V16.6.0 03/17/2026
==================
- Updated to core 8.10.0
* Upgraded third-party libraries to latest versions
* Fixed several potential crashes in core components (null pointers, invalid data handling)
* Fixed potential crash when receiving malformed data from the anti-rootkit driver
* Fixed potential crash when processing invalid pipe/IPC data
* Fixed potential crash in DLL injection (use-after-free)
* Fixed potential crash in WMI property handling (use-after-free)
* Fixed crash in digital signature verification
* Fixed crash from exception in system callback
* Fixed use-after-free in path parsing
* Fixed various thread safety issues in real-time protection and IPC
* Fixed YARA engine thread safety and signature loading
* Fixed YARA file open error not detected correctly
* Fixed SSL certificate verification not enforced for server connections
* Fixed memory corruption from mismatched allocation/deallocation
* Fixed uninitialized memory read in byte-order conversion
* Fixed quarantine not keeping items that could not be deleted
* Fixed configuration reading returning wrong values in some cases
* Fixed browser detection handling in scan results
* Fixed file restore operation
* Fixed scan report flags being ignored when saving reports
* Fixed registry key access rights not applied correctly
* Fixed incorrect registry key offset calculation
* Fixed incorrect file extension matching in scanner
* Fixed incorrect 64-bit code hook entries
* Fixed 64-bit pointer truncation in PE address resolution
* Fixed memory leaks in NTFS file parser (7 instances)
* Fixed buffer overflow in IRC network data handling
* Fixed buffer overflow in URL handling
* Fixed memory size miscalculation in webserver
* Fixed process handle check using wrong error value
* Fixed debug-based process termination always failing
* Fixed CPU usage limiter not throttling correctly
* Fixed Windows Update status reported incorrectly
* Fixed task scheduler processing wrong task entry
* Fixed potential race condition in asynchronous operations
* Improved stability of driver and device name resolution
* Improved curl compatibility
* Compatibility fixes and deprecated API cleanup
* C++17 / VS2022 compatibility
- Fixed data race on real-time protection data handling
- Fixed potential crash when sorting file system views
- Fixed command injection in shell extension
- Fixed several potential crashes (null pointer checks, type conversion safety, variable initialization)
- Fixed memory leaks in context menus and dialogs
- Fixed dead code and shadowed variables in quarantine and UI
- Improved build system: CMake configuration for VS2022 support
- Replaced deprecated Qt APIs (NULL to nullptr, updated coding standards)
www.adlice.com
Not available here.@oldschool Personally, I would rather use KVRT instead.
In that case, I believe ESET Online Scanner or EEK will be suitable substitutes.Not available here.
I use ESET.In that case, I believe ESET Online Scanner or EEK will be suitable substitutes.
re Eset online scanner, I recall it is slow (but thorough) and does user have disable system AV during its scan, if not, does every file get double-scanned ie slow down?I use ESET.
Nore Eset online scanner, ... does user have disable system AV during its scan,
Don't know. It seems pretty much like most other scanners I've used.does every file get double-scanned ie slow down?![]()
V16.6.1 04/21/2026
==================
- Updated to core 8.10.1
* Added ARM64 architecture support (StackWalker context, process registers)
* Optimized real-time protection path parsing (avoid full-path string copies in pipe/UNC checks)
* Updater now passes OS and architecture to the download API for accurate package resolution
- Updated checkbox icons with refined designs and QTreeView/indeterminate state support
- Translations update across 16 languages
www.adlice.com
- Notifications: always rendered in-app so elevated processes receive callbacks correctly
- Added Indonesian and Korean languages
- Lazy notification stack initialization for a faster app launch
- Updated to core 8.10.2
* Service start hardening: defer COM/Debug heavy init to OnRun, skip IsInstalled on the hot path
* Service: prefetch privilege LUIDs before kernel callbacks fire (eliminates first-event latency)
* Scheduled real-time-protection task: refresh VarEnv2 alongside VarEnv
* UCheck: fall back to PE FileVersion when DisplayVersion is malformed
* UCheck: match installed app by MSI ProductCode and validate downloaded file format
* ScanDigisig: collect all hits before deciding (better multi-signer file handling)
* MalPE AI: catch OOM when converting model buffer to string
* Win11: fixed AdliceDisabled folder opening an Explorer window
* Browser data: use move semantics when storing Chrome / Edge preferences
* Telemetry: include machine_id in payload
- Updated Utils libraries
* Service start hardening: defer heavy init + recover from non-crash exits
* Crash hardening: privileges cache, NTFS bounds checks, monitor dump filter
* GetFormattedSize: avoid locale leak when size == 0
- Themes: constrain checkbox / tree / table indicators to 16x16px
- Translations: Ukrainian installer string prefix fix, Hungarian style cleanup
www.adlice.com
- Updated to core 9.0.4 (carries 9.0.2 / 9.0.3 fixes folded in)
* Real-time stats are now pushed from the service to the UI once per second (total scanned, last scanned path) instead of polled
* Real-time protection: prefetch privilege LUIDs before kernel callbacks fire — faster verdict latency, less syscall churn
* Real-time protection environment refresh now also covers the user-context environment (previously only the system-context cache was kept up to date)
* Real-time protection service: faster startup (heavy work deferred until needed) and recovery from non-crash exits without WER prompts
* Real-time-protection filter pump: a faulting verdict callback no longer kills its worker thread or leaves the kernel waiting on a missed reply (fail-open by design, logged for diagnostics)
* Driver / kernel protocol hardening: event parsing validated against protocol version, monitors disabled before driver unload, filter unload authorized before retraction, IOCTL buffer leak fixed in monitored-path adds
* UCheck: deduplicates Microsoft Store entries against the registry and probes PE bitness from the executable
* UCheck: falls back to the PE FileVersion when DisplayVersion is malformed, so version comparisons stay accurate
* UCheck: matches MSI installers by ProductCode and validates downloaded file format before launching
* UCheck: caps winget upgrade / list at 30s wall-clock to recover from a wedged package manager
* UCheck: surfaces Wintrust signer / issuer / source on Installed entries so the UI can show trust details in tooltips
* UCheck: handles silent download failures more gracefully and adds the groundwork for TLS clock-skew bypass on systems with wrong dates
* Windows Update scan: 5-minute wall-clock cap on the WUA search, with proper recovery when the Windows Update service is wedged — the scan no longer hangs forever and the "Abort scan" button actually escapes immediately
* Reporting: hash the link target (LNK / JUNCTION) instead of the link itself, so the same content reports the same hash regardless of how it was linked
* Process::Create: bound the output-drain loop by wall-clock budget, preventing hangs when a child process spins on stdout
* Digital signature scanner: whitelist now correctly overrides blacklist / graylist findings
* Better behavior under Windows 11 for checkbox rendering in tabular controls
* System sounds no longer attempt playback on machines without audio output (fixes log noise on headless / VM hosts)
* Telemetry payload now includes a stable machine identifier; routes to staging when staging mode is enabled
* Dynamic configuration: staging mode, service URLs, app URLs, and tier prices
* Public report URL switched to panel.adlice.com
* Redesigned Activate (Marketing + License Registration) and My Account pages with a modern interface:
* Marketing pricing table: side-by-side Free / Personal / Technician tiers with highlighted features and tier color coding
* License Registration: tabbed flow (License key / Sign in / Free trial) with inline validation, spinner during server check, and a post-login license picker
* Free trial now exposes Personal and Technician options and disables itself once trial has been used on the machine
* Account view: status card colored by license state (valid / about to expire / invalid / trial), copy buttons for email and license key, calendar glyphs for dates
* Manage activations: per-machine cards, "Current machine" pill that protects your own activation from being removed by mistake
* Portable configuration card visible only for Technician licenses, with a modernized validity dropdown (Never expires hidden on trial)
* Refreshed support form
* Indonesian and Korean translation bundles now wired up
* Translation polish for Ukrainian installer strings (prefix fix) and Hungarian punctuation
* Notifications: lazy WinToast initialization to avoid AUMID side-effect on startup
* Form indicators (checkbox / tree / table) normalized to 16×16 px
* Real-time protection hardened against RPC failures during shutdown and kernel-callback paths
* NTFS attribute parsing: bounds checks against malformed volumes
* Crash reporter filters out dumps belonging to third-party host processes, and skips uploading any dump that doesn't belong to the program
* MalPE_AI: catch out-of-memory when converting model buffer
* Reduced memory copies when collecting Chrome / Edge preferences during scan
* Fixed Windows 11 issue where opening the AdliceDisabled folder spawned a stray Explorer window
* Fixed locale leak when formatting a zero size value
* Various stability and audit hardening
- Redesigned dashboard interface with modern card-based layout: shield badge with live score, KPI tiles for Scanned / Blocked / Quarantined, Quarantine / Scheduled Scans / Modules cards on the second row, with light and dark theme support
- New scan progress page: live status ring, current step / scanned / detected counters, threat-name + hover-path "Last Detection" row, rotating campaign banner kept intact
- Real-time module toggle: switches now respond instantly with a busy spinner while the service confirms, instead of bouncing back during the IPC round-trip
- Protection score now reflects which modules are active — turning off a single module no longer collapses the whole score to a single number; turning off everything is critical, not just a warning
- "Click to retry" link when the service is down, "Click to enable protection" link when every module is off — both wired to re-enable the right things with one tap
- Scan history chart: now distinguishes scan reports from their linked removal reports, so a scan whose detections were successfully removed shows green ("Threats removed") instead of red
- Last Detection on the dashboard is clickable when populated and navigates to the History → Events page
- Quarantine card: now shows the original path under each threat name (with a tooltip for long paths) and only shows the family badge when meaningful (no more duplicate "Cloud" next to "Cloud.Generic")
- Scheduled scans: day-of-week badge now displays correctly (was showing the literal format tokens), frequency labels match the Settings page wording, link reads "+ Add" when empty or "Modify →" when at least one entry exists
- Scan KPIs on the Protection card abbreviate large counts (1.2K / 12K / 1.2M) with the exact value on hover
- Default window size bumped to 1100x720 for better legibility
- Notifications now always render via the in-app renderer so elevated processes receive them reliably
- Translation refresh across 15 languages: added the new dashboard / scan-progress strings; previously-unfinished entries now cover Arabic, German, Spanish, Persian, French, Italian, Japanese, Dutch, Polish, Portuguese, Brazilian Portuguese, Turkish, Ukrainian, Simplified Chinese, Traditional Chinese
- Fixed rendering glitches on hybrid-GPU laptops (NVIDIA Optimus / Intel + NVIDIA) where parts of the dashboard would not paint
- RogueKillerShell: Version 1.3.0.0:
* Fixed: when loaded as a shell extension into Windows Explorer, no longer registers a system-wide crash redirection that captured Explorer crash dumps into the program's debug folder
* Installer now correctly replaces legacy 1.2.0.0 builds on upgrade
- RogueKillerMon: Version 1.3.0.0:
* Fixed: when injected into a host process, no longer registers a system-wide crash redirection that captured the host's crash dumps into the program's debug folder
* Installer now correctly replaces legacy 1.2.0.0 builds on upgrade
www.adlice.com
- Updated to core 9.0.6 (carries 9.0.5 fixes folded in)
* Service re-install now refreshes the service configuration instead of leaving the previous settings in place when the service was already registered
* UCheck: fixed false "update available" notifications for compact version strings (regression introduced in 6.7.3)
* UCheck: outdated-programs data now flows through to the UI during service-scan mode via a slim, versioned relay — the outdated-apps upsell card populates just as it does in portable-mode scans
- Redesigned Activate page with a modern side-by-side pricing table:
* Free / Personal / Technician tiers with highlighted features per column and per-tier color coding
* "Most Popular" badge on Personal, "For Pros" badge on Technician
* Per-tier "Free try?" trial buttons that jump directly into the trial flow
* Prices auto-adapt to USD / EUR based on locale, with cloud config overrides available
* "Already have a license? Sign in" footer link routes straight to the License Key form
- Redesigned My Account page with a modernized status card, per-machine activation cards with a "Current machine" pill that protects your own activation from being removed by mistake, and a Portable configuration card for Technician licenses
- License Registration form: tabbed flow (License key / Sign in / Free trial), inline validation, spinner during server check, and post-login license picker; free-trial flow now exposes Personal and Technician options and disables itself once trial has been used on the machine
- Renamed the "Documents Protection" feature bullet to "Ransomware/Theft Protection" for clarity
- Fixed a crash during portable-mode scans triggered when UCheck flagged the first outdated program — scans now complete cleanly and the outdated-apps upsell card populates as expected
- Translation refresh across 15 languages (Arabic, German, Spanish, Persian, French, Italian, Japanese, Dutch, Polish, Portuguese, Brazilian Portuguese, Turkish, Ukrainian, Simplified Chinese, Traditional Chinese) — new marketing and page strings translated end-to-end, plus previously-unfinished entries filled in
www.adlice.com