RegistryProt is a small, yet well written application that monitors your Windows registry just waiting for some insidious Trojan program to infect your computer and change the registry. This program is a 100% free, standalone, compact, low-level real time registry monitor and protector, that adds another dimension to Windows security and intrusion detection.
RegistryProt, by monitoring important locations and keys in the Windows system registry, will alert you whenever a key is added or changed, and then give you the option of accepting the key change, reverting back to the original key setting, or deleting the key.
RegistryProt's most useful attribute is that it will detect the vast majority of Trojans at the exact moment that they infect and then install themselves into your system, and as such, provides yet another level of Trojan and intrusion detection.
Unfortunately Trojans and Worms are not all that difficult to create. Anyone, even a child with reasonable reading skills and the ability to use a computer, can create these intrusive and damaging files. Recently a writer spent the of time putting together a review that is extremely helpful in explaining the how and why of Trojans and Worms. If you would like to have a better understanding of this subject, Click here.
This picture is a screenshot of an actual infection by the Sub-Seven Trojan, as detected by RegistryProt. Sub-Seven usually installs into the common Run, -Run or _Run registry keys. At the moment of infection, RegistryProt alerts you that an important key has been added.
This picture below is a screenshot of an infection by the Drat Trojan, as detected by RegistryProt. Unlike SubSeven, the Drat Trojan uses an existing registry key. Because of this, RegistryProt alerts you that an important registry key has been modified:
In short, RegistryProt is a very small, yet efficient monitoring program that would go well along side your favorite security applications.
Download Site #1: (Australia 127k)
Download Site #2: (US Site 127k)
Download Site #3: (Our Server 127k)
RegistryProt is a copyrighted product of Diamond Computer Systems Pty. Ltd.
This page updated: 01/16/2001
Copyright ©1998-2001 DEW Associates Corporation. All rights reserved.