I have just released a long-overdue update of ExeWatch. Version 1.33 adds an easy-to-use path-based exclusion list. The ExeWatch homepage URL is: http://trax.x10.mx/
My first detection. I downloaded Autoruns v13.2 from Sysinternals a short time ago to my data drive. Scanned the download, then extracted the zip. That is when Exewatch sprung into action. --------------------------- ExeWatch 1.33 --------------------------- Latest detections (Ctrl-C to copy): F:\h drive backup DD-MM-YY\Sysinternals\Autoruns\Autoruns for Windows v13.2\Autoruns\autoruns.exe F:\h drive backup DD-MM-YY\Sysinternals\Autoruns\Autoruns for Windows v13.2\Autoruns\autorunsc.exe --------------------------- OK ---------------------------
I will check it out, and it really did need an exclusion list. I also wonder if File Change Alarm (similar to ExeWatch) still works on Win 8. Strangely enough this oldskool app is not downloadable anymore.
Thanks for your feedback! I've just released a new update (1.34), which fixes detection of BAT files and adds a new feature: press Windows+V to quickly check the last detected executable with VirusTotal (courtesy of the BlitzVT library):
I see this is on majorgeeks now....I hope the extra downloads will encourage you to develop this more and I'd be happy to pay a small fee for it. http://www.majorgeeks.com/files/details/exewatch.html
In a word, flawless. Imagine this Windows 98 app handling matters in today's Windows 8.0 X64 (and it absolutely does) http://s8.postimg.org/b1uq734np/image.jpg
FWIW, adding this command (/start) at the endline in your registry run branch will auto start File Change Alarm