New ExeWatch Version

I have just released a long-overdue update of ExeWatch.
Version 1.33 adds an easy-to-use path-based exclusion list.

The ExeWatch homepage URL is: http://trax.x10.mx/

 

I have got it running...low footprint.

 

Great little program....

 

My first detection. I downloaded Autoruns v13.2 from Sysinternals a short time ago to my data drive. Scanned the download, then extracted the zip. That is when Exewatch sprung into action.

---------------------------
ExeWatch 1.33
---------------------------
Latest detections (Ctrl-C to copy):

F:\h drive backup DD-MM-YY\Sysinternals\Autoruns\Autoruns for Windows v13.2\Autoruns\autoruns.exe
F:\h drive backup DD-MM-YY\Sysinternals\Autoruns\Autoruns for Windows v13.2\Autoruns\autorunsc.exe
---------------------------
OK
---------------------------

 

So far, it hasn't skipped a beat...

 

I will check it out, and it really did need an exclusion list. I also wonder if File Change Alarm (similar to ExeWatch) still works on Win 8. Strangely enough this oldskool app is not downloadable anymore.

 

This app is a must for every windows based comp i have

 

Nice little app. Love it!
Thanks! I'll try to code one with a bit more options for personal use.

 

Thanks for your feedback!

I've just released a new update (1.34), which fixes detection of BAT files and adds a new feature: press Windows+V to quickly check the last detected executable with VirusTotal (courtesy of the BlitzVT library):

 

I see this is on majorgeeks now....I hope the extra downloads will encourage you to develop this more and I'd be happy to pay a small fee for it.


http://www.majorgeeks.com/files/details/exewatch.html

 

http://trax.x10.mx/

 

Very smart and useful feature. Congrats!

 

Pitty, not ASLR enabled

 

DEP and ASLR are on my to-do list. Hopefully in the next release.

 

In a word, flawless. Imagine this Windows 98 app handling matters in today's Windows 8.0 X64 (and it absolutely does)

http://s8.postimg.org/b1uq734np/image.jpg

 

I still have an old copy, will check it out.

 

FWIW, adding this command (/start) at the endline in your registry run branch will auto start File Change Alarm

 

Installed it yesterday, works great. You can't miss the popup when it alerts to a program executing!