TinyWatcher...worth to "come back"?

Discussion in 'other anti-malware software' started by ichito, Mar 9, 2012.

Thread Status:
Not open for further replies.
  1. ichito

    ichito Registered Member

    Joined:
    Jan 14, 2011
    Posts:
    1,485
    Location:
    Poland - Cracow
    TinyWatcher...looks like abandoned app but...it's still in bellgamin's signature and by this way attracted my attention...I'm still using XP.
    It seems to be something between MJ RegWatch...WinPatrol...Autoruns...and perhaps something more...My question is - is it still worth my attention or is it only "nice amusement"?
     
  2. 0strodamus

    0strodamus Registered Member

    Joined:
    Aug 23, 2009
    Posts:
    1,047
    Location:
    United Surveillance States
    I still use it and find value in what it does. It takes less than 30 seconds to run at startup and keeps me apprised of any system changes I need to investigate.
     
  3. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    I still run XP & consider TW to be a key item in my computer's security. I added a few items to TW's "watch-lists" based on counsel from Kees. Following is the registry watch list I use, but I do not have a record of which items are original & which were added per Kees' suggestions. . .

     
  4. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    For XP this is still a very solid list to determine whether something tries to survive reboot. For Vista and Windows7 some more entries are needed.

    When you are not a Wilders veteran like Bill, when something is changed run Mcfee Getsusp.exe (get suspicious) and Comodo autorun analyser. Comodo will tell you which are blacklisted (reports the known bad guys), Mcfee will tell you wich are white listed (reports the ones which are not known good guys). Add Hitman and MBAM into the mix and you will have a solid second opinion on the changes reported by tiny watcher.
     
  5. ichito

    ichito Registered Member

    Joined:
    Jan 14, 2011
    Posts:
    1,485
    Location:
    Poland - Cracow
    Thanks for all...yours informations and opinions helped me decide to try TW :)
    I'm surprised that so interesting app isn't so popular even though I received PM in this theme...and by this way I met next user on this forum with relations with the Poland :)
    BTW...Kees...GetSusp is already downloaded :D
     
  6. whitedragon551

    whitedragon551 Registered Member

    Joined:
    Sep 30, 2008
    Posts:
    3,188
    Location:
    USA
    Any chance that list Bellgamin quoted is legit for Win 7 x64?
     
  7. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    No, you would need some extra.

    The goeroe on startup entries Tony Klein (this is the update after he had helped Online Armor with improved autorun protection). http://gladiator-antivirus.com/forum/index.php?showtopic=24610 This is the same forum for DefenseWall help :)

    Download Autoruns of microsoft and enable show all empty locations (on your Win x64 PC) as a double check.
     
    Last edited: Mar 11, 2012
  8. ichito

    ichito Registered Member

    Joined:
    Jan 14, 2011
    Posts:
    1,485
    Location:
    Poland - Cracow
    I made scanning by GetSusp...below results...I get something "suspicious" and "unknown" but everything for me is well-known, safe and sometimes necessary to my work
    120311154433_1.jpg
    Thanks bellgamin for the list of additional registry entries...are already added to "Custom Registry Keys" in TW option. At this time nothing suspicious have been detected :)
     
  9. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    Alternate spelling of "goeroe" is "guru".
     
  10. crofttk

    crofttk Registered Member

    Joined:
    May 15, 2004
    Posts:
    1,976
    Location:
    Eastern PA, USA
    More like translation from Dutch to English, but same difference. ;)
     
  11. whitedragon551

    whitedragon551 Registered Member

    Joined:
    Sep 30, 2008
    Posts:
    3,188
    Location:
    USA
    Is there an easy way to copy AutoRuns locations. Im certainly not sifting through Tony Klein's massive list and inputting each and every one.
     
  12. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Tony is Dutch, so he deserves to be addressed in dutch (Guru = goeroe which sounds the same :D )

    Thx Bellgamin some words in Dutch are so simular to English or German, that we make harmless and stupid mistakes, like when we intend to say 'call' someone on the phone (because the phone rings, to ring is 'bellen' in Dutch), we often say 'bark' (bellen is barking in German) when we Dutchmen are talking to Germans; in English we say undertaker when we intend to say entrepreneur.
     
    Last edited: Mar 12, 2012
  13. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Run it, position cursor on the registry entry and right click, choose copy

    Just make sure you map the correct syntax for registry key and field
     
  14. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    5,632
    Location:
    U.S.A. (South)
    Great little app. I still make sure it's always one of the 1st installs when reformatting my XP's.

    What i wouldn't give to have seen this project updated a few times and even lately but i rarely keep up with these type developments. Thnx Bellgamin as always for helping users who want to depend on this app as another extra piece of security.

    Another off-topic note. The old Trust-No-Exe is another relic that's still formidable IMO. It absolutely "WILL NOT" allow activating any executables on another remote drive beit another partition in a dual-boot setup and especially USB drives which for me is a Plus.

    Back on-topic. Theres also a command-line option trick in TinyWatcher to force it to do "Deep-Scans" instead of the routine "Quick-Scan" of files. This is been very useful when i test malware. "Deep-Scan" i believe is only used in TW when it first scans after a new install of it.

    EASTER
     
  15. ichito

    ichito Registered Member

    Joined:
    Jan 14, 2011
    Posts:
    1,485
    Location:
    Poland - Cracow
    On TW site we can find such info
    But..."my" TinyWatcher has no icon in system-tray...I never received popup-alert about new/suspicious entry or change...what is uncorrect? What and where should I search to enable such behaviour of TW?
     
  16. whitedragon551

    whitedragon551 Registered Member

    Joined:
    Sep 30, 2008
    Posts:
    3,188
    Location:
    USA
    Do these updated x64 lists need to be copied over to WinPatrol Plus or is that good to go on its own?
     
  17. ichito

    ichito Registered Member

    Joined:
    Jan 14, 2011
    Posts:
    1,485
    Location:
    Poland - Cracow
    Re: Tiny Watcher...worth to "come back"?

    OK...forget that icon...
    :doubt:
     
Loading...
Thread Status:
Not open for further replies.