Malware Defender Update History

Version 2.2.2 (June 6, 2009)

• Improved support for Windows 7 rc.
• Fixed a bug when downloading kernel symbols in Windows 7 rc.
• Fixed a bug that does not convert short file name path of dynamic link library to long file name path.
• Changed the status of "Read-Restricted Files" file group to disable for fresh installation.
  

Version 2.2.1 (May 31, 2009)

• Fixed a bug when handling file path in Vista or above.
• Fixed a bug in mdhook.dll.
• Fixed the problem that the priority of logging event is not the same as the prioiry of rule.
  

Version 2.2.0 (May 22, 2009)

• Added protection against accessing Service Control Manager.
• Added protection against loading dynamic link libraries.
• Added protection against accessing COM interfaces.
• Added protection against setting hidden attribute of file or folder.
• Added support for searching permission and comment of rules.
• Added support for managing multiple rule files.
• Added support for Windows 7 rc.
• Separated "duplicate handle" permission from "access memory of other processes".
• Improved performance when handling file reading actions.
• Minor improvements and fixes.
  

Version 2.1.1 (April 9, 2009)

• Added protection against controlling processes using DDE.
• Added support for Windows 7 build 7068.
• Added support for running in safe mode to change rules and settings.
• Moved rundll32.exe out of system applications rules.
• Changed the default initial file rules of explorer.exe to allow accessing all files.
• Fixed a bug when renaming rule group.
• Fixed a bug when verifying file signatures.
  

Version 2.1.0 (March 17, 2009)

• Improved log functionality.
• Added create and delete permissions to file rules.
• Added support for checking command line when a process is created.
• Added support for selecting a group as rule object in Alert dialog.
• Added support for restoring default rules.
• Added support for creating new registry value of arbitrary type.
• Added support for setting default value of registry key to arbitrary type.
• Fixed a bug that cannot search files by date.
• Fixed a bug that protection can be changed using hot keys when UI is locked.
• Fixed a bug that cause ActiveSync to fail in Vista.
• Minor improvements and fixes.
  

Version 2.0.5 (February 13, 2009)

• Added French version.
• Fixed a bug that may cause BSOD when upgrading MD in Windows 2000/2003/XP.
• Fixed a bug when detecting actions of installing global hook.
• Fixed a bug in the uninstaller.

Version 2.0.4 (February 6, 2009)

• Reduced the size of application rule dialog to compatible with low resolution screen.

Version 2.0.3 (February 5, 2009)

• Added support to display different tray icon if not all protections are enabled.
• Fixed a bug that may block file reading actions incorrectly.
• Fixed a bug that may cause MD crash when handling invalid IP address.
  

Version 2.0.2 (February 3, 2009)

• Improved protection against broadcasting messages.
• Fixed a bug that may cause DNS lookup error in Windows Vista/2008.

Version 2.0.1 (January 22, 2009)

• Fixed a bug that may cause BSOD when network protection is enabled in Windows 2000/2003/XP.
• Added support for closing multiple network connections in a run.

Version 2.0.0 (January 16, 2009)

• Added network protection.
• Added network ports viewer.
• Added protection against killing processes by setting parent window.
• Added support for displaying command line of process in process manager.
• Added support for displaying the new time when prompting for the "set system time" action.
• Added support for displaying detailed tooltip when moving mouse to the first column in log window.
• Added support for changing all permissions of application rule by clicking one button.
• Added an option to force MD to use fixed driver name.
• Fixed a bug when handling registry value name which contains '\'.
• Fixed a display bug in Alert window.
• Changed not to log actions which are denied by ASK rules in silent mode. This will improve the performance when blocking massive actions.
• Minor improvements and fixes.

Version 1.2.3 (December 18, 2008)

• Fixed a bug that may cause chkdsk error when startup.
• Fixed a bug when creating rules for named pipe in learning mode.
• Added support for resizing the registry rule dialog box.
• Changed the default setting of "Allow signed applications to be run by system applications" to unchecked.
• Other Minor improvements.
  

Version 1.2.2 (November 24, 2008)

• Added support for jumping to the same registry key in HKLM or HKCU by context menu.
• Added "Go To Referenced Key" command to the context menu of registry editor when the selected key or value contains a valid ProgID or ClassID.
• Added "Open Containing Folder" command to the context menu of registry editor when the selected key or value contains a valid folder or file path.
• Added "Open URL" command to the context menu of registry editor when the selected key or value contains a URL.
• Added support for logging related data of actions. (command line, handle name, hook type, etc)
• Added new built-in registry rules to protect against changing files and folders settings of explorer.
• Changed execute permission of system application to "Ignore" if it is "Ask".
• Fixed a bug when creating rules in learning mode.
• Fixed a display bug in autostart manager.
• Fixed a bug when parsing registry path in address bar.
  

Version 1.2.1 (November 16, 2008)

• Added protection against modifying kernel objects of known dlls.
• Added protection against duplicating handles.
• Added protection against debugging processes.
• Added several built-in file and registry rules.
• Added several search locations of autostart applications.
• Added an option to set the behavior in leaning mode when explicit "deny" rule is found.
• Added support for logging actions that trigger ASK rule in silent mode.
• Added support for Windows 7 build 6801.
• Changed all the "Ignore" to "Ask" in system application rules to avoid being affected by low priority rules.
• Fixed a bug that may cause BSOD when working with Jetico firewall.
• Fixed a bug when deleting files.
• Fixed a bug when detecting actions of loading kernel driver.

Version 1.2.0 (November 9, 2008)

• Improved the rule architecture.
• Improved log functionality.
• Added support for verifying file signature of auotstart applications in background.
• Added support for exiting MD without disabling protection.
• Added support for using hot keys to execute some commands.
• Added support for searching rules.
• Added support for displaying permission settings of application rule in the tooltip.
• Added support for displaying stale rules before deleting.
• Added a menu item to remove temporary rules manually.
• Added support for using relative path in file rules, child application rules, target application rules, driver rules, hook modules rules, and allowed applications. A relative path is beginning with ".\" (current directory) or "..\" (parent directory), and there can be more than one "..\".
• Fixed a bug that may cause BSOD.
• Minor improvements and fixes.
  

Version 1.1.3 (September 24, 2008)

• Added an option to the alert dialog to add child application to group.
• Added support for using DELETE key to delete/kill selection in various dialogs.
• Increased startup speed.
• Fixed a bug of not deleting temporary rules when exiting processes.
• Fixed a bug when scanning autostart entries with same name and data.
• Fixed a bug when creating rules for named pipe by log.
• Fixed a bug when handling the process priority.
• Changed the process priority of MD to "Above Normal".
• Changed the behavior in leaning mode. If explicit DENY rule is found, MD will not permit the action.

Version 1.1.2 (September 16, 2008)

• Fixed a bug may cause BSOD when handling very long file paths.

Version 1.1.1 (September 15, 2008)

• Added multiple selection support to process manager and kernel module manager.
• Improved protection against broadcasting messages.
• Fixed a bug when executing actions from multiple threads of same process. The program will ask user even if a rule is created.
• Fixed bugs in file reading protection.
• Fixed a crash bug in the process manager.
• Fixed a bug when handling registry rules.
• Fixed a bug when deleting files.
• Fixed a bug when all protection is disabled. New processes will be suspended in some cases.
• Decreased the size of installer by changing the NSIS compressor.
• Minor improvements and fixes.

Version 1.1.0 (August 28, 2008)

• Added support for adding child application rules, driver rules, hook module rules, file rules and registry rules to member of application group.
• Added an option to allow running user specified applications if no explicit "deny" rule is found.
• Added a new choice of rule object to the Alert dialog.
• Added support for sorting autostart applications.
• Added a menu item to remove stale rules.
• Added a Confirmations page to the Options dialog.
• Added an option to disable showing the balloon tooltip when started.
• Added support for remembering the sort settings for processes and kernel modules.
• Resolved the problem of being blocked on startup in Vista.
• Fixed a bug in about dialog. The web link did not work.
• Fixed a bug when executing applications without .exe extension. The program will ask user even if a permit rule is created.
• Fixed a bug when writing files in desktop folder. The program can not detect the action.

Version 1.0.1 (August 11, 2008)

• Improved protection against accessing physical disk.

Version 1.0.0 (August 9, 2008)

• First public release.