Zemana AntiLogger 1.9.3.156 out

Zemana AntiLogger 1.9.3.168
Wednesday, May 30, 2012 5:32 AM

Improved IntelliGuard Cloud
Fixed a false positive related to Anti-Keylogger module
Fixed rarely crash on system startup
Fixed various crashes related to the trial license
Fixed various display and text errors
Removed Arabic localization. Our excuses to all Arabic speaking users, this is just temporary.

NOTE: This version isn't shared via automatic updates yet. It is scheduled for the next week but you can get it manually from here

 

Zemana AntiLogger 1.9.3.169

Thursday, May 31, 2012 7:55 AM
Major improvements for IntelliGuard Cloud
Various other minor improvements and fixes

NOTE: This update is available for direct download and via Automatic Updates.
NOTE: All major and minor updates will be included in our RSS release notes feed
NOTE: Updating to this version requires a restart


-httx://zemana.com/default.aspx-

Rules.

 

Updating now working. Great.

 

Anyone know who is the Zemana user community that Intelliguard proports to use? I know these options are at least set off in the .169 release. So if Intelliguard is based on the Zemana user community, might be a "vapor" cloud.

Also I have had Zemana installed for over a month and this is the first update I ever received? And I have also manually checked for updates.

Finally, does Zemana update it's whitelist periodically? I have seen no evidence of that on my installation.

As far as tech support goes, I have sent them two e-mails to date and never received a reply or even an acknowledgement that the e-mail was received.

Anyone run Comodo's CLT with the Zemana Antilogger on a WIN 7 x64 PC? I did and it's score was terrible.

 

Thats the problem right there, you were trying it on Win 7 x64. Only a few modules are enabled for 64-bit.

 

I beleive Comodo's CLT tests are for 32 bit OS. They are quite old; developed around 2008.

Now the recent Matousec tests are for x64. I have never seen Matousec test Zemana Antilogger. Probrably because Zemana won't pay Matousec

 

One thing this .169 ver. has done is id these dial-outs to 67.201.31.xxx range; primarily 67.201.31.62 that have been occuring since I installed Zemana. This IP now appears at boot time along with the dial-out to Zemana's update IP address.

What I don't like about these 67.201.31.xxx dial-outs is they do occur periodically while my PC is on. These dial-outs however are malfomed; reversed like a RARP was performed. The addresses are xxx.31.201.67 and are caught by the honeypot address trap I have set on my router.

Frankly, I don't trust this software 100%

 

Here's an interesting observation on this latest .196 release.

Today I was fooling around with my active X settings in IE9 x86. Whenever I do that, I turn off my Active X settings in SpywareBlaster and turn them back on to repopulate the active x blocks SpywareBlaster generates in WIN 7's registry.

Well, not so much as a a peep from Zemana when I turned off the Active X settings which result in the active X blocks being removed from the registry. But when I set them back on, Zemana caught the registry access, said SpywareBlaster was a trusted app, and Zemana created a rule for it. At least this shows Intelliguard works.

BTW - anyone notice the "Zemana White List" missing in settings in the .196 release. Appears all app checks are clould or authenticode signature based.

Also strange is I have previously updated SpywareBlaster and I never received any alerts from Zemana on those registry accesses.

Bottom line - I think Zemana's HIPS system protection is pretty much a hit and miss thing. This is also bore out in a few uTube tests on Zemana I have viewed.

 

Just got done testing this .169 version with AKLT with IE9 open on a WIN 7 x64 box.

Not good. Out of the 9 AKLT tests, Antilogger failed 5 of them. It only caught the direct keylogging tests. This versions worse that the prior version I had which I believe was .156. That version caught all the AKLT tests except the 2 screenshot tests.

So much for the improved clould scanning.

I will wait for the x64 version which I hope will be released next month before making a final decision on this software.

 

How does SpyShelter compare with AntiLogger?

 

AntiLogger does not stand a chance.

 

Antilogger does very well in zero day malware testing done by MRG.
Antilogger is also one of the few programs which passed the financial malware simulator by MRG.

 

I tested this today and it passed all the AKLT tests except the two screen shot tests. I think the failure of the screen shot capture is an issue based on the new Zeus variant that is designed to capture screen shots. I will have to test this with a SSL connection and see if the screen shots are blocked.

I also tested using Zemana's own screenshot test and it failed that.

Zemana definitely needs to rollout this x64 ver. ASAP.

As far as MRG's tests go, the only one they did this year showed MBAM Pro performing better than Zemana. I do know MBAM sucks agains keyloggers so running both like I do does give some overlap protection. BTW - MBAM is a x86 app that has x64 compatiablity.

 

I'd sum up Zemana with two comments:

1. Good against MITB malware
2. Not so good against commercial keyloggers

All of the synthetic AKL tests I've seen (Spyshelter, Zemana's own, and the old AKL test) are tests using methods commercial keyloggers deploy. Modern malware does the MITB thing which these tests don't cover.

So when you say "Zemana fails this/ fails that" you have to put it into context of what exactly it's failing. Even with the fails I've seen with Zemana against commercial keyloggers, it misses only some of the methods they use. You'd still get alerted to the other logging happening.

 

Know of any downloadable tests that tests the MITB thing?

I was surprised however to see this .196 release fail Zemana's own screenlogger test. By fail here I mean no Zemana alert screen when the start button was pressed. It just copied my existing desktop active screen. Also makes no difference if run as admin or not.

 

Same here on x64 system.

 

I have found something that will probably result in me going back to my original .154 version or totally uninstalling Zemama Antilogger.

I reveiwed my WIN 7 x64 event log in detail last night and saw two Kernel - General entries flagged as errors. Both relate to Hive corruption in my WIn 7 x64 SP1 registry. I have never seen this type error before and these only started appearing after I let Zemana update to this .196 release last Friday.

Thinking more about the current situation, I am just going to uninstall Zemana and wait till the x64 version is released to reinstall since this current version is not that effective on x64 systems.

 

Nothing downloadable. Only tests I've read about are MRG's simulator and Zemana's Anti-SSL test, but neither are available to the general public.

Any half-decent HIPS would alert to the hooking from malware performing MITB. These Anti-logger test tools released by Spyshelter and Zemana are just for marketing ....although in Zemana's case it backfired on them because they only have limited 64bit support. Still, imo the lack of full capability on 64bit systems is irrelevant because Zemana would by and large detect 'keylogging' by other methods. None of the malware or the commercial keyloggers uses just one method of keylogging.

 

25% discount sound good for Zemana AntiLogger Full but €224.00 for 1 license!? no way!

 

Now Only: $14.95 (USD

 

That's normal on 64 bit systems, but the 156 32bit version also failed that test. They have a new release 1.9.3.173 and the 32 bit version now passes the screenshot test.

 

Zemana AntiLogger 1.9.3.178 (6/26/12)

Zemana AntiLogger 1.9.3.177 (6/25/12)

http://zemana.com/Download.aspx

 

Zemana AntiLogger 1.9.3.179 (6/27/12)

http://www.zemana.com/Download.aspx

 

Zemana AntiLogger 1.9.3.181 (6/29/12)

http://www.zemana.com/Download.aspx

 

Zemana AntiLogger 1.9.3.190 (7/5/12)

http://www.zemana.com/Download.aspx