5 Sep

WinPatrol also has a stand-alone version of WinPatrol Explorer which can run from a USB flash drive or other portable device without leaving any left over files or registry entries on the computer being optimized. If you’re someone who frequently needs to help family and friends, this program is for you! Just download directly to your USB Flash or other portable device. Even if you don’t use WinPatrol, you’ll want this version in your utility toolbox.
WinPatrol Features:
Detect and Review New Auto-Startup Programs Automatically Disable Reoccuring Startup Programs Monitor BHO’s and Tool Bars Monitor Creation of Scheduled Tasks Display and Kill Multiple Running Tasks Monitor, Stop and Control Window Services Manage and Automatically Remove Unwanted Cookies Monitor IE Home and Search pages Monitor and Edit HOST File Detect and Lock Changes to File Type Associations Detect and View Newly Created Hidden Files Track Date/Time when programs are first detected on your system Delay Auto-Startup programs for quick bootup Multiple System Report Options Undocumented or HIDDEN Registry Startup Keys Access to WinPatrol PLUS Knowledgebase – PLUS version only Real-time Infiltration Detection – PLUS version only
The PLUS version of WinPatrol that cost $29.95 gives your computer real-time infiltration detection and also access to WinPatrol PLUS knowledgebase which is available online 24/7. I manage to find a valid pirated Registration Name and Code that is able to upgrade the WinPatrol to PLUS. Activating WinPatrol PLUS requires online activation and I am sure that the key will be blacklisted sooner or later. The knowledgebase is very useful because it gives us very detailed information about the process for mere humans to read, not just computer geeks. Some of the process information even contains links and program tips that might be useful.
If you cannot afford the PLUS version of WinPatrol, here is a trick on how to view the PLUS info for a process. The below example is to view the PLUS info for iexplorer.exe (Internet Explorer). If you want to check for another process, simply replace iexplore and iexplore.exe (in bold) with the process that you want to check.
http://www.winpatrol.com/db/plus2007/iexplore.html?iexplore.exe&1
As for WinPatrol’s Real-time Infiltration Detection (R.I.D.) technology, the only way to get it working is to activate the PLUS version. Honestly, I would rather use the free version of WinPatrol and spend $24.95 on BitDefender Antivirus 2008 or Avira AntiVir Premium at $29.52 or Rising Antivirus 2008 at $29.95 rather than $29.95 on WinPatrol PLUS. The big difference is antivirus programs are subscription based and you’ll need to renew every year but as for WinPatrol, you only need to pay once.
The knowledgebase is good but not the best solution because it only checks the process name and not MD5 hash like what RunScanner does. A good trojan developer can easily code an undetectable version of trojan and injects itself into a legitimate process name. I tried infecting my test computer with an old trojan (bifrost) that is no longer in development and WinPatrol PLUS immediately detects a new auto startup program. I removed the auto start up entry and also killed the process (iexplore.exe) that has been injected by the trojan. Rebooted the computer and the trojan infects the computer all over again. I was unable to remove the trojan with WinPatrol…
Pros: Small, easy to use, knowledgebase is easy to understand, better than HijackThis.
Cons: PLUS version over priced, doesn’t check for MD5 hash in knowledgebase, unable to completely remove Bifrost trojan.
[ Download WinPatrol 2008 Install Edition | USB Flash Edition ]
Technorati Tags: winpatrol, review, security, hijackthis, startup
: Copying this article to your website is strictly NOT allowed. However, if you like this article, you can use the HTML code below to directly link to this article.
Microsoft Malicious Software Removal Tool 1.10 Sniff and Reassemble Files Uploaded or Download from FTP Network using NetworkMiner Encrypt MSN Chat for Security and Privacy Investigating How Kaspersky Key Finder Finds and Downloads Kaspersky Keys How To Remove ASecurityAssurance.com Zlob Trojan Avira AntiVir V9 Review – Best Free Antivirus Upgrade your Windows User Account Control with Smart UAC Replacement
Have computer technical problems? Get FREE help from Raymond.CC FORUM
8 Responses for "Review on WinPatrol – A Tool That Sniff Out Malicious Mysteryware"
In so far as WinPatrol being unable to remove a Bifrost trojan, it’s not designed to by any stretch. It’s not any sort of scanner in the conventional anti-spyware scanner realm.
It’s a fair HIPS tool, but one that many of the advanced malware infections easily bypass. But ehen again, they also bypass many of the more conventional ‘live’ monitoring anti-spyware tools too.
And I’m not sure what the point is in saying you grabbed a pirated key for it. If you’d have asked, I’m fairly certain Bill would have given you one.
That would have been a far more professional thing to do especailly if you’re an experienced reviewer such as yourself. What you did is fairly disappointing.
Tool That Sniff Out Malicious Mysteryware.
@TeMerc –
Raymond used a pirated key to test your application. I doubt he kept it, or shared it with anyone. (He didn’t put it in the post). Then he gave the app a favorable review; enough so that I may try the application out for myself. I’ve heard of the program but never heard enough to actually check it out. After reading this maybe I will….
Instead of getting on your high horse and denouncing one of the most consistent and fair reviewers on the internet, maybe you should call Bill and tell him that thanks to Raymond, over 36,000 tech savvy users just read a free advertisement for WinPatrol. That should be worth at least one golden “legitimate” key for the app.
Raymond keep up the good work!!!
Hi this is Great
@ TeMerc are you the owner of this program.
I can market it for you if you like.
Cheers Raymond.
Get some Website stuff now…like free rapidshare account…
Thanks
Raymond,
As owner and author of WinPatrol I\\\’ll just say thank you for taking the time to write about WinPatrol.
I thought your assessment was fair. MD5 is on our list of future enhancements and I\\\’m sure with some more knowledge of using WinPatrol you could have removed Bifrost. I also am thinking of a price reduction but since WinPatrol PLUS isn\\\’t a yearly subscription and isn\\\’t limited to a single computer I think it\\\’s still a good value.
As Temerc pointed out, if you had Emailed me I would have provided you a PLUS code for your review. The only real error was the mention of our Who\\\’s function. That hasn\\\’t been around for a long time.
Thanks again,
Bill
The Plus price IMHO is well worth the value. As Bill mentions, it’s not a yearly price, nor a per PC price.
However, whilst I’d normally have gone “yipee, another WP review” (I love WP hehe), I must confess to being rather annoyed with Raymonds review. Why is a so-called professional using and admitting to using, cracks? Thats not gonna go down well in the sec com.
WinPatrol has long been a favorite utility of mine. There are different levels of malware detection. WinPatrol is a great utility for spotting activity that most viri scanners and spyware removal tools will miss.
@martina: i guess ur a sloth when it comes to typing cuz if u do type pretty fast these things r bound to happen
Leave a reply