ADDED: NTFS Timeline Forensics to cluster malware related files and establish malware infection timeline.
With the established timeline you can trace back to where the actual infection came from and how it got on your system. In addition, the cluster can reveal zero-day malware due to which files have been created along with the unknown binary. A picture to illustrate can be seen here: http://dl.surfright.nl/NTFS-Timeline-Forensics.png
ADDED: Detection of zero-day Reveton ransomware through file clustering.
ADDED: Repair of non-existing Winlogon startup entries.
ADDED: Complete removal of ZeroAccess 'recycler variant'.
IMPROVED: Removal of malware hijacking Winmgmt service.
IMPROVED: File remnant scanner detects more remnants.
IMPROVED: Detection of malware starting through Winlogon.
IMPROVED: Proxy is set to NoProxy when Kickstart started HitmanPro at Winlogon desktop.
IMPROVED: Parsing of Run entries.
IMPROVED: Services enumerator.
IMPROVED: Raw registry parser.
FIXED: Portuguese language.
UPDATED: Embedded white lists.
