Notify 1.0 - can it help guard?

[bellgamin]

I ran across a 15K (zipped) program named Notify 1.0, that claims the following...

<quote>Runs hidden in the background until it detects any kind of change in a directory it has been told to monitor. When a change occurs (e.g. create, delete, modify a file) it visually alerts the user. Can be used, for example, to detect incoming information over a network or to detect tampering of files. Uses very little memory and practically no CPU time.</quote>

The download site is here..
http://www.pc-tools.net/win32/freeware/gui/

I did NOT download or try Notify 1.0. I went to that site because I belong to a Calypso user's group that is all ga-ga about another program on that site [namely, "SetBrowser 1.4"]

Can somebody smarter than me [not difficult] tell me if Notify 1.0 might have ANY protective value at all -- not as the main or only guard, but as a secondary or tertiary guard?

[FanJ]

Hi Bellgamin,

Thanks for the link!
I haven't used that program.
In general: yes, those kind of programs can be very usefull to get a better insight of what is/was happening on your system with respect to files.
But be aware that it is up to the user to decide whether any reported change is malicious or not.

There are several of those kind of programs, let's call them Integrity Checkers.
Some of them are doing their job in real time (depending on the OS), some of them you have to start yourself.

Some other names:
Free:
NISFileCheck (see special forum on this board),
FileChangeAlarm (from the same author),
FileCheck from Javacool (see special forum on this board);
Payware:
ADinf32 (pro) from the company that sells the AV DrWeb;
Inspector, which you get when you buy KAV Personal Pro.

[bellgamin]

FanJ - Many many thanks for the info. I mean REALLY thanks.

Based largely on your info, I am now using NIS FileCheck.

Shaloha,
Bellgamin

[FanJ]

Hi Bellgamin,

You're quite welcome :)

Please feel free to ask questions about it if you want to !

Cheers, Jan.

EDIT:

You posted:
{QUOTE-> Runs hidden in the background until it detects any kind of change in a directory it has been told to monitor. When a change occurs (e.g. create, delete, modify a file) it visually alerts the user. Can be used, for example, to detect incoming information over a network or to detect tampering of files. Uses very little memory and practically no CPU time. <-QUOTE}

As I said, I haven't used that program Notify (maybe I should try it....).
What I understand from your posting is that it is able to warn you in real time. NISFileCheck cannot do that. His brother FileChangeAlarm is able to do that on Windows NT/2000/XP.

[bellgamin]

Yes, Notify does it in real time. However, the degree & level of controls/filters/etc are VERY limited.

I do not want a real time monitor because I don't want the cpu load -- even if it is miniscule.

Besides, I'm enjoying NISFC too much to even think of trying anything else. The NISFC forum is a major bonus. I note that you are a major contributor thereto. You likely won't see me post very often, but I shall lurk daily. Count on it.

Shaloha,
Bellgamin

[FanJ]

{QUOTE-> quoting: bellgamin link=board=25;threadid=2804;start=0#19204 date=1028615363]
Yes, Notify does it in real time. However, the degree & level of controls/filters/etc are VERY limited. <-QUOTE}

Yes, I agree with you; that's what I also understood from the description.

Cheers, Jan.