Search the Community

Hello all, We are happy to announce a new release of Immunet 7.5.8! This latest version of Immunet provides the same great protection against malware and viruses as before, but also includes some new features, enhancements and bug fixes as below. Changes in 7.5.8 New Exploit Prevention Protect processes running from network drives Protect processes running remotely Prevent AppControl bypass through rundll32 Prevent Windows User Account Control bypass Protect against credential theft from Internet Explorer and Edge by Mimikatz Detect shadow copy deletion Protect against SAM hash credential theft by Mimikatz Protect previously running processes Fixed exploit prevention compatibility issues with McAfee General Performance Improvements Chrome Credential protection AMSI bypass protection Exclusions The connector now supports wildcards (‘*’) in Process Exclusions. This wildcard will not expand beyond path separators Exclusion performance enhancements. Miscellaneous Addressed an issue with malicious Ethos file detections not being quarantined if seen more than once Addressed a race condition that may end in BSOD when the driver verifier was used in conjunction with the connector Implemented scan optimization in script protection scanning by using the caching mechanism for unknown disposition New capability to send additional Microsoft Windows update build revision information to improve risk-based OS vulnerability interference capability Improved the uninstall process of the connector Added support for the BypassIO feature in Windows 11 This version is the last to support legacy operating systems such as Windows 7 and 8, Server 2012, and all 32-bit versions of Windows. Bugfixes/Enhancements Exploit Prevention General performance and stability improvements for the exploit prevention engine Fixed exploit prevention engine compatibility issues with Zoom Fixed a bug that caused Outlook to crash when exploit prevention was enabled Addressed an issue where clients were experiencing a blue screen on Windows Server 2012 with the exploit prevention driver when upgrading to 7.5.1. (CSCwa59221) Addressed an issue that caused exploit prevention to fail to after a connector upgrade. (CSCvz83877) Improved exploit prevention engine for: Script control functionality (wmi detection in plugins/macros) Atom bombing protection mechanism User access control bypass mechanism (false positive reduction) Handling a potential crash in Windows 7 Behavioural Protection Script protection has been enhanced to use the same core detection engine as behavioural protection to be able to detect fileless malware attacks using a signature-based mechanism Behavioral protection engine improved to be able to match activity on the endpoint that occurs in a specific order Behavioral Protection engine updated to be able to detect command line argument spoofing You can get the new installer from here https://download.immunet.com/binaries/immunet/bin/ImmunetSetup.exe Expected upgrade behaviour for Immunet users: * Upgrades from versions below 7.0.0 to 7.0.0 and higher require a reboot to complete * Upgrades from versions starting 7.0.0 to any higher version do not require a reboot to complete If you are running an older version of Immunet, you should be able to upgrade via the 'Update Now' button in the UI. If you don't see the update in your UI we recommend uninstalling Immunet and reinstalling the version downloaded from http://www.immunet.com/index

Hello all, We are happy to announce a new release of Immunet 7.5.0! This latest version of Immunet provides the same great protection against malware and viruses as before, but also includes some new features, enhancements and bug fixes as below. Changes in 7.5.0 New: Exploit Prevention Engine improved to provide protection for Network Drives Remote Processes AppControl bypass through rundll32 UAC bypass Browser Mimikatz vaults credential theft Shadow copy deletion SAM Hashes Bugfixes/Enhancements • Fix for a potential BSOD ( Blue Screen of Death) You can get the new installer from here https://download.immunet.com/binaries/immunet/bin/ImmunetSetup.exe Expected upgrade behavior for Immunet users: * Upgrades from versions below 7.0.0 to 7.0.0 and higher require a reboot to complete * Upgrades from versions starting 7.0.0 to any higher version do not require a reboot to complete If you are running an older version of Immunet, you should be able to upgrade via the 'Update Now' button in the UI. If you don't see the update in your UI we recommend uninstalling Immunet and reinstalling the version downloaded from http://www.immunet.com/index

Hello all, We are happy to announce a new release of Immunet 7.4.4! This latest version of Immunet provides the same great protection against malware and viruses as before, but also includes some new features, enhancements and bug fixes as below. Changes in 7.4.4: Bugfixes/Enhancements: The Behavioral Protection engine can now detect command line spoofing Updated ClamAV to 0.103.2 You can get the new installer from here https://download.immunet.com/binaries/immunet/bin/ImmunetSetup.exe Expected upgrade behavior for Immunet users: * Upgrades from Connector versions below 7.0.0 to 7.0.0 and higher require a reboot to complete * Upgrades from Connector versions starting 7.0.0 to any higher version do not require a reboot to complete If you are running an older version of Immunet, you should be able to upgrade via the 'Update Now' button in the UI. If you don't see the update in your UI we recommend uninstalling Immunet and reinstalling the version downloaded from http://www.immunet.com/index

Hello all We are happy to announce the general availability of version 7.4.2! 7.4.2 was initially released using our new ImmunetUnifiedConnector to a limited number of Windows versions but is now made generally available. You can get the 7.4.2 installer from here: https://download.immunet.com/binaries/immunet/bin/ImmunetSetup.exe Note that updates to 7.4.2 through the UI are still not available at this moment.

Hello all We are happy to announce a new release of Immunet: version 7.4.2! This latest version of Immunet provides the same great protection against malware and viruses as before. 7.4.2 is being released using our new ImmunetUnifiedConnector service ensuring we are able to push critical updates in a timely manner. Bugfixes/Enhancements: Made performance and stability improvements to the Exploit Prevention engine. Address compatibility issues with third party applications This update will occur automatically for users with 7.4.0 installed on Windows 10 64-bit, Windows Server 2016, and Windows Server 2019. This update is not applicable to users running other operating systems or versions older than 7.4.0.

Hello all, We are happy to announce a new release of Immunet 7.4.0. This latest version of Immunet provides the same great protection against malware and viruses as before, but also includes some new features, enhancements and bug fixes as below. Changes in 7.4.0 New: The Connector files will only be signed with a SHA-2 certificate and no longer be signed with a SHA-1 certificate starting with this release. Behavioral Protection now monitors processes making outgoing HTTP calls for malicious activity. New ImmunetUnifiedConnector service that allows critical Immunet updates to be pushed to users. Bugfixes/Enhancements: Made performance and stability improvements to the Exploit Prevention engine. Improved the stability of the Device Flow Correlation engine and driver. Addressed a potential hang on Connector shutdown. Addressed an issue where in rare cases the Behavioral Protection engine could cause a blue screen. The Behavioral Protection engine now properly monitors file deletes on FAT32 file systems. Improved quarantine process for files that are signed with both a SHA-1 and SHA-2 certificate. Addressed an issue where the Orbital service could start while disabled in policy. You can get the new installer from here https://download.immunet.com/binaries/immunet/bin/ImmunetSetup.exe Expected upgrade behavior for Immunet users: Upgrades from Connector versions below 7.0.0 to 7.0.0 and higher require a reboot to complete Upgrades from Connector versions starting 7.0.0 to any higher version do not require a reboot to complete If you are running an older version of Immunet, you should be able to upgrade via the 'Update Now' button in the UI. If you don't see the update in your UI we recommend uninstalling Immunet and reinstalling the version downloaded from http://www.immunet.com/index

Hello all, We are happy to announce a new release of Immunet: Version 7.2.8! This latest version of Immunet provides the same great protection against malware and viruses as before but also includes some new features, enchantments and bug fixes as below. Changes in 7.2.8 New & Enhancements: Added support for the Windows 10 November 2019 Update (version 1909) Added support for Windows 10 20H1 (Version 2004) (RTM Preview build: 19041) Improved visibility and enhanced protection against script-based attacks System Process Protection Improvements Improved Malicious Activity Protection engine to no longer detect on Google Chrome Stability Improvements in the Exploit Prevention engine Installer improvements to handle NoReboot upgrades and uninstall Stability Improvements in the Immunet SelfProtect driver Bug Fixes: Resolved Windows Connector service freeze issue on startup, under certain circumstances Improved the Windows connector process of gathering BIOS serial number, when needed, to properly detect hardware changes for registration with AMP Cloud Fixed a crash that could be encountered on shutdown Addressed issue where Windows Connector would fail to upgrade when installed alongside BitDefender AV Made stability improvements in the Connector installer Fixed an issue where ClamAV was taking a long time in scanning PDF files resulting into longer high CPU usage Updated ClamAV to 0.102.1, including changes related to the vulnerability described in CVE-2019-15961 Fixed an Exploit Prevention engine issue that could cause Google Chrome v78 and later to crash or display a renderer code integrity error This version also addresses the following vulnerabilities: CVE-2019-1010305 CVE-2019-12625 CVE-2019-12900 You can get the new installer from here https://download.immunet.com/binaries/immunet/bin/ImmunetSetup.exe Expected upgrade behaviour for Immunet users: * Upgrades from Connector versions < 7.0.0 to 7.0.0+ require a reboot to complete * Upgrades from Connector versions 7.0.0+ to any higher version do not require a reboot to complete Looking forward to your participation and help in cases of upgrade reboot failures issues, if encountered any. We would appreciate it if you can reach out to us via support forum with Support logs as soon as you see upgrade failing or upgrade asking for a reboot on upgrade. If you are running an older version of Immunet, you should be able to upgrade via the 'Update Now' button in the UI. If you don't see the update in your UI we recommend uninstalling Immunet and reinstalling the version downloaded from http://www.immunet.com/index

Hello all, We are happy to announce a new release of Immunet: Version 7.0.2! This latest version of Immunet provides the same great protection against malware and viruses as before, but also includes NoReboot upgrade beta. The Immunet Windows Connector often requires a reboot to complete the upgrade. This can be problematic for end users who have to time reboots, if they are in middle of critical updates or working on some important project, in order to upgrade the Connector, raising barriers to upgrading more regularly. This feature is to remove the requirement for reboots when upgrading the Windows Connector for good. Expected upgrade behaviour for Immunet users: * Upgrades from Connector versions < 7.0.0 to 7.0.0+ require a reboot to complete * Upgrades from Connector versions 7.0.0+ to any higher version do not require a reboot to complete Looking forward for your participation and help in cases of upgrade reboot failures issues, if encountered any. We would appreciate if you can reach out to us via support forum with Support logs as soon as you see upgrade failing or upgrade asking for reboot on upgrade. You can get the new installer here. https://download.immunet.com/binaries/immunet/bin/ImmunetSetup.exe If you are running an older version of Immunet, you should be able to upgrade via the 'Update Now' button in the UI. If you don't see the update in your UI we recommend uninstalling Immunet and reinstalling the version downloaded from http://www.immunet.com/index Changes in 7.0.2 Improvements and updates: No Reboot upgrades No Reboot uninstalls New kernel logs for Connector upgrades and uninstalls Installer improvements to handle NoReboot upgrades and uninstall Fixes: Stability Improvements in the Immunet SelfProtect driver Fixed reference leak in asynchronous kernel exclusions Stability Improvements on Immunet Protect driver

Hello all, We are happy to announce a new release of Immunet: Version 7.0.0! This latest version of Immunet provides the same great protection against malware and viruses as before, but also includes Credo and AMSI. Credo is a ML engine that allows endpoint connector to extract feature print of a PE file and send to the cloud to see whether the file is malware or not. ScriptID engine allows AMP connector to analyze scripts prior to execution. It is based on the Windows Antimalware Scan Interface (AMSI). In 7.0.0 version of connector only PowerShell scripts are analyzed. You can get the new installer here. https://download.immunet.com/binaries/immunet/bin/ImmunetSetup.exe If you are running an older version of Immunet, you should be able to upgrade via the 'Update Now' button in the UI. If you don't see the update in your UI we recommend uninstalling Immunet and reinstalling the version downloaded from http://www.immunet.com/index Changes in 7.0.0 Improvements and updates: New Credo engine New ScriptID engine for AMSI Query improvements in Immunet Protect driver Improvement in preforming Immunet registration Improvements in Connectivity test tool Curl version update ImmunetSCMS service now handle crash reporting Driver updates to support No Reboot upgrades New certificate for the ELAM driver Improvements on the Malicious Activity Protection (MAP) to reduce false positive Fixes: Stability Improvements in the Immunet Protect driver Stability Improvements in the SPP Stability Improvement on Immunet Protect shutdown Stability Improvements in the Exploit prevention