ExeWatch

[svenfaw]

Originally Posted by genieautravail

Hello everybody!

Just to say that I have got MY special build today and that I'm very happy with MY new toy!

Many thanks for your kind donation and feedback!

[mattfrog]

Sven,

I'd like to offer to build you any web pages needed for exewatch if you do not have the time (free of charge of course).

Let me know through PM if you are interested

[EASTER]

Nice app, lite and active.

Another small suggestion i like to offer is would be nifty if those "4 instant visusal alerts" that indicate a change is underway could be coded in some way to display a simple message within them like: ALERT-ACTIVITY-etc. if you get the drift.

Keep up the good work. Nice job!

Regards EASTER

[svenfaw]

Originally Posted by mattfrog

Sven,

I'd like to offer to build you any web pages needed for exewatch if you do not have the time (free of charge of course).

Let me know through PM if you are interested

Hi, first of all sorry to reply so late - still dealing with some personal issues.

Thanks a lot for your offer, that's very appreciated. Sure, I'd love to have the website look better and with more content. I'll think a lilttle bit more about the direction I would like the website to take, and then I'll PM (assuming you're still OK to do it).

[svenfaw]

Originally Posted by EASTER

Nice app, lite and active.

Another small suggestion i like to offer is would be nifty if those "4 instant visusal alerts" that indicate a change is underway could be coded in some way to display a simple message within them like: ALERT-ACTIVITY-etc. if you get the drift.

Keep up the good work. Nice job!

Regards EASTER

Thanks for your feedback, I'm glad you like it. I'll be sure to look into your request. (Please note that as stated earlier, due to time constraints, I do give higher priority to donators for such requests.)

[RJK3]

Just tested the 'panic mode' on a Zeus drive-by, and the program consistently renamed the dropped executables.

I had my concerns that it wouldn't be able to rename a file that was locked and trying to execute.

Good work to the author

[tomazyk]

I can't get to the website. Is the site down? Can I get software from other sources?

[Bob_McCarty]

Originally Posted by tomazyk

I can't get to the website. Is the site down? Can I get software from other sources?

The site has been down for several days now. fyi

[tomazyk]

Originally Posted by Bob_McCarty

The site has been down for several days now. fyi

OK, so it's not me... Thanks for info!

[svenfaw]

Hi, sorry for the website downtime.

I'm battling some tough RL problems and the last thing I needed is unexpected DNS issues! I've decided to relocate my web page to the following URL to solve the problem as quickly as possible:
http://dre.redmartian.org/

Sorry for the inconvenience, and expect a new update soon (hopefully)!

[Rivalen]

Avira warns for HEURcrypted.E when download of exewatch

[Amin]

Originally Posted by Rivalen

Avira warns for HEURcrypted.E when download of exewatch

natural.. avira is detecting it via Heuristic analysis and it causes more FPs

just add it to exclusion list.

Regards,
Amin

[Rivalen]

Most likely since I have H on max. Thanks!

[iammike]

@svenfaw

you offer the download from your website as a Zip file, but when downloaded it's not a zip but a exe file.

But 's up for your great program.

[svenfaw]

Originally Posted by iammike

@svenfaw

you offer the download from your website as a Zip file, but when downloaded it's not a zip but a exe file.

But 's up for your great program.

Many thanks for your feedback.
I have just fixed the Zip file issue that you kindly reported.

[Rivalen]

How do I get it to autostart?

[iammike]

^ add a registry string value (REG_SZ) in

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

with the following info

Name: ExeWatch
Data: Full Path to the ExeWatch executable

[Rivalen]

Originally Posted by iammike

^ add a registry string value (REG_SZ) in

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

with the following info

Name: ExeWatch
Data: Full Path to the ExeWatch executable

Thanks for suggestion but I am not savvy enough. Will wait for Sven to fix so that it autoruns.

[iammike]

^ Another option would be

Place a Shortcut to ExeWatch in

C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Startup

[Rivalen]

OK - it autostarts. I managed to put it under autostart. Dont know the difference between strtup and autostart functionwise for exewatch.

Now - when do I use the panic-button? And what will Panic do to malware and also to my legit .exes?

In the log there isnt an .exe file I recognize the name of?

[iammike]

ExeWatch will only alert on creation of New Files, and the Panic Button will only affect newly created files (exe etc) by renaming them

Use this with extreme caution as it could also rename Legitimate OS / Program Files.

In the log there isnt an .exe file I recognize the name of?

Did you install new programs ?

Could you post some of the log file ? Please strip all sensitive data (like user name / computer name etc) from it before you post.