I'm proud to have been able provide WinPatrol free to over a million users around the
world. It's very rewarding to hear from folks who love having Scotty on patrol
and/or folks who were saved from the serious frustration caused by unwanted infiltrations.
A few years ago, I decided to invest more time into WinPatrol and add more advanced features allowing
users to avoid some of the more sophisticated assaults. At the same time, I hired our first
experienced research associate to help build a database of information on both spyware and legitimate programs.
We now have a world wide team of consultants, translators, researchers and security investigators. It wouldn't be possible without
the support from our PLUS members.
1: Premium Access to PLUS Knowledgebase (24/7)
Use WinPatrol to learn more about the programs and cryptic files on your computer. If you see a program
that you're curious about, you can click on its "PLUS Info..." button. You'll be connected to
our online database and we'll let you know what the program is all about.
Descriptions are created for mere humans to read, not just computer geeks.
We'll also try to include links and program tips that might be useful.
2: Real-time Infiltration Detection without slowing you down.
Our R.I.D. technology will detect significant events on your system without impacting your
system performance or productivity. Only when a R.I.D event is detected will Scotty patrol for changes.
The rest of the time WinPatrol passively waits in the background allowing your system to
run with peak efficiency. For more information you can go to
3: Advanced Examination of HIDDEN Registry Startup Keys (NOW FREE in Version
While programs like MSConfig will show you the
standard Startup locations in Windows, we know there are other ways to
launch programs without your knowledge.
WinPatrol PLUS examines many alternate, more technically advanced locations.
We've seen undesirable programs use these locations and even some of our friends in the security
business now hide their programs there.
WinPatrol PLUS will let you know about any changes to the following alternate startup keys.
- HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows AppInit_DLLs (O20)
Examples: NVDesk32.DLL, Backdoor.Agent.B, CWS, BitDefender Pro, Tiny Personal Firewall
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad (O21)
Used by CDBurn, PostBootReminder, SysTray, WebCheck, Spector Keylogger, CoolWebSearch
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler (O22)
Examples:Browser preloader:UI Library, Component Categories cache daemon, CWS Chronicles
Examples:Browser preloader:Shell, Microsoft AntiSpyware Service Hook
- HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify (O20)
Examples:WGALogon(Windows Genuine Advantage), GoToMyPC,Adware.Look2Me
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon UserInit (F2)
Examples: nddeagnt.exe, myTrojan.exe
PC World April 2006
"The free version is good, but I strongly urge you to spend $ for the
Pro version. Its comprehensive database gives you more details and specific
recommendations for which programs to keep and which to remove. I promise you'll
get that money back by eliminating your system tray headaches."
- Steve Bass