StartupMonitor - a ANOREXIC software (84 Kb) a challenge for its giant brothers !??

Discussion in 'other anti-malware software' started by PROROOTECT, Aug 11, 2008.

Thread Status:
Not open for further replies.
  1. PROROOTECT

    PROROOTECT Registered Member

    Joined:
    May 5, 2008
    Posts:
    1,102
    Location:
    HERE ...Fort Lee, NJ
    StartupMonitor of Mike Lin : http://www.mlin.net/ ( weight light 84 Ko !!!)
    - is a small utility that runs transparently ( it doesn't even use a tray icon ) and notifies you when any program registers itself to run at system startup.
    It prevents annoying programs from registering themselves behind your back.

    StartupMonitor does not require Startup Control Panel, but it complements it nicely. When you choose not to allow a program to register itself, the program's entry becomes disabled in Startup Control Panel, so you can go back and enable it later if necessary. StartupMonitor watches the Start Menu's Startup folders and the Run entries in the registry.

    StartupMonitor works on all modern versions of Windows through XP. I haven't tried it on Windows Vista yet.

    "... Do you wish to allow this change? : Yes / no "...

    And YOU ?...

    I would appreciate any feedback ...Thanks , PROROOTECT:thumb:
     
  2. Meriadoc

    Meriadoc Registered Member

    Joined:
    Mar 28, 2006
    Posts:
    2,642
    Location:
    Cymru
    Some here

    edit : Ew, o_O thanks bellgamin, deleted link. Tried to show the many posts already here at Wilders.
     
    Last edited: Aug 12, 2008
  3. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    @Meriadoc- Your link doesn't work for me.

    @Prorootect- Startup Monitor is okay. Very compact way of doing the job. It's small because it's a 1-trick pony. WinPatrol does the same job, & much more -- but it's a teeny bit larger than StartupMonitor. WinPat has free & non-free versions. The non-free is a 1-off payment & well worth the $$.

    Other apps that do startup monitoring PLUS full-scope HIPS (Host-based Intrusion Prevention) are Online Armor, System Safety Monitor, EQSecure, Comodo FWP version 3, & Threatfire.

    Many choices-- whatever floats your boat. :)

    As for moi, I use OnlineArmor-paid (running version 3-beta) plus Threatfire-free version.
     
  4. PROROOTECT

    PROROOTECT Registered Member

    Joined:
    May 5, 2008
    Posts:
    1,102
    Location:
    HERE ...Fort Lee, NJ
    Hi Meriadoc & Bellgamin,

    Thank you very much for your kindness , I adopt it:argh: !

    ...but my Windows is already ANOREXIC ; that's not too bad ( at all ...)

    With Kindest Regards , PROROOTECT:thumb: :thumb:
     
  5. Gene Benson

    Gene Benson Registered Member

    Joined:
    Apr 19, 2003
    Posts:
    26
    Hi bellagamin,

    One thing you should be aware of. Online Armor does not (yet) monitor Startup folders whereas StartupMonitor does. I have been using StartupMonitor for a couple of years now and find it complements OA nicely.
     
  6. n8chavez

    n8chavez Registered Member

    Joined:
    Jul 19, 2003
    Posts:
    2,302
    Location:
    Location Unknown
    One thing that you should keep in mind though is that StartupMonitor does not monitor services that may be added to system startup. For that matter, neither does WinPatrol.
     
  7. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    Good to know. Gene. Thanks!

    OA does cover autoruns, but that omits a lot of startup areas.

    Although OA is a broad-spectrum firewall+HIPS, it also does not (yet) provide file protection. Further, it lacks coverage of the full range of risky registry items. That's one of the reasons why I run Threatfire as OA's teammate.

    I already had set special rules in TF to cover protection of files & registry. I shall shortly add rules for startups not already covered by TF's registry protection.

    Again -- thanks for calling this to my attention.

    QUESTION- Why Startup Monitor instead of WinPatrol??
     
  8. Gene Benson

    Gene Benson Registered Member

    Joined:
    Apr 19, 2003
    Posts:
    26
    I never looked at WinPatrol. Don't know why. I think now there might be to much overlap with OA.
     
  9. colinp

    colinp Registered Member

    Joined:
    Feb 9, 2008
    Posts:
    41
    I have been using Startup Monitor and Startup Control Panel... forever, at least since Win 98 1st edition and have had absolutely no problems at all. SM will pop up if a program tries to set itself in the registry for a start up and has caught at least one "nasty" from starting (a very long time ago, on 2000 if I recall). SCM is very useful for disabling startup programs that I don't use.
    However, even SM is quiet these days as I run XP in LUA with SRP, SuRun and kafu, so that pretty well covers most if not all bases.

    Colin
     
  10. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    Re: StartupMonitor - a ANOREXIC software (84 Kb) a challenge for its giant brothers !

    The lack of coverage for services is, IMO, a critical flaw. Far better to use a HIPS than to use old-tech apps that fail to cover the full spectrum of potential malware entry-ways.
     
  11. PROROOTECT

    PROROOTECT Registered Member

    Joined:
    May 5, 2008
    Posts:
    1,102
    Location:
    HERE ...Fort Lee, NJ
    What is the average weight of a HIPS ? Here : 84 KB. And memory use ? Here : 192 KB ...




    Thanks , PROROOTECT
     
  12. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    Most HIPS use hooks rather than polling, so cpu use is very small. As to RAM usage, here are comparative data from Process Explorer for all "visible" processes of each respective HIPS, expressed in Kbytes for...
    Private / Working Set / VirtualSize as follows...

    Comodo3 24.3/13.8/187.7
    DriveSentry 23.8/17.9/104.7 ( no restart needed) file protector HIPS
    DynamicSecurityAgent 9.1/13.5/69.9
    Comodo Memory FW (buffer overflow protection) 2.7/5.1/35.6
    OnlineArmor2 27.1/16.4/160.4
    ProSec 1.4 10.7/19.2/110.2 (defunct)
    Safe'N'Sec 17.2/17.8/132.6
    Sana Primary Response SafeConnect 28.7/37.4/218.2
    SSM ver. 619 10.4/12.5/58.7
    Threatfire 19.0/7.3/163.6

    The above data do not necessarily reflect total system impacts; merely those displayed by a task manager. In any event, I have 2 GB working RAM & hard drive capacity of 260 GB, so miniscule impacts such as these are of little significance when measured against the need for effective security.
     
  13. PROROOTECT

    PROROOTECT Registered Member

    Joined:
    May 5, 2008
    Posts:
    1,102
    Location:
    HERE ...Fort Lee, NJ
    For example : Comodo : Working set = 13.8 MB = 13800 KB ... YES ? NO? ... Done.


    Thanks

    PS. Working Set ( on Process Explorer ) = Memory use ( on Windows Task Manager )
     
  14. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    CFP (Comodo) "Working set" = 13,800 Kilo bytes = ~13.5 MB***. Ergo, CFP uses 13.5MB of memory. Comodo has a surprisingly light footprint inasmuch as it is a full-scope firewall PLUS Defense+ (a classical HIPS).

    ***1024 bytes = 1KB ||| 1024KB = 1 MB
     
    Last edited: Aug 12, 2008
  15. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    10 Q Hurst - I fixed my boo-boo.
     
  16. HURST

    HURST Registered Member

    Joined:
    Jul 20, 2007
    Posts:
    1,419
    deleted my post :thumb:
     
Loading...
Thread Status:
Not open for further replies.