Donation Goal
Donate Now Goal amount for this year: 799 USD, Received: 100 USD (13%)
Please donate to help support this website. The funds will be used to purchase owned license of LiteSpeed Web Server Enterprise (2-CPU). It provides superior performance in terms of raw speed, scalability and anti-DDoS capabilities.

A Very Tiny Tool to Monitor Changes in Windows Files, Registry and Processes

Posted By Raymond In Category: Computer // Music

Aug
1
2008

Most Windows users discover it with time: right after Windows is installed, or when one gets a new PC, the machine is “clean”. Startup and shutdown are fast, the system directories are not crowded with files that contain God knows what, no useless program is wasting your CPU 24/24, etc. Then, things start deteriorating…

Windows does not provide an easy way to keep its system clean. For example, there are many different ways for a program to install itself so that it is run automatically, so it is not easy for you to track down which application decided “by itself” to use your system’s resources in the way it wants. Slowly, your machine becomes a mess. Your CPU is wasted by running processes that you don’t need. Applications create files in your system directories and leave them behind. You sometimes refrain to install and evaluate a new program because you are afraid that it will not uninstall everything afterward. Anyway, the time it takes you to start and stop Windows become longer and longer. You start thinking about reinstalling “just to get things clean again”…


Tiny Watcher is a freeware program to help you keep a clean Windows system. It monitors most changes to files, registry, processes, etc and works on Windows 95,98,ME, NT, 2000 and XP. The way Tiny Watcher works is pretty simple: basically, it starts by taking a snapshot of important parts of your Windows system; then it tracks changes (every time you log in, or whenever you want to). When a change is detected, you are notified.

Tiny Watcher has been designed to work discreetly. You will barely notice it at logon time: the about box shows for less than 5 seconds, and a progression gauge displays briefly.

Tiny Watcher Scanning

Both of these windows being optional, Tiny Watcher can run completely silent. Most of the time, you will just forget that it’s here. Go to Start Menu, select Tiny Watcher > Options. The options window will show. Make sure that the “Show progress gauge” checkbox is unchecked. Then click OK to close the options window.

When Tiny Watcher detects a difference between your current machine state and what was monitored before, you will see the Warning window and you will be able to decide what to do about it (some items can be disabled or removed right away).

Tiny Watcher Warning

The good thing about Tiny Watcher is it is small and uses very little resources on your machine. It runs pretty fast and only when you request it. Tiny Watcher can also be configured to suit your needs. You can edit the list of directories and registry keys that are monitored, decide which files will be checked, etc. Most importantly, Tiny Watcher is FREE.

Although Tiny Watcher has its pros but there are weakness as well. Tiny Watcher detects changes afterward and no automatic cleanup feature which makes it not a novice tool. It is more for advanced users.

Let me tell you a little about my experience with Tiny Watcher. My Windows computer was infected by spyware few weeks ago and I kept on getting advertisement popups every hour. I’ve scanned my computer with Ad-Aware, SpyBot, SUPER AntiSpyware, Spyware Doctor but none is able to detect anything. I even ran HijackThis to check on any suspicious startup items but couldn’t find any. I actually had Tiny Watcher installed long ago, testing and thinking that maybe I’d write about it someday. I ran Tiny Watcher and it tells me that it has 24 scheduled tasks added. True enough that the spyware is automatically ran every hour using scheduled tasks. Question on my mind was, why none of the anti-spyware program scan and detect that area?

[ Download Tiny Watcher ]


Related posts:
  • How To Monitor for Registry and File Changes in Windows
  • RegDefrag: Does It Really Defrag Windows Registry Entries?
  • How To Edit Windows Registry Key Values without Booting in Windows
  • One Click Windows Registry Optimizer
  • Find any files in RapidShared and Fixdown
    • exulter

      nice article ray.. thankz..

    • Prashanth

      I always wanted something like this.
      Is there a portable(standalone exe) version of this ? BTW, we can use at /delete command to remove scheduled task. Many viruses schedule themselves like the famous ssvichosst.exe virus.Thanks Raymond.

    • Tarun

      Another great find from the great man.

    • asasas

      FIRST!!!!

      i hope my massage at the most top

    • brayden

      thats odd about no other antispyware not being able to detect it wow seems like good software. Thanks Ray appreciate it

    • asasas

      shit.. im fourth

    • Liliput

      Another awesome tip. 10q man.

    • http://www.princeseven.com/zo Mark

      Ref: Prashanth

      You can make alost anything portable – when you install stuff, instead of installing it into your hard drive, install it into your USB Stick..

      Great post Raymond..! I’m getting a new PC soon so this is going to be my first download :D

    • Tangomouse

      it also works with windows vista

    • Prashanth

      Some heavy softwares place files in system32 folder & write registry entries, makes files in user settings dir. So installing to USB & then hoping the program to run on other PCs is not possible. If anything could be made portable, then we could just copy folder from Program Files ! For example VLC, Winamp is portable. Anyway Thanks.

    • webcadre

      so ray how did you manage to clean your pc?

    • Ray

      WHOA! What a coincidence Ray! I was just looking for something that has to do with monitoring file modifications. And none of the ones I found, meets my needs.

      Anyway, thanx Ray!

    • N!K

      If you want a truly *magical* piece of software to test programs without worrying about system changes and a lot of great features, read about and try the free Altiris SVS (Software Virtualization Solution).

      Cheers from Argentina!

    • midenz

      truly an awesome proggy~

    • http://2ndsky.org ice

      This is useful for monitering spyware moves!

    • http://uncovered4you.blogspot.com GeekDAD

      I’ve always used hijackthis.. but this seems to be a little more user friendly. Thanks. for the tip

    • goldies

      nice article ray
      that’s why i always spare my time to see u’r blog

    • http://www.releaselive.com/ Ibrahim Rabbani

      Love it raymond, basically it helps you spot progress of viruses such as ravrgn.exe (ravmon) and autorun.inf right?

    • goldcoaster

      Thought I would share,
      created a Task in Task scheduler in VISTA to run on startup and then repeat every 10 minutes.

    • goldcoaster

      By the way, one thing.. after i did this.. IT DIDN’T INFORM ME ABOUT THE TASK I JUST CREATED! humph…

    • http://www.raymond.cc/ Raymond

      goldcoaster, I simply created a task to automatically run Windows Calculator and Tiny Watcher is able to detect it with a “Quick Check”

    • NinjaRicer

      Maybe because the spyware is private, and can only be detected by heuristic analysis?

    • http://universalrectuminspection BigAssNerd

      If the syware is private a heuristic analysis will be voided by the decinactal internal drivers from .dll server static. Thesiciallon analysis will detect the overall set frame internal network log.

    • Ed

      @Raymond

      >>I even ran HijackThis to check on any suspicious startup items but couldn’t find any.

      Since many months now Hijackthis is getting old. It should be used for quick and simple stuff only.

      If you use Autoruns from Sysinternal you\\\’ll see more problems. Just select the option to verify code and hide Microsoft to make the list shorter.

      Example: yesterday I helped someone to clean infection with pop-ups, etc. HJT cannot find anything !
      Autoruns can see 3 strange BHO and Winlogon entry and network socket layer !

      I ran Malwarebytes\\\’ Anti-Malware that is now the more recommended way by Bleepingcomputer. It found ~50 problems and cleaned them. Most problems are Vundo. Reboot -> and the virus is still there immediately:(

      Then I ran ComboFix. Just when starting it says \\\”Rootkit exist, must run in safe mode\\\”

      WOW, this is the first real world rootkit I see.
      ComboFix removed this virus.

    • sablelamb

      hi , raymond im a new computer leaner .
      why your computer can have so many antivirus???
      my computer is even collide when runnings two antiviris????

      Hope you reply me

    • daniel

      [Sablelamb] they were anti spyware, anti adware programs.. not antivirus programs.they don\\\’t have to be running or online monitoring they can be switched on or run one at a time if you choose just to scan. they.Never run two antivirus programs it will most likely mess around and make your system unstable.

    • ha14

      Yup thaks for sharing this toy, indeed why antivirus/spywares are not able to fix those issues. I used hikackthis and run scanner, and recently unhackme but this toy also will be of a great help in danger time!!!

    • Paul Ross

      Great little tool Ray, many thanks

    Copyright © 2005-2012 - Raymond.CC Blog