WinPatrol 15.9.2008

WinPatrol是一個系統的看門狗(作者還替它取名一個狗名子叫scotty)，它監看作業系統運行的情形，對惡意程式攻擊做防範，您也可以利用WinPatrol來看目前運行的程式及其使用的DLL，讓您更清楚程式運行的狀況。

• 軟體支援64位元，且新版本的執行速度更快。
• 進階的執行程式監看，除了執行中的程式名稱外，也可以看到被程式使用中的DLL檔案，讓您可以更清楚的了解到程式執行的細節。
• WinPatrol的對未知來源攻擊也能做有效的阻擋，這通常可以預防零時攻擊(還未有UPDATE，可修正BUG時就出現的攻擊)。
• 延時啟動功能，提供使用者於開機時可以先使用系統，而後程式才載入，達到不影響電腦開機速度的目的。

* Explorer Integration of PLUS Info...
One of the main features of WinPatrol PLUS is the ability to look up information for strange filenames. We now have over 19,000 descriptions available in a form that mere humans can understand. Our new WinPatrol now adds the ability to research programs to any executable on your system directly from Windows Explorer.

* Quicker Access to PLUS Info
In previous versions of WinPatrol we shipped PLUS descriptions on some of the most popular file requests. As our database grew and things changed it became obvious that we would never be installing our entire database on local machines. Our new version removes the check for local PLUS data saving you from unnecessary access to your hard drive and speeds up access to our online database

* Bug Fix: Firefox 3 Cookies
At this time WinPatrol hasn't been updated to manage cookies in Firefox 3. Cookies in Firefox 3 use a database method called SQlite which is completely different then its old plain cookies.txt file. We've removed the option if Firefox 3 or greater is detected so there is no confusion.

* Bug Fix: AppInit_DLL
One rarely used startup location frequently used by malware is a registry key AppInit_DLL found at HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows. This key is now also used by security programs as way to hide from users and malware. WinPatrol has always monitored this location successfully but recently the over use of this location helped us find a bug in the way we parsed this key. Users of Kaspersky Internet Security were the first to discover this problem because KIS 2009 actually stores four separate DLL's in this location.
In previous versions of WinPatrol Scotty would incorrectly report filenames when there were three files or more located in this key.