RogueKiller

Adlice Protect (formerly RogueKiller) 16.6.1.0​

• Updated to core 8.10.1
• Added ARM64 architecture support (StackWalker context, process registers)
• Optimized real-time protection path parsing (avoid full-path string copies in pipe/UNC checks)
• Updater now passes OS and architecture to the download API for accurate package resolution
• Updated checkbox icons with refined designs and QTreeView/indeterminate state support
• Translations update across 16 languages

Kliknij aby rozwinąć...

Adlice Protect (formerly RogueKiller) 16.6.2.0​

Adlice Protect (formerly RogueKiller) 16.7.0.0​

Adlice Protect (formerly RogueKiller) 16.8.0.0​

Adlice Protect (formerly RogueKiller) 16.8.2.0​

RogueKillerCMD 5.5.0.0​

Aug 6, 2026

• Proxy support: RogueKillerCMD now works behind a proxy:
• Auto-detects and uses the Windows system proxy by default (no options needed), fixing activation, registration and updates on corporate networks
• New -proxy <hostort> [user] [pass] switch to set the proxy explicitly
• New -no-proxy switch to force a direct connection
• Build: added Visual Studio 2022 support (version-aware build for both VS2015 and VS2022 toolchains, plus ARM64 architecture support):
• Updated to core 9.0.8 (bundles RKSdk + utility layers):
• Network: auto-detect the system proxy when none is configured (licensing, updates, telemetry); CA-bundle fallback for TLS so HTTPS keeps working on machines missing newer root certificates (e.g. Let's Encrypt / ISRG)
• UCheck: fixed available-update detection for compact version numbers (e.g. 9.76) that were wrongly flagged as outdated
• UCheck: use the correct OS-specific download links on Windows 10/11 (previously fell back to legacy Windows 7 builds)
• Updater: phased self-update reporting (Resolving -> Downloading -> Installing -> Done) and automatic retry on transient network failures
• Registry: 32-bit (WOW6432Node) keys now resolve to their true redirected path, fixing false positives in startup-entry and registry analysis
• Signatures: fixed digital-signature scanning to collect all hits before the verdict
• Detection: fewer false positives on encoded PowerShell from legitimate apps, while keeping blacklist / whitelist enforcement
• Reporting: correct file hash for symbolic links and NTFS junctions (target file, not the link); fixed the SHA-256 field name (was "file_sha356")
• Quarantine: deletion failures are now correctly marked as failed instead of being dropped from the list
• Real-time protection: hardened kernel-event parsing with bounds checks against malformed driver packets; driver/service protocol-version validation
• Path handling: buffer-overflow guards and correct SystemRoot expansion (fixes a double-prefix issue affecting Windows 11 user services)
• PE parser, YARA scanner and NTFS parsing hardened against malformed input (out-of-bounds guards, null-safety, timeout initialization)
• Windows Update Agent searches now time out (5 min) to avoid scan-thread hangs
• Stability: fixed several data races (detection collection, config access, IPC flags, RTP init), memory leaks and OOB reads across the core

Kliknij aby rozwinąć...

Adlice Protect 16.8.3.0​

V16.8.3 08/23/2026
==================
- Updated engine to 9.0.10 (carries 9.0.9 fixes folded in)
* Detection accuracy improvements around Windows service hosts â fewer false-positives on legitimate system components while genuinely malicious loads are still surfaced
* Signature engine refresh with upstream fixes; a real error is now surfaced when signatures fail to load instead of silently continuing
* Cloud-driven configuration so service URLs and endpoints can be rotated without a client update
* Report generation: falls back to the current Windows user when the scan didn't record one (fixes blank "User" field on some service-mode scans)
* Sub-KB file sizes now display with a literal "B" suffix, consistent across all interface languages
* Quieter logging on optional network endpoints that legitimately return non-2xx (less noise in the log)
* Build hygiene fixes for older Windows SDK targets
- New Report view: the post-scan and history report window is redesigned
* Standalone modernized window with a section sidebar (Overview, Cloud, Processes, Modules, Services, Registry, Tasks, Filesystem, WMI, Web, Hosts, Antirootkit, Soft Outdated) and per-section badges showing the count and malicious-only tally
* Aligned resizable columns across sections, flat-table sorting on any column, an inline filter bar (All / Hide safe / Malicious only), and a search field
* Export (JSON or text) with an inline progress dialog; the Share flow uploads and reports success in-place
* A hidden removal-script flow surfaces when a report is eligible: check availability, download, and open â with a progress indicator throughout
* Improved progress-text contrast so the busy strip stays readable on both themes
* Sidebar / license overlap fixes and UCheck adaptations so the same window backs both products
- Header signatures badge now shows "Not loaded" instead of a permanent spinner when signatures fail to load (tracks the real signature status rather than a binary IsLoaded check)
- Reports list: selecting a row is now checkbox-only. A plain click on the row no longer toggles selection (which made it easy to accidentally multi-select while trying to open a report); double-click still opens the report
- Windows accessibility text-size slider is now honored: the app font scales with Settings â Accessibility â Text size (100â300 %), so message boxes, tooltips, tables and native context menus follow the user's chosen size
- Fix: custom scan "Options" master checkbox now shows its checked state visibly â previously the indicator was invisible against the tinted title bar
- Notification popup: on the "Malicious item blocked" toast, the "Action" header row in the dropdown is no longer clickable. Clicking it used to silently fire the default action (Allow â add to exclusions)
- Translation refresh across the supported languages for the new Report view and the header changes (Italian and German translator updates folded in)

Kliknij aby rozwinąć...

Adlice Protect (formerly RogueKiller) 16.8.4.0​

V16.8.4 09/03/2026
==================
- Updated engine to 9.0.11
* Windows service-host detection: process rows now surface the redirected target inline in the Command column when it differs from the process image (for svchost, the hosted DLL that actually got scanned) â the scan tree shows the real payload, not just "svchost.exe -k netsvcs -s Foo"
* Report export: the resolved service-host target is included in the text export as well
* Software detection: fixed a rare mis-classification where a program installed via a package manager wouldn't line up with its installer entry
- Report view: switched section tables to the native rendering path used in the rest of the app â faster to scroll on very large reports and matches the system look-and-feel; filter bar (All / Hide safe / Malicious only) and live search are unchanged
- Report view: column parity restored across all sections; a Command / Target column is added where relevant so the resolved payload is visible next to the process image
- Settings â Exclusions: the count badge on the Settings menu now refreshes live on every add / remove instead of waiting for a full settings reload
- Installer: the modernized (Qt6) build now requires Windows 10 version 1709 or later. Older systems (Windows Server 2016, early Windows 10) transparently fall back to the legacy installer, which continues to target older Windows
- Translation refresh across supported languages for the new Report view column labels

Kliknij aby rozwinąć...

Adlice Protect (formerly RogueKiller) 16.9.0.0​

V16.9.0 10/08/2026
==================
- Choose a scan type: redesigned landing page
* Three clear choices (Full / Quick / Custom) with the recommended one marked, each card is fully clickable with a subtle hover lift
* Live signatures freshness pill at the top-right ("up to date" vs "outdated") with the loaded version shown on hover; one-click Download and Import buttons
* Last-scan line reads "today / yesterday / N days ago" with the exact date and time next to it
* Custom scan carries a visible PREMIUM badge when the license is missing so the gating is obvious
- Custom scan options: redesigned configuration page
* Three resizable panels — Elements to scan / Engine settings / Locations — with a draggable split between the two left columns and the locations tree so power users can grow the drive picker
* Compact header strip summarizes the current configuration (active categories, selected locations, engine badges for MalPE / Cloud / Rootkit when on, mode)
* Master toggle on the categories column flips every element at once; action footer with Cancel / Start scan replaces the previous button bar
* Same page is now used by the scheduled-scan editor so creating a scheduled custom scan uses the modernized options UI
- Scan results page
* Clean-scan state shows "No threats found" with a green shield and offers a single Finish button, instead of leaving Cancel / Quarantine (0) wired to nothing meaningful
* Finish on a clean scan skips the end-of-scan upsell dialog (nothing was removed, nothing to upsell)
* Status column widths and empty-state copy tightened on the detections list
- Dark theme corrections across the scan flow
* Scan-choice, custom-scan options, and scan-results pages now honor the dark palette on first paint and on live theme flips (previously these could stay light-mode even when the rest of the window was dark)
* Dashboard "Start scan" button, scan-progress action buttons and the results-page action bar now share the same primary blue so pills read consistently across pages
- Dashboard: Last scan date renders as "—" instead of a blank line when no scan has been recorded yet
- Translation refresh for the new landing page, custom-scan options and results-page copy

Kliknij aby rozwinąć...