I’m looking for a Windows troubleshooting and monitoring tool that would act similar to a firewall at the process level to provide alerts when Dynamic Link Libraries and executable programs are loaded and run. Can you recommend anything?
I’m looking for a Windows troubleshooting and monitoring tool that would act like a firewall at the process level to provide alerts when Dynamic Link Libraries and executable programs are loaded and run. Can you recommend anything?
There is an interesting open source program named WinPooch that acts as an antispyware and anti-Trojan watchdog on Windows systems. It hooks into your system-level programs and spies on what those programs do and the executables that they launch. WinPooch provides a management interface similar to those found in desktop firewall applications that lets you control which programs can run, which directories they can write in and if they can read files from the disk. The latest version incorporates antivirus scanning based on the ClamWin antivirus software to provide real-time virus scanning for every program the system launches. Installing WinPooch is straightforward: download the “Installer” version and run it. WinPooch will begin prompting you when unknown programs attempt to access the system. You will have three choices – Accept the action, Reject it or Feign acceptance. The Feign option blocks the system access but reports success back to the calling program. Be warned that the first time you reboot with WinPooch enabled it will take quite a while to accept the launch of all of your system processes. Once trained, WinPooch is much less intrusive.
