RegDefend release announcement

[Jason_R0]

If you want to get an email pretty much the minute the newest version of RegDefend is released, simply subscribe to this thread which I will be updating with new version information.

[Bowserman]

For anyone wanting to subscribe to this thread, there is a dropdown option at the top right called Thread Tools. Click on it and there is an option to subscribe :).

Regards,
Jade.

[Jason_R0]

RegDefend v1.200 has been released.

Changes since last version :-

-Added registry wildcard support
-Optimized executable/resources resulting in less memory usage
-Now show program icon in the alert dialog
-Now show previous registry value and proposed change in alert dialog
-The type of action performed (delete/modify/create/etc) is now shown in the alert dialog
-Added history logging to the log window, now shows all prior events listed by month
-Fixed issue with autostart registry group not protecting one item it was supposed to be
-Added new default registry group called Internet Explorer Protection
-Fixed issue in driver which was incorrectly mapping certain registry keys
-Fixed issue with the RegDefend driver allowing the last registry event to occur if one existed in the buffer at GUI close.
-Fixed sorting in the "Add Registry Item/Add Rule " dialog
-New "Add Registry Item/Add Rule" dialog with the ability to manually insert keys and wildcard support
-Added color schemes support, with 3 default schemes
-Fixed issue with trial not properly ending after the period had expired
-Double click on a registry group now disables/enables it
-Resizing GUI with an item selected now longer results in temporary graphical corruption
-Enhanced the information which the balloon alerts give to the user
-Can now CTRL+C (copy) selected items from any listview in RegDefend, allowing easy copy-paste support from the log and other windows
-New icons added to various places in the interface
-Many small fixes and GUI tweaks/visual enhancements. (thanks Chris,Alan,Jade)

[Jason_R0]

RegDefend v1.300 has been released.

New features and changes since the last version :-

-Fast and powerful registry monitoring added with a full compliment of filtering abilities during and after capture
-If a registry item is set to "ASK USER" and the operation being performed is "set value" AND the data is the same as exists currently in the registry, then no alert will occur anymore. ie it now checks what is written to what is already there, if the same then it will "allow" the operation to occur.
-If the desktop is switched whilst an alert is being displayed or going to be displayed, then RegDefend will simply block the operation by default instead of asking the user.
-Fixed balloon alerts from not appearing due to "Show Ghosts in background option" which has now been removed. Also changed tooltips to balloons instead of simple rectangles.
-Fixed issue with regdefend.exe being suspended and not able to process "Ask User" requests
-Now log any registry actions which are allowed by the user, rather than only showing actions which are blocked
-Any log event which is blocked automatically due to inability to ask the user, will be shown with [AUTO RESPONSE] in the log
-GUI now selects first registry group upon startup
-Now show all information about registry items in the listview
-Now show which registry group a log event belongs to
-Optimized sorting
-Lots of other small fixes and tweaks, thanks to all testers.

[Jason_R0]

RegDefend v2.000 Public Beta Released.

This is classified as a BETA release, so you might want to wait until it hits final.

http://www.ghostsecurity.com/downloads/gssbeta.exe

[Jason_R0]

An update to the RegDefend v2.000 BETA has occured. You simply need to download it from within the program.

[Jason_R0]

RegDefend v2.000 Final has been released.

Go to http://www.regdefend.com to download the update. If you have registered RegDefend v1.300 then you can use your same registration details to register v2.000


Changes since last version :-

-Redesigned the GUI, RegDefend now falls under the "Ghost Security Suite" product range
-Easier to use due to unneeded complexity being removed
-New custom flat look, which is maintained throughout interface
-Designed for multiple security components (RegDefend being one)
-Now includes an integrated updater
-Color/Theme changes take place dynamically, no restart needed
-New "Emerald Green" color theme added
-Various statistics added


-New RegDefend Alert/Log window
-Removed "current live log" setting and simply integrated it into a date based filtering system
-Viewing old logs is now as simple as choosing the date you want to investigate
-Logging now incorporates a "smart disk usage system" , which means log sizes are now at least 1/50th the size as previous versions over the same period of time
-Reduced information in the listview to reduce clutter
-Now show full alert information when an item is clicked upon

-Updated RegDefend alert/ask user window
-Now show commandline of application
-Can now KILL the process or the thread performing the registry operation. Should work regardless of any process protection you have, so be careful
-Now show recommendations on what to do for each registry alert, along with other information
-Improved layout and design to aid reading

-New Registry rules editor
-Totally redesigned the interface, allowing easier creation/modification of rules
-Application only rules added, allowing people to define rulesets for untrusted/unknown programs. For example you can block a program which is run in a certain location (temporary files, internet cache, etc) from accessing the registry.
-Application rules can be filtered using both the command line (useful for svchost.exe/rundll32.exe) and with wildcards
-Application rules can now use special strings to select the Windows directory, program files directory, internet cache, etc
-Collapsed all of the .ghst files into a simple rdconfig.bin
-Group ordering added
-Rule ordering added
-Rules editor is no longer the main part of the progam, which hides unneeded complexity from users who use the supplied rules
-Now allow modification of every string the user can enter into the editor
-Adding multiple rules into the editor is now easier
-Added importing of RegDefend v1.3/v2.0 rules into the editor
-Added exporting of RegDefend v2.0 rules
-Improved wildcard handling, no longer have to manually set whether you used wildcards or not
-Groups and rules can now have descriptions attached to them, to allow people who have no idea about registry locations to hopefully understand them better
-Added the ability to move rules between groups through a right click menu

-New Ghost Security Suite driver
-Incorporated RegDefend into a unified driver system
-Added command line caching
-Implemented Short File Name to Long File Name resolution
-Implemented new rule reading system fixing a few issues whilst being faster
-Added optimizations to rule list searching, can be up to 200% faster now than previous version
-Added lots of speedups, with improved design and caches