WinPatrol PLUS Image

I'm proud to have been able provide WinPatrol free to over a million users around the world.  It's very rewarding to hear from folks who love having Scotty on patrol and/or folks who were saved from the serious frustration caused by unwanted infiltrations.

A few years ago, I decided to invest more time into WinPatrol and add more advanced features allowing users to avoid some of the more sophisticated assaults. At the same time, I hired our first experienced research associate to help build a database of information on both spyware and legitimate programs. We now have a world wide team of consultants, translators, researchers and security investigators. It wouldn't be possible without the support from our PLUS members.

Thank you,
Bill Pytlovany

1: Premium Access to PLUS Knowledgebase (24/7)

    Use WinPatrol to learn more about the programs and cryptic files on your computer. If you see a program that you're curious about, you can click on its "PLUS Info..." button. You'll be connected to our online database and we'll let you know what the program is all about. Descriptions are created for mere humans to read, not just computer geeks. We'll also try to include links and program tips that might be useful.
    PLUS Knowledge Base Samples - Save.exe New Dot Net RegSvr32.exe
2: Real-time Infiltration Detection without slowing you down. 3: Advanced Examination of HIDDEN Registry Startup Keys (NOW FREE in Version 14)
    While programs like MSConfig will show you the standard Startup locations in Windows, we know there are other ways to launch programs without your knowledge. WinPatrol PLUS examines many alternate, more technically advanced locations. We've seen undesirable programs use these locations and even some of our friends in the security business now hide their programs there. WinPatrol PLUS will let you know about any changes to the following alternate startup keys.

  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows AppInit_DLLs (O20)
    Examples: NVDesk32.DLL, Backdoor.Agent.B, CWS, BitDefender Pro, Tiny Personal Firewall (20)

  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad (O21)
    Used by CDBurn, PostBootReminder, SysTray, WebCheck, Spector Keylogger, CoolWebSearch (O21)

  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler (O22)
    Examples:Browser preloader:UI Library, Component Categories cache daemon, CWS Chronicles (O22)

  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
    Examples:Browser preloader:Shell, Microsoft AntiSpyware Service Hook

  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify (O20)
    Examples:WGALogon(Windows Genuine Advantage), GoToMyPC,Adware.Look2Me (O20)

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon UserInit (F2)
    Examples: nddeagnt.exe, myTrojan.exe

PC World April 2006

    "The free version is good, but I strongly urge you to spend $ for the Pro version. Its comprehensive database gives you more details and specific recommendations for which programs to keep and which to remove. I promise you'll get that money back by eliminating your system tray headaches."

    - Steve Bass