fixed possible deadlock while enumerating processes * Fixed SearchStrings method * Signatures 20190819_114745 * Added new Scan locations * Fixed an issue with ACLs where config files may not be properly saved * Fixed portable_license CLI parameter * Fixed low privilege Shell extension registration * Fixed scheduler reload * Fixed MalPE threshhold * Fixed Wintrust scan (slow) * Added signatures package integrity check * Fixed MalPE detection name (negatives values sometimes) * Fixed issue with Bad.Extension detection V2.4.1 08/08/2019 ================= - Updated to core 3.2.1 * Fixed MalPE threshhold * Fixed Wintrust scan (slow) * Added signatures package integrity check * Fixed MalPE detection name (negatives values sometimes) * Fixed issue with Bad.Extension detection - Added Shell extension (Explorer context menu entry) - Added Shell extension setting V2.4.0 07/16/2019 ================= - Updated to core 3.2.1 * Signed files are whitelisted by default * Fixed an issue in scheduler * MalPE V2 - Added -portable_license command - Added -portable_signatures command V2.3.2 07/01/2019 ================= - Updated to core 3.1.1 * Fixed an issue where GetErrorMode API isn't present on XP * New machine ID (less prone to changes on Windows install) * Technician trial (if applicable) * Scheduler V2 V2.3.1 06/11/2019 ================= - Updated to core 3.0.11 * Fixed warning message at startup when floppy drive exists * Fixed file not closing after zip operations V2.3.0 05/22/2019 ================= - Updated to core 3.0.10 * Bug fixes - ** Warning: Now requires a Tech license to use Scan feature ** V2.2.2 04/25/2019 ================= - Updated to core 3.0.8 * Updated Signatures * Fixed crash in notifications engine * Fixed COM initialization in real time services * Fixed Scanner queue initialization * MSHTA and WScript detections * Minor Bug fixes * Fixed WebScanner mitigation * Disabled PUM.StartMenu for RogueKiller * Fixed Appdata scan duplicate * Fixed LocalAppdata scan duplicate * Added Firefox registry addons search * Fixed registry items duplicates on scan * Added ability to read encrypted signatures packages (AV detection mitigation) * Fixed a crash in ZIP module * Fixed an issue in Folder creation (preventing creating working directory when executing from non system drive) * Now VT.Unknown is not treated as a threat anymore * Now updater runs installer with /silent V2.2.0 01/28/2019 ================= - Updated: Signatures, package 20190121 - Updated to core 3.0.1 * Fixed: a crash in PE parser when file is driver protected * Ability to download signatures from YED server * Now ignoring excluded items from scanner * Added service detection by name - New: Added Automatic signatures updates from adlice.com YED server (Premium and FREE) - New: Added -updatesigs CLI command (update malware signatures) - New: Added -ignoreall CLI command (skip removal after a scan) - Improvment: Console refresh is now faster, making the whole scanner much faster - Improvment: Now showing signatures package version V2.1.0 01/07/2019 ================= - Updated to core 2.2.2 * Fixed an issue with installer and updater/DLL - Part 2 * Fixed possible crash on File IO operations * Fixed an issue with installer and updater/DLL * Fixed multiple dates * Fixed a issue in Filescanner where LNK arguments were not expanded for variable environment * Fixed a crash in scanner engine when scanning a file locked by driver * Fixed an issue in Curl, leading to download aborts on file sharing issue * Improved Curl file download, now retaining file handle on write (Windows Defender slow download fix) * Added UCheck mini-scan setting (Premium) - Added signatures V2.0.3 11/20/2018 ================= - Updated to core 2.0.22 - Added Registry heuristic scanner - Added signatures - Added deleteall CLI switch V2.0.2 11/09/2018 ================= - Fixed display issue for some items type - Updated to core 2.0.19 V2.0.1 11/07/2018 ================= - Updated engine to Yara 3.8.1 - Updated to core 2.0.18 - Minor fixes and enhancements V2.0.0 10/19/2018 ================= - Initial Release