Comments on: A Very Tiny Tool to Monitor Changes in Windows Files, Registry and Processes http://www.raymond.cc/blog/a-very-tiny-tool-to-monitor-changes-in-windows-files-registry-and-processes/?utm_source=rss&utm_medium=rss&utm_campaign=a-very-tiny-tool-to-monitor-changes-in-windows-files-registry-and-processes Daily updated news of useful advanced computer tips and tricks Fri, 25 May 2012 15:54:13 +0000 hourly 1 http://wordpress.org/?v=3.3.2 By: Paul Rosshttp://www.raymond.cc/blog/a-very-tiny-tool-to-monitor-changes-in-windows-files-registry-and-processes/#comment-415559 Paul Ross Fri, 26 Dec 2008 08:43:09 +0000 http://www.raymond.cc/blog/?p=1123#comment-415559 Great little tool Ray, many thanks Great little tool Ray, many thanks

]]> By: ha14http://www.raymond.cc/blog/a-very-tiny-tool-to-monitor-changes-in-windows-files-registry-and-processes/#comment-415433 ha14 Thu, 25 Dec 2008 15:57:20 +0000 http://www.raymond.cc/blog/?p=1123#comment-415433 Yup thaks for sharing this toy, indeed why antivirus/spywares are not able to fix those issues. I used hikackthis and run scanner, and recently unhackme but this toy also will be of a great help in danger time!!! Yup thaks for sharing this toy, indeed why antivirus/spywares are not able to fix those issues. I used hikackthis and run scanner, and recently unhackme but this toy also will be of a great help in danger time!!!

]]> By: danielhttp://www.raymond.cc/blog/a-very-tiny-tool-to-monitor-changes-in-windows-files-registry-and-processes/#comment-398978 daniel Wed, 27 Aug 2008 03:48:02 +0000 http://www.raymond.cc/blog/?p=1123#comment-398978 [Sablelamb] they were anti spyware, anti adware programs.. not antivirus programs.they don\\\'t have to be running or online monitoring they can be switched on or run one at a time if you choose just to scan. they.Never run two antivirus programs it will most likely mess around and make your system unstable. [Sablelamb] they were anti spyware, anti adware programs.. not antivirus programs.they don\\\’t have to be running or online monitoring they can be switched on or run one at a time if you choose just to scan. they.Never run two antivirus programs it will most likely mess around and make your system unstable.

]]> By: sablelambhttp://www.raymond.cc/blog/a-very-tiny-tool-to-monitor-changes-in-windows-files-registry-and-processes/#comment-398398 sablelamb Mon, 18 Aug 2008 09:11:05 +0000 http://www.raymond.cc/blog/?p=1123#comment-398398 hi , raymond im a new computer leaner . why your computer can have so many antivirus??? my computer is even collide when runnings two antiviris????Hope you reply me hi , raymond im a new computer leaner .
why your computer can have so many antivirus???
my computer is even collide when runnings two antiviris????

Hope you reply me

]]> By: Edhttp://www.raymond.cc/blog/a-very-tiny-tool-to-monitor-changes-in-windows-files-registry-and-processes/#comment-398008 Ed Wed, 13 Aug 2008 13:01:22 +0000 http://www.raymond.cc/blog/?p=1123#comment-398008 @Raymond>>I even ran HijackThis to check on any suspicious startup items but couldn’t find any.Since many months now Hijackthis is getting old. It should be used for quick and simple stuff only.If you use Autoruns from Sysinternal you\\\'ll see more problems. Just select the option to verify code and hide Microsoft to make the list shorter.Example: yesterday I helped someone to clean infection with pop-ups, etc. HJT cannot find anything ! Autoruns can see 3 strange BHO and Winlogon entry and network socket layer !I ran Malwarebytes\\\' Anti-Malware that is now the more recommended way by Bleepingcomputer. It found ~50 problems and cleaned them. Most problems are Vundo. Reboot -> and the virus is still there immediately:(Then I ran ComboFix. Just when starting it says \\\"Rootkit exist, must run in safe mode\\\"WOW, this is the first real world rootkit I see. ComboFix removed this virus. @Raymond

>>I even ran HijackThis to check on any suspicious startup items but couldn’t find any.

Since many months now Hijackthis is getting old. It should be used for quick and simple stuff only.

If you use Autoruns from Sysinternal you\\\’ll see more problems. Just select the option to verify code and hide Microsoft to make the list shorter.

Example: yesterday I helped someone to clean infection with pop-ups, etc. HJT cannot find anything !
Autoruns can see 3 strange BHO and Winlogon entry and network socket layer !

I ran Malwarebytes\\\’ Anti-Malware that is now the more recommended way by Bleepingcomputer. It found ~50 problems and cleaned them. Most problems are Vundo. Reboot -> and the virus is still there immediately:(

Then I ran ComboFix. Just when starting it says \\\”Rootkit exist, must run in safe mode\\\”

WOW, this is the first real world rootkit I see.
ComboFix removed this virus.

]]> By: BigAssNerdhttp://www.raymond.cc/blog/a-very-tiny-tool-to-monitor-changes-in-windows-files-registry-and-processes/#comment-397306 BigAssNerd Tue, 05 Aug 2008 21:16:24 +0000 http://www.raymond.cc/blog/?p=1123#comment-397306 If the syware is private a heuristic analysis will be voided by the decinactal internal drivers from .dll server static. Thesiciallon analysis will detect the overall set frame internal network log. If the syware is private a heuristic analysis will be voided by the decinactal internal drivers from .dll server static. Thesiciallon analysis will detect the overall set frame internal network log.

]]> By: NinjaRicerhttp://www.raymond.cc/blog/a-very-tiny-tool-to-monitor-changes-in-windows-files-registry-and-processes/#comment-397185 NinjaRicer Mon, 04 Aug 2008 21:22:25 +0000 http://www.raymond.cc/blog/?p=1123#comment-397185 Maybe because the spyware is private, and can only be detected by heuristic analysis? Maybe because the spyware is private, and can only be detected by heuristic analysis?

]]>