WinPatrol question!

Just found this, but i don't know old is it and how valid is it.
Everyone just draw your one conclusions (That means please don't involve me in your posts. Thanks).

Real-time Infiltration Detection


WinPatrol Most Requested Program Information

 

I'm new in WP, but I decided to test ability to inform me about eg. hosts file changes. So this is what I did - I manually edited in notepad my hosts file and save it in standard location - Scotty didn't bark? Is it normal?

 

No. Assuming HOSTS monitoring is enabled, any editing / saving of the file should in seconds prompt for approval / disapproval of changes.

 

Thanks for reply.
I have enabled realtime HOSTS monitoring in WP Plus, however, despite of this WP doesn't bark...
I also tried edit HOSTS file via WP > Options tab > button "View HOSTS file" in notepad but also without any notification from WP after saved HOSTS file.

 

The program doesn't work for me either (Vista SP2). I can modify the hosts file without getting an alert. I also used Autoruns to disable Scotty from running when windows starts and I did not get an alert. So, it looks like Scotty has fallen asleep on my system.

Are there any testing tools available for Winpatrol to determine if Scotty is doing what it was designed to do other than woof?

Al

 

Curious. Everytime I update my MVPS HOSTS file, I am presented with a Winpatrol "Accept / Deny" prompt (although Scotty does not bark). Manual editing of HOSTS file induces same prompt.
Suggest you present this issue to the forum:http://forum.securitycadets.com/index.php?showforum=57

 

I thought Winpatrol did not have a way to prevent being shut down?

 

I installed WP+ on an XP SP3 system of mine and the host alert works there, but that is the only alert I've been able to tickle out of it. I need a safe way of testing - without having to try real malware. I also noticed that there is nothing logged in the history file after rejecting a change to the hosts. Is the history logging working for you?

I really don't have that much confidence in the program right now. I wouldn't mind seeing it in action to change my mind .

 

Hi Adric (aka click-click?)
Apparently History primarily stores Startup Event (machine_run, type_hidden, and machine_runonce command) activity.

But I guess the point is moot if it is not working on your Vista box. We'll see how the forum responds.
PS: On my XP Pro box; everytime I update my JRE (Java runtime), Java by default, automatically installs it's Sun Java Update Scheduler in my Startup Programs. A bit annoying.
WP, however, consistently alerts and allows me to block it.

 

I have the same problem too.XP SP3

 

look at the dog barking at malware and rootkits

 

Scotty is also 'Blind' to a number of processes running on my system. For example, Logitech's KALMNPR.exe which is used for their setpoint drivers.

There are webpages for this entry on the site, but WinPatrol just doesn't see the process running. Ditto for a few other things, like the NOD GUI.

 

KHALMNPR.EXE is in the "Startup Programs"-list and in Active Tasks here.

 

WinPatrol Plus 2010 doesn't list either of them for me. I'm running Win 7 Prof x64, though. People seem to be having varying levels of success with WinPatrol dependent upon OS.

WinPatrol also thinks I'm using Vista.

 

today - tested - failed Win7 home premium, admin power
and i had no response for changed oder added/deleted tasks. strange

 

Maybe it's buggy with Windows 7? I would send in a bug report to Bill.

 

Seems not limited to Win7 - also XP (see above)

 

Odd.......... Every PC I have ever installed Winpatrol on has never had any issues, but every PC is different.

P.S This is my 200th post

 

Maybe it's only the 99 cent versions

 

My 99 cent version works properly

 

Working perfect here on XPSP2 ($29,95 version ).

 

Any news about when will be release the next version with the registry protection?

 

man i am waiting for that realease i even change my avatar

 

Don't do that, we just get use to your new Avatar.

 

i know and i love it but i think trjam has better avatars