News Archive
What's new :
- Added Vista SP1 RC support;
- Added Fast User Switching support for Vista.
What's new :
- Added WinXP SP3 RC support;
- Added SSM protection against "fake logoff/shutdown" attacks (system shutdown simulator leak test).
What's new :
- Added additional protection against programs using some undocumented windows flaws (Nicolas' tests);
- Added hooked program name to the action details for those cases when a windows hook is being installed on a particular app. thread.
Fixed bugs:
- Occasional "driver not found" alerts on startup;
- Invlaid logging behaviour: application/group specific options didn't work;
- Empty directory browser opened on attempt to create a folder rule on Windows Vista.
Fixed bugs:
- Several deadlocks in the Service module;
- Empty service list on win2k, winXP, win2k3.
What's new:
- added Windows 2003 Sever SP2 support;
- added Windows Vista support (experimental);
- several languages updates.
Fixed bugs:
- some kernel-level optimization;
What's new:
- added Windows 2003 Sever SP2 support;
- several language updates.
What's new:
- added rule option "Allow for Local Administrators only";
- added new "Application rules" wizard: to automate creation of rules for Startup menu, desktop, custom folder;
- added filtering by rule special options to the Rules window;
- help file updates;
Fixed bugs:
- LogViewer memory using optimization with big log files (added the loading progress bar);
- SSM is accessing the disk frequently due to the way DriveGLEAM queries the drive;
- SSM crash on startup with some old configuration files;
- Registry monitor rule-engine bug - invalid generation of specific rules;
Main differences from SSM 2.4:
- Windows Service based architecture: protects before users login;
- Remote control facility: Administrators can view configure rules, view logs, view running processes, network connections etc. remotely;
- User/Group support: application rules have become "user aware" i.e. can be configured for particular windows users/groups.
See release notes page for the complete list of improvements, changes and bug fixes. Download our new product now.
What's new:
- Help file updates;
Fixed bugs:
- critical driver bug which sometimes may have led to deadlocks;
- SSM crash on startup with some old configuration files;
- Registry monitor rule-engine bug - invalid generation of specific rules;
- LogViewer memory usage optimization;
What's new:
- Added rule option "Allow for Local Administrators only";
- Enhanced process protection against termination by other processes;
- Added new "Application rules" wizard: to automate creation of rules for Startup menu, desktop, custom folder;
- Added rule option "Protect from inter-process messaging"NOTE: for some applications this protection may disable part of their functionality;
What's new:
- Several language updates;
Fixed bugs:
- SSM password verification problem;
- SSM crash on startup with some configs;
- minor GUI fixes.
What's new:
- Several language updates;
Fixed bugs:
- several critical driver bugs causing occasional BSODs;
- SSM crash on startup in some environments;
- clicking "Help" in the "Options"-tab froze SSM;
- minor GUI fixes and improvements.
What's new:
- Several language updates;
Fixed bugs:
- "Locate..." link in the application activity dialog opened Explorer on the default desktop instead of the active one;
- License module incorrectly handled the expiration date parameter for non-trial licenses;
- minor GUI fixes and improvements.
The new license will also provide 50% discount for any number and type of additional licenses, the further System Safety Monitor license renewals and for the other company products' licenses. We have also added a new license type for both home and business users - site-wide (unlimited number of machines).
Old style licenses will also be supported for the existent customers. Current customers holding 2+ licenses are eligible for free upgrade to the appropriate site-type license (unlimited number of machines within their office or household). The license upgrade must be explicitly requested by email to our support.
when the 1-year license expires the program will continue to work as usual but it won't be able to upgrade it to the versions released after the license expiration date until the license is renewed.
What's new:
- added Log Viewer;
- added possibility to create/modify an application rule from Log Viewer;
- added protection against a new keylogging method - DirectInput based logging;
- added new application setting - "Registry access" on application Registry tab (Unrestricted access / Checked access / Read Only access);
What's changed:
- logging subsystem refactored;
Fixed bugs:
- some critical driver bugs causing occasional BSODs;
What's new:
- added export to text format in Log Viewer;
- added rule option "Protect rule from deletion";
- added popup menu item "Revert to the Group settings" in the application rules list;
- added edit field "Description" to the trusted zone address list;
Build 607: Initial beta version of System Safety Monitor Workgroup Edition 1.0.0 was released! From now you are able to keep save several systems at once.
What's new:
- SSM Remote monitoring (monitoring remote system resources: processes, services, etc.);
- SSM Remote control (rules editing, logs viewing, etc.);
Fixed bugs:
- freezing SSM while searching in Log Viewer window;
- minor GUI fixes;
What's new:
- Added Log Viewer;
Changes:
- Logging subsystem refactored;
Fixed bugs:
- some kernel memory leaks & performance optimizations;
- fixed several memory leaks;
- minor GUI fixes.
What's new:
- added new option - "Forced focus transition to SSM pop-up windows", OFF by default;
Bugs fixed:
- some driver optimizations;
- BNF bug with Nortel Contivity VPN client;
Bugs fixed:
- High CPU usage.
Bugs fixed:
- error message "Bitmap image is not valid" when preferences window opened;
- invalid time value displayed in the "Creation Time" column;
- "Alert on changed and temporary files in Learning Mode" option didn't work correctly;
- some performance optimizations;
What's new:
- added treeview to the NetStat module;
- added hidden processes logging;
- several languages updates;
What's changed:
- Process Monitor: instead of the single "Command Line" column there are two columns now - "Command Line Parameters" and "Command Line";
- stopped alerting on string type registry value modifications when only text case has changed;
What's new:
- added protection tab for system processes;
- added item "Check for updates..." to the system tray icon menu.
Bugs fixed:
- Incompatibility (BSODs) with several firewalls (e.g. Kerio, Sygate, Avast, Rising Personal Firewall);
What's new:
- Learning mode for a single processes tree (a process + all its children) - the app. activity pop-up extended menu for the process creation event;
- NetStat module.
Bugs fixed:
- BSOD on startup if the SSM driver startup mode has been manually changed;
- Dead lock with Spy Sweeper;
- Registry rules bug (e.g. MS Outlook);
- Terminated processes detected as hidden (incompatibility with Kerio Firewall);
What's new:
- added tree-view in process monitor;
- added Basic Network Firewall (BNF) module - outbound connections only;
- Process termination protection extended to cover several new termination methods;
- added new module: Windows Hooks;
- new application rule concept: application groups;
- added hidden process (rootkit) detection (eg. FU, FUTo, phide_ex etc.);
- added applications option "Silent checksum update for digitally signed files".
What's new:
- kernel level proactive blocking of all system calls for rootkit threads masquerading under system threads (phide_ex worker thread);
- added applications option "Silent checksum update for digitally signed files";
- minor improvements in rootkit detector;
Download latest beta now.
What's new:
- improved detection of hidden processes (rootkits);
What's changed:
- display format of version info in the tray icon tooltip;
Bugs fixed:
- fixed several memory leaks;
- App settings not restored when importing config;
- the child/parent settings for a group are lost after restarting SSM.
What's new:
- added tree-view in process monitor;
- several language updates.
What's new:
- new application rule concept: application groups;
- added new module: Windows Hooks;
- added hidden process (rootkit) detection (eg. FU, FUTo etc.);
- added support for Windows XP Fast User Switching;
- added version info to the tray icon tooltip;
- added PID to the App Activity dialog for both Parent and Child processes;
- added new registry objects to the default registry rules;
- several language updates.
Bugs fixed:
- misc. compatibility issues with some other drivers (ZoneAlarm, etc.);
From now on we are going to publish some of our internal leaktests we use to evaluate security programs including our own one. The main purpose of this initiative is to provide security software users some means to compare and evaluate their favorite HIPS programs and what is even more important to determine the quality of protection of their systems.
All tests are available for downloading at HIPS leaktests page.What's new:
- process termination protection extended to cover several new termination methods;
Bugs fixed:
- multiprocessor (dual-core, hyper-threading etc) system issue - failed to start;
- compatibility issues with Jetico Firewall;
What's new:
- process termination protection extended to cover several new termination methods;
- several language updates;
What's new:
- digital signature check in case of registered file hash change (always occur after updates). Signed file hashes will be updated silently thus SSM won't bother users any more after MS windows updates;
- possibility to narrow the scope of application registry rules created in Learning mode or via Application activity dialog down to the particular key/value access rule;
- customization of visible columns in Process Monitor and Rules;
- added new group of special permissions for applications - "Protection" to allow protecting any particular application against particular actions (termination, suspension, etc. );
- added new rule type - "Checksum rule". Checksum rules allow identifying objects (PE files) by theirs checksum only;
Bugs fixed:
- program files locking critical bug;
- GUI performance issue.
What's new:
- added new rule type - "Checksum rule". Checksum rules allow identifying objects (PE files) by theirs checksum only;
- added new item - "Locate" to the context menu of Process Monitor and Rules list;
- added new shortcuts in Application Activity dialogs: press CTRL + ArrowLeft and CTRL + ArrowRight to open Allow and Block drop-down menus accordingly.
What's new:
- when the digital signature verification is performed in case of a registered file hash change (always occur after updates) the signed file hash will be updated silently;
- added new group of special permissions for applications - "Protection" to allow protecting any particular application against particular actions (termination, suspension, etc.);
- advanced Properties window GUI improvement - now the "effective" (calculated) action settings are displayed with special icons;
- OS security flaw patch: if a global hook (except low-level keyboard and mouse hooks) is installed using exe-file as a module all GUI applications crash;
- added protection of applications against termination/corruption by other processes using windows messages (apt.exe);
What's changed:
- minor changes in Application activity dialog box;
- added new columns to Application rules and Process monitor views;
Bugs fixed:
- compatibility issues with some network tools (cFosSpeed);
- incorrect drawing of menus in some GUI applications;
What's new:
- several languages updates;
- customization of visible columns in Process Monitor and Rules;
- Command Line Parameters column was added to the Process Monitor;
What's new:
- several language updates;
What's changed:
- SSM main window doesn't open automatically on connecting UI;
Bugs fixed:
- SSM running under non-administrator user account;
This is a recommended update for any version of System Safety Monitor up to 2.1.5.580.
This version based on System Safety Monitor 2.2.0.581 beta except for ALL beta functionality has been excluded and several newly found critical kernel mode issues has been resolved.
New prices came into effect (40% rise) on Aug, 1.What's new:
- Layered Service Provider (LSP) module;
- command-line parameters support for applications rules;
- third state of the "keep process in memory" option: "?" mark - prompt user to restart application;
- checksum recalculation in case of configuration file import;
- help file updates.
This is a recommended update for any version of System Safety Monitor Free Edition up to 2.0.8.579 running on NT platforms.
Bugs fixed:
- several critical bugs in the driver (NT only);
- minor driver memory leaks (NT only);
What's new:
- Basic network firewall;
- Layered Service Provider (LSP) module;
- command-line parameters support for applications rules;
- third state of the "keep process in memory" option: "?" mark - prompt user to restart application;
Bugs fixed:
- some memory leaks;
What's new:
- several language updates;
- third state of the "keep process in memory" option: "?" mark - prompt user to restart application.
Fixed bugs:
- BSOD on Win32K subsystem before app activity appearance.
What's new:
- low level keyboards access control to protect from advanced keyloggers;
- several language updates.
Attention! This is SSM 2.1.x critical update. It is strongly recommended to update all the previous SSM versions.
See release notes page for the complete list of improvements, changes and bug fixes.What's new:
- added several language updates.
Bugs fixed:
- the problem with rules state saving in configuration file.
What's new:
- now all executable files (PE) are signed with the System Safety Limited software publisher certificate;
NOTE: Windows 9x users may not be able to verify the digital signature due to the absence of the appropriate cryptographic provider.
Fixed bugs:
- sometimes SSM did not catch physical memory access attempts;
- critical bug which sometimes may have led to deadlocks;
- incorrect modification of application registry rules on user input in the app. activity dialog;
- several minor GUI bugs in the Registry Monitor.
Trial users BONUS: the trial period counter will be reset after the 2.1.0.578 installation. All trial users will get another 30 days to try.
See release notes page for the complete list of improvements, changes and bug fixes.What's new:
- now all executable files (PE) are signed with the System Safety Limited software publisher certificate;
NOTE: Windows 9x users may not be able to verify the digital signature due to the absence of the appropriate cryptographic provider.
Bugs fixed:
- Sometimes SSM did not catch physical memory access attempts.
What's new:
- added new built-in Registry group - Layered Service Provider;
- added new option - Paranoid Learning Mode if unchecked SSM in Learning Mode doesn't alert any more on checksum change or on temp files launch attempts;
- added the possibility to view all apps which have rules for a given Registry object/group;
- added several language updates.
What's new:
- added several language updates.
Improvements and changes:
- added lookup field in the Process Monitor tab;
- added wizard for merging existed and preset registry rules.
- major improvements in Application Activity dialog: changed design, added shortcuts for actions.
System Safety Limited is pleased to announce the first release of System Safety Monitor 2 Free Edition.
SSM 2 freeware is based on the SSM 2.0.8 code base.
The main advantages of the regular (shareware) version (2.1+) by now:
- the new real-time Registry Monitor fully integrated with the process monitor with the learning mode support. Many built-in objects and default rules to facilitate configuration;
- the new improved design of the "Application Activity" dialog box;
- multiple other GUI improvements;
- low level disk access handling (killdisk trojan);
- the new services module;
- multiple performance optimizations;
- high priority support;
- high priority development.
However SSM 2 freeware will continue to support Windows 9x as much as possible.
What's new:
- Added Low Level disk access option (to block KillDisk trojan);
Changes:
- New simplified design of the app. activity dialog;
- Fixed registry rules to make them less restrictive as requested by beta users;
What's new:
- new true real-time Registry Monitor; the Registry module's functionality is moved to the Registry Monitor;
- different rules (for applications, libraries, drivers, registry) can be enabled individually;
- added the option to choose the checksum algorithm (MD5 or SHA256);
- added a new action in "Application Activity" dialog – "Terminate" (to immediately terminate the actor-application)...
Changes:
- improved SSM autorun protection (Windows 98).
Fixed bugs:
- incorrect behavior of "Include subfolders" option in the "Folder" rules;
- incorrect identification of object type for the library rule added from the "Application Activity" dialog;
- and some others...
What's new:
- added the new "Remember last choice in Application Activity dialog" option;
- added the new "Show the full path in the rules list" option;
- added the new "Save configs and disconnect user interface" hotkey.
See release notes page for the complete list of improvements and bug fixes.
Download the latest build now.
What's new:
- added new type of rules - folder rules;
- added "Run unclassified programs" option in "Application Activity" dialog;
- improved design in rule's "Advanced Properties" dialog: driver and library options are configurable directly in the advanced properties editor of "Application" objects;
- added option to show/hide reminders about running "allowed once" applications.
Download the latest build now.
What's new:
Fixed bugs:
- config file parser bug causing problems with configs on some localized (Chinese, Japanese, Bulgarian) Windows systems;
- minor fixes in logging.
What's new:
- minor improvements in the logging subsystem;
- improved design of the "Alerts" and "Applications' logs" windows: added the option to show/hide details.
- download your license key file for the purchased products;
- manage notifications about upgrades of the purchased products;
- download the latest version of the purchased products.
If you are already registered at our site and your account is activated, then login and go to "Licenses" page (click the "my licenses" menu item in the menu bar on the left) for details.
If you don't have an account at our web-site, please register first.Check details and request your discount coupon now!
What's new:
- added "Don't check MD5" - new option for the "Driver" and "Library" object types in the "Special Permissions" options;
- added "find next" functionality for "Application Lookup" field in the "Advanced Properties" dialog;
- added new "Reminder" section in the Options tab with configuration options for reminders.
What's new:
- added context menu for actions in "Application Activity" dialog;
- defined default hotkeys for actions in "Application Activity" dialog;
- added "Recalculate MD5" menu item in the process context menu ("Process Monitor" tab).
- improvements in the installer's update/repair mode
Fixed incompatibilities:
- incompatibility with Trend Micro™ OfficeScan™ 7.3.
What's new:
- learning mode;
- changed design of "Application Activity" dialog;
- added intercepting the system shutdown API calls (Windows NT platform only);
- added hotkeys functionality for user's action in "Application Activity" dialog;
- improved highlighting for processes, rules, alerts, log records, added options for customization highlighting colors;
- added option to choose a user interface language in the installer;
- improved Error Reporting functionality (Windows NT platform only);
- extended the list of reminders;
- a number of UI improvements and enhancements...
What's new:
- added highlighting by red color for running applications with blocking rules;
- added a new reminder about running applications with blocking rules.
Known issues:
- incompatibility with McAfee VirusScan Enterprise 8.0i, version 2.3.0.2, (Netopsystems FEAD(R) 2.3 Optimizer(C)) on Windows 2000.
What's new:
- added interception of the following API calls: SuspendProcess, SuspendThread, EndTask, ProtectVirtualMemory;
- added self-protection from termination attempts by means of WM_CLOSE, SC_CLOSE messages;
- added a new reminder about running applications that do not have rules.
What's new:
- added a reminder to notify user about disabled application rules;
- in "Application Activity" dialog if the user presses [Ctrl]+[F1] then after adding an allowing rule the "Application rules" tab will be displayed;
- added options to specify the browser to display the log (default, Microsoft Internet Explorer, custom);
- open the module’s property dialog on double click in "Modules list" dialog;
- new feature: adding rules for sub-keys in Registry module: if there is a rule for the particular registry key, now it's possible to create a rule for any sub-key or sub-key value;
- added a new "Ignore" action for Registry module rules: any activity with a registry key (or value) will be ignored by SSM.
- "Startup Menu" module did not display the entries and did not detect the changes in Startup menu folder;
- false "The previous SSM session was not finished correctly..." message box;
- "Access violation" on random clicking the SSM icon in the system tray after starting SSM;
- now log can be viewed by Microsoft Internet Explorer 7.0 beta 2 (NOTE: you must clear the log records created by the earlier SSM version).
What's new:
- to prevent injection of some dll libraries by setting handler of system events there was added intercepting the SetWinEventHook API function;
- optimizing CPU usage during the blocking malware to prevent DOS-attacks against SSM;
- logging subsystem was simplified: application activity notifications were moved to logging; they use the same configuration options.
What's new:
In the previous SSM builds the Process Monitor could see some user-mode rootkit classes (e.g. "Hacker Defender") only if SMM was started before such rootkits. From build 559 Process Monitor lists hidden rootkit processes of such rootkit classes with any order of starting the applications.
In the 559th build for security reasons SSM protects itself from loading any hook libraries to SSM process (NT platforms only). This may cause some non-critical issues with the number of devices and software (e.g. the scroll buttons of some mouse devices, or accessibility utilities for people with disabilities may not work properly inside SSM windows).
Also, the incompatibility with the following security software was fixed: Kerio Personal Firewall HIPS, Kaspersky Anti-Hacker 1.8, Kaspersky Internet Security 2006 Proactive Defense.
And more improvements, changes and fixes – see the release notes page.What's new:
- added two menu items to the main SSM window’s system menu: "Exit" and "Disconnect User Interface";
- SSM system tray icon has a red color if "Enable application rules" option is turned off, and the green one if the option is turned on;
- added Dutch localization.
IMPORTANT:
The critical issues related to compatibility with drivers was fixed.We highly recommend to update System Safety Monitor.
Also, what's new:
- added sorting for window filters;
- System Safety Monitor is not published in process list on Windows 98/ME;
- improved support for high DPI display modes;
- SSM allows user to upload error report to System Safety web-site;
- GUI improvements: movable columns in lists; redesigned "DLLs List" window.
What's new:
- SSM can "see" the most invisible processes (rootkits) so that SSM can monitor, protect and terminate those processes the same way as "normal" ones;
- added extended methods to terminate other process breaking various protection mechanisms;
- added new self protection mechanisms from outside attempts to suspend/terminate SSM or to change its internal data;
- improved compatibility with antivirus, antimalware and firewall software;
- many GUI improvements.
Build 555 has a significant changes in a way how modules operate: now they do not use a polling for tracking the changes in the system. Another new feature is a functionality for checking the new versions of SSM.
For the complete list of improvements, changes and bug fixes in this build see release notes page.What's new:
- added "Drag-and-Drop" support - to create a rule for a PE file now the file can be dropped into the SSM main window;
- added a new option - "Do not notify about abnormal termination" (Debugging);
- added a new context menu item for the windows list ("Windows" tab) - "Add filter";
KNOWN ISSUE:
If you want to use SSM beta 1 config file the application rules may have invalid settings for the following options on the "Special permissions / Process creation control" tab:- "Keep this process in memory"
- "Allow this process to execute any unclassified program"
- "Don't check MD5 on start"
1. Select all rules and disable these options;
2. Set these options for those rules you really want them to be enabled.
Fixed bugs:
- fixed issue with "Microsoft CTF Loader" freezing some controls in Application Activity window;
- fixed invalid Application Activity messages in Windows 2003;
- incorrect importing the old configuration files;
- unexpected resetting the existed rules after clicking "Trust all currently started programs" for those running programs that already have rules;
- the unnecessary "Application Activity" request was eliminated and fixed the problem with possible executing a child process when the parent process has "Ask user" settings.
See release notes page for the complete list of changes in this build.
The concept of rule has been improved. Added a new rule attribute - "object type". The object type can be one of: "SSM", "System", "Driver", "Library", "Application". Depending on the type of an object the associated rules have different sets of options and special permissions.
And more - see release notes page for the complete list of changes in this build.
- evaluation period for SSM 2 beta testing was extended to December 31, 2005;
- added menu items for modules in the system tray icon menu. Now you can enable/disable modules individually from the system tray icon menu.
- added "Ctrl-A" shortcut to select all items in the lists which support multi-selection;
- in registry module: added granular enable/disable functionality;
- in registry module: added registry key group filter;
- in registry module: added "Description" field;
- in the "Application Activity" window the cursor was changed from default to "hand";
- and more - see release notes page for details.
If you are already a registered member, please login to participate in discussions. Not member yet? Proceed to registration page.
- added functionality in service module and "Alerts" window. Now it is possible to disable watching the individual service or driver.
- fixed spurious alerts from registry module about blocked attempts to delete registry values;
- rules were not created if "Watch App Activity" is enabled from menu in system tray while main SSM window is hidden;
- it was not possible to change "Special Permissions" via keyboard ("ENTER" button);
- a number of buttons did not support Windows themes;
- there were eliminated unnecessary notifications from registry module and IExplorer module;
- and more - see release notes page for details.
What's new:
- it's become much more stable due to a lot of bugs fixed;
- most of compatibility issues with other types of widespread security software have been resolved;
- added Windows 2003 support;
- added support of multi-desktops environment;
- added support of Windows Terminal sessions (Windows XP Fast User Switching, Windows 2000/2003 Terminal Server);
- new versions of registry module, service module, INI files module, Start menu module.





