Updates

[djames]

New updates are available.
You can either click "Smart Update" or you will get them automatically.
There are two updates; First will be the TFUD and TFUN. After this the other update will include other components. You can see what has been updated by looking at the installed directory for files renamed with ".bak"

Some of the fixes included:
1. Suspend does not suspend thread injection rule.
2. Opera FPs
3. Custom rules for Registry not fully functional
4. http://www.pctools.com/forum/showthread.php?t=48677 "Quarantine + Always remember"
5. Some new rules to prevent fps
6. Some new rules for malware behavior

Some suggestions from users have been addressed here as well.

The final version for updates should be 3.0.4

[djames]

NEW UPDATE Sept 13 07

This update includes: V3.0.7.0

1. New updater, so we ask that you UNINSTALL the ThreatFire version that you have before installing the new version.
2. Gui Crash
3. Scheduled Scan (it now will include the AV part)
4. More info during updates, so that a window will inform the user what is happening.
5. Work done on Quarantine
6. Rules added (thankyou solcroft, although not all of your suggestions were added, some were, and more will be added in the future.

[djames]

NEW UPDATE Sept 21st 07 Website is updated

Some more bugs were fixed for this build.

1. Crash/hang during scan
2. BSOD with OutPost Firewall
3. Some internal file issues
4. Reported Winqual dumps
5. Quarantine synchronization at shutdown

[djames]

Update 10/04/07

Should be a couple of updates if you are doing this manually. So from 3.0.8 to 3.0.9 to 3.0.10 !

A few fixes in this one.

1. Some text mistakes were corrected. (thanks mjq424 and Solcraft):)
2. FPs on uninstall. (thanks giorom60):)
3. Some crash issues fixed.
4. AV db updates.
5. And a few other fixes.

[djames]

Update 10/17/07

The fixes include:

1. Install helper functions
2. iexplore fps
3. reg key clean up
4. text changes
5. Update hang (those that got this, wont see the "fix" until then next update)
6. performance improvements
7. Some crash fixes

[djames]

Update 11/13/07Website is updated

Fixes include:
1. BHO quarantine fix
2. System restore for Vista
3. Scheduled scan notification
4. Updated dbs
5. Intelliscan :This affects the Basic Threat scan. Instead of scanning specific folders, the Basic Threat scan now queries the registry and determines a specific list of files to scan. All other scanning targets remain the same.
6. Multi-thread scanning: Multiple volumes are now scanned in parallel. Rootkit scanning and threat scanning are done in 2 separate passes.
7. Expose registry values in quarantine log: The Quarantine Log entries should now include additional information for registry values that were quarantined, and the user can restore, or delete specific items in the log. (You get to this by clicking on the "i" icon in the Quarantine log, and then right clicking on the entries in the window)
8. Improved ADS analysis. (Alternative Data Streams)

[djames]

Update 12/13/07

Fixes include:
1. Tutorial. Upon installation, the ThreatFire website will open up and present a tutorial for new users.
2. Protection Level Slider. Protection levels from 1 to 5
3. Scanner:
a. Gas Gauge
b. Integrated scan dialog, so you can minimize TF while doing a scan.
4. Shutdown performance fix.
5. TF killing it's own process
6. Scan ignore file list being preserved through upgrade
7. Scheduled scan finding files that are not found during manual scan.
8. USB autorun fix
9. MySpace IM fix
10. Scan hang (hopefully this will solve mjq424's issue)
11. Buffer overflow, and firewall fixes

[djames]

Update 12/20/07

Update v3.0.13.11 fix should include:

1. Freeze. System Hang, and or BSOD!

[djames]

Updates Include:

1. Microsoft Security Center approved “AV”.
2. English/German versions. Note – German not fully translated yet.
3. Updated AV Engine. Update from 4.4.2 to 4.4.5
4. Dynamic AV Database updates. AV Database updates are no longer tied to the product update mechanism. Instead, db updates are similar to Black/White list updates and happen on regularly scheduled intervals.
5. Animated Tray Icon. Animation (flickering flame) during scan and quarantine. Tooltip during animation provides additional information.
6. Survey and Notification Dialog updates.
7. Options in Settings to change language, and manage notifications.
8. New malware rules
9. New/Updated Help.
10. Fix for schedule scan
11. UI Typo – thanks solcroft
12. Level 4 blank alerts
13. TF crash http://www.pctools.com/forum/showthread.php?p=177367&posted=1#post177367
14. Hopefully …. Hotmail, Ebay sign in resolved. (like I mentioned, this is fixed for us in house)
15. Information on the rule triggered is in the Protection log and not the alert window -- sorry Disk4mat (misunderstanding by myself)
16. Alert dialog will link to ThreatExpert if threat is known in "Learn more".
17. DPI 120 fix

[djames]

Updates include:

1. Rule patch.
2. Microsoft Security Center fix.

[djames]

Update 04/28/08 Website not yet updated

Some important info
1. Auto-update will not be activated for 24hrs or so.
2. If you decide to upgrade manually, and you have custom rules, pls save the General.dat file to another place. Uninstall 3.0.14.16, then install 3.5.0.21, then ... replace the General.dat file with the one you saved. When auto-updates is turned on the process will be seamless, and you will not need to take this extra step to preserve your custom rules.

1. New Security Status main GUI
a.Tabbed selection of Protection Statistics and Worldwide Detection
b.Worldwide Detection map with recent prevalent malware/adware hits.
2. Advanced Tools
a.Tabbed selection of System Activity Monitor and Advanced Rule Settings.
b.System Activity Monitor with ability to kill or look up a process
3. Enhanced Alert Dialog.
a.Provide technical information similar to Protection Log detailed view.
b.Deny option available for custom rules.
c.Custom Rules alert dialog is now blue.
d.New radio button selection.
4. User Options for default alert handling.
a.When a suspected threat is detected.
b.When adware is detected
c.When known malicious threat is detected.
5. Suspend mode, will pause scanning.
6. Better uninstall
7. AV Scanning available in free version.
8. Rules
a.Improved MBR infection detection.
b.Improved trusted program detection.
9. Improved data gathering for trusted processes
10. Improved German txt
11. VMWare and UltraVNC fixes

[djames]

Update 10/20/2008 Auto update/smart update has not been turned on yet.

UI
Custom Scan Wizard
Configure and run custom scans including selected files/folders with exclusions.

Context Menu Scan

System Status
System Status tab on main menu. Includes relevant version/registration/status information.

Smart Update Options
Configure update behavior via Settings->Check for Updates.

Alert Dialog
Sensitivity Level information is included on the yellow alert dialog.


Localized quickstart guide is included in the release
Online Help

Languages
Simplified Chinese
German
Polish
Portuagese (Brazilian)

Rules
Device Driver Modified
Catch malware that temporarily replace/modify system drivers and load them before SFP can restore them.

Program deleted itself
Catch suspicious self deletion.

System service modified
Catch malware that inserts itself into a previously defined service host startup list.

Malicious behavior sequence detected
Generic rule for behavior profile detection.

Some other under the lid rules etc...

A couple of user requested (Thanks Kees1958) custom rules added for user preference.

[djames]

Update 10/29/08 Server side technical issues are limiting the release. Although it is out it does effect download speeds.

Db update fix among other minor tweaks.


There is an issue with Vista Home user where an auto update will not allow Custom Rules to be changed or added. Please Uninstall and Re-install to 4.0.0.8 for a fix.

[djames]

Update 11/25/08 4.0.0.10

1. Avast fix
2. Driver fix
3. Tray notifications
4. Multi user CPU issue.

[djames]

Update 2/18/2009

·ThreatFire now also verifies potential threats against its in-the-cloud black/white lists to automatically determine how to handle threats, requiring fewer decisions from users.

·Memory Scanner (Improved malware recognition – fewer false positives).

·Focus on pure behavioral detection. PC Tools recognizes that traditional signature-based anti-virus scanners have become a less effective, secondary line of defense to proactive behavioral based protection. User feedback has also indicated that ThreatFire is useful as the first line of protection in addition to traditional signature-based virus scanners. As a result, ThreatFire 4.1 focuses on delivering best-of-breed behavioral protection and no longer provides a signature-based virus scanner.

·Languages – French, Spanish, Italian

In addition there are some new rules.

http://www.threatfire.com/updates/ For more details :-)

[djames]

Update 3/9/09

A minor update with:

1. Rule fix
2. Default language installation fix
3. New button linking to the PC Tools Together forum. http://www.pctools.com/forum/forumdisplay.php?f=72

[djames]

Update 06/05/2009 Automatic updates and Smart Update will not be turned on until next week. Those wishing to install the new version should do a full unintall/reinstall with new version.

• Behavior profiling: patent pending technology which groups threats into families based on common traits or characteristics of the threat — similar to the way authorities profile criminals. This technology makes ThreatFire capable of catching hundreds of variants of malware derived from the same original threat and helps you to make a more informed decision about any malicious activity on your computer. The addition of the core behavior profile engine in this release builds upon the earlier inclusion of only a few individual behavior profile signatures tested in the 4.0 and 4.1 releases.
• Cloud Lookup Improvements: Backend enhancements to improve blacklist responsiveness and therefore further reduce yellow dialogs. Backend enhancements to use statistical analysis of incoming community data to identify whitelist candidates and automatically add these binaries into the whitelist.
• Improved Cleanup and Quarantine: Improved the ability of ThreatFire to identify the malicious behavior’s originating program(s). This is particularly relevant for malicious plug-ins and malware that injects itself into other programs.
• Improved Sociability with Other Security Programs
• Keyboard Driver Removed: Due to negligible benefit and rare issues with loss of keyboard functionality after updating to a newer ThreatFire version, the keyboard driver TfKbMon.sys has been removed. ThreatFire still protects users from most keyloggers by detecting and preventing the actual malicious activity that make keyloggers harmful, i.e. attempting to transfer data off a user’s machine.
• Improved Protection against Hackers
• New Malware Rules: Enhanced malware detection in the form of new behavioral-rules were added to further improve ThreatFire’s overall protection.
• Miscellaneous Maintenance Issues: Many minor program fixes and maintenance issues were addressed.

Special Note for Windows 2000 users:
Windows 2000 users are invited run ThreatFire v. 4.1. This requires Windows 2000 SP4 with Update Rollup 1. ThreatFire v. 4.1 will continue to receive automatic database updates indefinitely. Download http://www.threatfire.com/files/tfinstall41.exe

[djames]

Update 4.5.0.24

• Miscellaneous Maintenance Issues
• Bug fixes

[djames]

If you are interested, and would like to try the 4.5 64Bit beta release, please visit the PC Tools Beta Testers section for the link, or PM Achen for access permission.

This version is in beta for legal reasons, and as soon as we have the permission to let it out as a public release we will do so.

[djames]

Release of 4.6.0.19

Website download only, auto updates will be activated later on.

Now supporting:

Win 7, and both 32Bit and 64Bit installations.

Many bug fixes, thank to our beta users!

[djames]

ThreatFire v. 4.7 is a minor release addressing mostly maintenance issues and bug fixes. It can be downloaded directly from this link:

http://www.threatfire.com/files/tfinstall.exe

Automatic updates will not be turned on until next week so current users who wish to install this version will have to first uninstall the previous version and then install this new one.

Here’s what’s new:
--PC Security Check will now run for all users after updating, not just new installs
--Status Report has been redesigned
--Compatibility issues addressed
--Other general maintenance issues

[djames]

Minor fixes added.

Auto Updates activated.

[djames]

ThreatFire 4.7.0.17 has been released, and automatic updates to this release have been turned on..

This is a minor maintenance release that addressed several sociability issues, the most significant of which was a conflict with World of Warcraft. We also improved TF detection and some 3rd party software conflicts.