What's new in Malware Defender 2.8.0.0001
Mar 12, 2012
- Kernel blocking access COM interface
- The kernel to intercept access to the Service Manager
- The interception process added to the JOB object
- Interception by registering hotkeys to record keystrokes
- Solve the problem of parameter processing in the SSDT HOOK incorrectly can cause the blue screen
- Rule annotation display in the alert window to the top of the window
- Solve the performance problems generated by the large number of logs, the second log is not repeated
- Automatically merge the same log in the log window and display the count
- Bubble prompted two seconds after the display does not show the new bubbles
- Fix some small bugs
New in Malware Defender 2.7.3.0002 (Mar 12, 2011)
- Fixed incompatible issue with other applications.
- Fixed a bug that the "Autostarts Locations" group didn't work in
- some cases.
- Fixed a bug that the protections didn't restore after pausing protections and
- restarting Windows.
- Fixed a bug that the CPU usage of process or thread was not correct in
- multi-processor system.
- Fixed a bug when scanning user mode code hooks.
New in Malware Defender 2.6.0 (Feb 8, 2010)
- Added support for collapsing the alert window.
- Added support for displaying rule comment in the alert window.
- Changed to disable mdhook.dll by default.
- Minor improvements and fixes.
New in Malware Defender 2.5.0 (Dec 25, 2009)
- Added support for filtering logs.
- Added support for pausing protection for a period of time. If you enable protection manually after pausing protection, MD will not change the protection back.
- Fixed a bug when handling files on FAT32 partition.
- Fixed a bug that cannot stop displaying alert for creating registry link even if the protection is disabled.
- Fixed a bug that cannot save Alternate Data Streams to a file.
- Fixed a bug when scanning kernel DPC timers in Windows 7.
New in Malware Defender 2.4.4 (Nov 23, 2009)
- Added protection against changing security permissions of files and registry keys.
- Improved the ability to detect actions of loading DLLs.
- Fixed bugs when parsing file paths.
- Fixed a bug when importing rules.
- Fixed a bug when removing stale rules.
- Minor improvements and fixes.
New in Malware Defender 2.4.3 (Oct 30, 2009)
- Fixed a bug when displaying icon for default registry value.
New in Malware Defender 2.4.2 (Oct 30, 2009)
- Fixed a bug when displaying icon for default registry value.
New in Malware Defender 2.4.2 (Oct 30, 2009)
- Fixed bugs that may cause protections to be bypassed by malware.
New in Malware Defender 2.4.1 (Oct 28, 2009)
- Added protection against killing processes by terminating job object.
- Added support for verifying file signature of process modules in background.
- Added support for managing registry, shutdown and lego notify routines.
- Fixed a bug when handling relative path.
- Fixed a bug when displaying application rule dialog on low resolution screen.
- Fixed a bug that cannot log denied actions when accessing protected processes.
- Fixed a bug that may cause deadlock.
- Fixed a bug when scanning kernel DPC timers.
- Fixed bugs in the hex file viewer.
New in Malware Defender 2.4.0 (Sep 21, 2009)
- Added support for copying and pasting rules.
- Added support for expanding and collapsing all rule groups.
- Added support for disabling the detailed tooltip of rules.
- Added support for deleting "Autostarts Locations" rule groups.
- Added support for deleting files and folders from the file find results.
- Added new built-in registry rules to protect against changing file associations.
- Fixed bugs when scanning autostarts applications.
- Fixed a bug that may cause BSOD in Windows 7.
- Fixed a bug when using "Deny and kill the process" for accessing SCM, loading DLLs, and accessing COM interfaces.
- Fixed a bug when adding rule in Network Ports window.
- Fixed a bug when displaying process name.
- Minor improvements and fixes.
New in Malware Defender 2.3.3 (Aug 18, 2009)
- Added support for exFat file system.
- Fixed a bug when detecting actions of accessing physical memory in Windows 2000/2003/XP.
- Fixed a bug when displaying icon of application rules in Windows 2000/2003/XP.
- Fixed a bug when handling %TEMP% environment string in file paths.
New in Malware Defender 2.3.2 (Jul 27, 2009)
- Fixed the deadlock problem introduced in version 2.3.1.
New in Malware Defender 2.3.1 (Jul 27, 2009)
- Fixed a bug when detecting actions of accessing physical memory.
- Fixed a bug that the alert window may cause system lock-up when a screen saver is started.
- Fixed a bug that active rule file can be changed when UI is locked.
New in Malware Defender 2.3.0 (Jul 25, 2009)
- Added support for manipulating registry symbolic links in the registry editor.
- Added support for disabling mdhook.dll.
- Added support for sorting sub-rules of an application rule.
- Added ignore list for removing stale rules.
- Added a menu item to check for updates.
- Added an option to log all denied actions.
- Fixed some minor bugs.
New in Malware Defender 2.2.2 (Jun 5, 2009)
- Improved support for Windows 7 rc.
- Fixed a bug when downloading kernel symbols in Windows 7 rc.
- Fixed a bug that does not convert short file name path of dynamic link library to long file name path.
- Changed the status of "Read-Restricted Files" file group to disable for fresh installation.
New in Malware Defender 2.2.1 (May 31, 2009)
- Fixed a bug when handling file path in Vista or above.
- Fixed a bug in mdhook.dll.
- Fixed the problem that the priority of logging event is not the same as the prioiry of rule.
New in Malware Defender 2.2.0 (May 22, 2009)
- Added protection against accessing Service Control Manager.
- Added protection against loading dynamic link libraries.
- Added protection against accessing COM interfaces.
- Added protection against setting hidden attribute of file or folder.
- Added support for searching permission and comment of rules.
- Added support for managing multiple rule files.
- Added support for Windows 7 rc.
- Separated "duplicate handle" permission from "access memory of other processes".
- Improved performance when handling file reading actions.
- Minor improvements and fixes.
New in Malware Defender 2.1.1 (Apr 9, 2009)
- Added protection against controlling processes using DDE.
- Added support for Windows 7 build 7068.
- Added support for running in safe mode to change rules and settings.
- Moved rundll32.exe out of system applications rules.
- Changed the default initial file rules of explorer.exe to allow accessing all files.
- Fixed a bug when renaming rule group.
- Fixed a bug when verifying file signatures.
New in Malware Defender 2.1.0 (Mar 17, 2009)
- Improved log functionality.
- Added create and delete permissions to file rules.
- Added support for checking command line when a process is created.
- Added support for selecting a group as rule object in Alert dialog.
- Added support for restoring default rules.
- Added support for creating new registry value of arbitrary type.
- Added support for setting default value of registry key to arbitrary type.
- Fixed a bug that cannot search files by date.
- Fixed a bug that protection can be changed using hot keys when UI is locked.
- Fixed a bug that cause ActiveSync to fail in Vista.
- Minor improvements and fixes.
New in Malware Defender 2.0.5 (Feb 13, 2009)
- Added French version.
- Fixed a bug that may cause BSOD when upgrading MD in Windows 2000/2003/XP.
- Fixed a bug when detecting actions of installing global hook.
- Fixed a bug in the uninstaller.
New in Malware Defender 2.0.4 (Feb 9, 2009)
- Reduced the size of application rule dialog to compatible with low resolution screen.
New in Malware Defender 2.0.3 (Feb 5, 2009)
- Added support to display different tray icon if not all protections are enabled.
- Fixed a bug that may block file reading actions incorrectly.
- Fixed a bug that may cause MD crash when handling invalid IP address.
New in Malware Defender 2.0.2 (Feb 3, 2009)
- Improved protection against broadcasting messages.
- Fixed a bug that may cause DNS lookup error in Windows Vista/2008
New in Malware Defender 2.0.1 (Jan 22, 2009)
- Fixed a bug that may cause BSOD when network protection is enabled in Windows 2000/2003/XP.
- Added support for closing multiple network connections in a run.
New in Malware Defender 2.0.0 (Jan 16, 2009)
- Added network protection.
- Added network ports viewer.
- Added protection against killing processes by setting parent window.
- Added support for displaying command line of process in process manager.
- Added support for displaying the new time when prompting for the "set system time" action.
- Added support for displaying detailed tooltip when moving mouse to the first column in log window.
- Added support for changing all permissions of application rule by clicking one button.
- Added an option to force MD to use fixed driver name.
- Fixed a bug when handling registry value name which contains ''.
- Fixed a display bug in Alert window.
- Changed not to log actions which are denied by ASK rules in silent mode. This will improve the performance when blocking massive actions.
- Minor improvements and fixes.
New in Malware Defender 1.2.3 (Dec 18, 2008)
- Fixed a bug that may cause chkdsk error when startup.
- Fixed a bug when creating rules for named pipe in learning mode.
- Added support for resizing the registry rule dialog box.
- Changed the default setting of "Allow signed applications to be run by system applications" to unchecked.
- Other Minor improvements.
New in Malware Defender 1.2.2 (Nov 24, 2008)
- Added support for jumping to the same registry key in HKLM or HKCU by context menu.
- Added "Go To Referenced Key" command to the context menu of registry editor when the selected key or value contains a valid ProgID or ClassID.
- Added "Open Containing Folder" command to the context menu of registry editor when the selected key or value contains a valid folder or file path.
- Added "Open URL" command to the context menu of registry editor when the selected key or value contains a URL.
- Added support for logging related data of actions. (command line, handle name, hook type, etc)
- Added new built-in registry rules to protect against changing files and folders settings of explorer.
- Changed execute permission of system application to "Ignore" if it is "Ask".
- Fixed a bug when creating rules in learning mode.
- Fixed a display bug in autostart manager.
- Fixed a bug when parsing registry path in address bar.
New in Malware Defender 1.2.1 (Nov 17, 2008)
- Added protection against modifying kernel objects of known dlls.
- Added protection against duplicating handles.
- Added protection against debugging processes.
- Added several built-in file and registry rules.
- Added several search locations of autostart applications.
- Added an option to set the behavior in leaning mode when explicit "deny" rule is found.
- Added support for logging actions that trigger ASK rule in silent mode.
- Added support for Windows 7 build 6801.
- Changed all the "Ignore" to "Ask" in system application rules to avoid being affected by low priority rules.
- Fixed a bug that may cause BSOD when working with Jetico firewall.
- Fixed a bug when deleting files.
- Fixed a bug when detecting actions of loading kernel driver.
New in Malware Defender 1.2.0 (Nov 10, 2008)
- Improved the rule architecture.
- Improved log functionality.
- Added support for verifying file signature of auotstart applications in background.
- Added support for exiting MD without disabling protection.
- Added support for using hot keys to execute some commands.
- Added support for searching rules.
- Added support for displaying permission settings of application rule in the tooltip.
- Added support for displaying stale rules before deleting.
- Added a menu item to remove temporary rules manually.
- Added support for using relative path in file rules, child application rules, target application rules, driver rules, hook modules rules, and allowed applications. A relative path is beginning with "." (current directory) or ".." (parent directory), and there can be more than one "..".
- Fixed a bug that may cause BSOD.
- Minor improvements and fixes.
New in Malware Defender 1.1.3 (Sep 24, 2008)
- Added an option to the alert dialog to add child application to group.
- Added support for using DELETE key to delete/kill selection in various dialogs.
- Increased startup speed.
- Fixed a bug of not deleting temporary rules when exiting processes.
- Fixed a bug when scanning autostart entries with same name and data.
- Fixed a bug when creating rules for named pipe by log.
- Fixed a bug when handling the process priority.
- Changed the process priority of MD to "Above Normal".
- Changed the behaviour in leaning mode. If explicit DENY rule is found, MD will not permit the action.
New in Malware Defender 1.1.1 (Sep 16, 2008)
- Added multiple selection support to process manager and kernel module manager.
- Improved protection against broadcasting messages.
- Fixed a bug when executing actions from multiple threads of same process. The program will ask user even if a rule is created.
- Fixed bugs in file reading protection.
- Fixed a crash bug in the process manager.
- Fixed a bug when handling registry rules.
- Fixed a bug when deleting files.
- Fixed a bug when all protection is disabled. New processes will be suspended in some cases.
- Decreased the size of installer by changing the NSIS compressor.
- Minor improvements and fixes.
New in Malware Defender 1.1.0 (Aug 29, 2008)
- Added support for adding child application rules, driver rules, hook module rules, file rules and registry rules to member of application group.
- Added an option to allow running user specified applications if no explicit "deny" rule is found.
- Added a new choice of rule object to the Alert dialog.
- Added support for sorting autostart applications.
- Added a menu item to remove stale rules.
- Added a Confirmations page to the Options dialog.
- Added an option to disable showing the balloon tooltip when started.
- Added support for remembering the sort settings for processes and kernel modules.
- Resolved the problem of being blocked on startup in Vista.
- Fixed a bug in about dialog. The web link did not work.
- Fixed a bug when executing applications without .exe extension. The program will ask user even a permit rule is created.
- Fixed a bug when writing files in desktop folder. The program can not detect the action.
New in Malware Defender 1.0.1 (Aug 12, 2008)
- Improved protection against accessing physical disk.
New in Malware Defender 1.0.1 (Aug 12, 2008)
- Improved protection against accessing physical disk.