WinPatrol Help: Startup Programs

WinPatrol: Startup Programs

WinPatrol's top feature is how it monitors and allows you to review the programs that automatically launch when you start Windows. Any type of program determined to infect your system will most likely appear on Startup Programs list. This list is essential to detecting nasty software such as trojans, worms, spyware, adware or other programs that may insert themselves into your PC's auto-startup locations.

The first time you run WinPatrol Scotty the Watch Dog will review a list of these special Startup Programs. The startup commands for these programs are found in the Windows Registry, your Windows Startup Folder, within some system files and other internal system areas. WinPatrol will remember your list of Startup Programs and alert your if new programs are added or removed. This change may be something you choose or may try to change without your warning. Notification when Startup Programs are removed is an option that is check in the box in front of [] Notify me if Startup Auto setting is removed.

Many of the programs you see in the Startup Programs list may have come pre-installed by your computer manufacturer. Others may have been installed at a later point by spyware, adware, or some other malicious program. Whenever a new program is added to the Startup Programs list, Scotty will warn you of the change. You will then see the name of the new program and can decide if this program is ok, or if it is suspicious. If you're not familiar with a new program PLUS members can click on the PLUS Info button for more information.

WinPatrol monitors and displays more locations then your typical programs of its type including MSConfig. To view a complete list of locations monitored by WinPatrol, check the box which says " [] Include Secret Startup Locations".

WinPatrol will also keep track of the date and time a program was first detected. This information is helpful when your system is attacked by multiple programs. By sorting the "First Detected" column you can tell which programs infiltrated your computer during the same infection. This can help identify malicious program even when they don't include a company name or have a randomly created filename.

Additional Startup Locations monitored by WinPatrol PLUS click here.

Configuring Startup Programs

In addition to the main list of Startup Programs, WinPatrol includes several buttons to help you get more information about the programs that start with Windows and configure them as you see fit.

Monitor

This button allows you to configure how frequently Scotty checks the Startup Programs list for changes. You can set this frequency in minutes, and even set it to 0 minutes to disable checking of the Startup Programs list entirely. WinPatrol PLUS monitors based on specific triggers instead of polling at routine times. The triggers allow WinPatrol to monitor locations only when required providing more efficient use and provides the ultimal performance.

Info...

WinPatrol provides additional information on Programs, including the company that created the program file as well as the program version. Most legitimate files will usually include copyright and company information that can be displayed by WinPatrol, when available. When it does exist, this information will help you decide if the program is a valid program or not and whether you want to Remove, Disable or keep it.
Some Info screens have additional functionality depending on the type.

As it is often difficult to tell just from a file name or company name whether a program is legitimate, you can click the PLUS Info... button to learn more about a program. Access will connect you to the online WinPatrol database for more information including information collected by the decisions of other WinPatrol fans. WinPatrol PLUS upgrade is required to access the PLUS Info... button.
Click Here for more Info Help

Remove

This button will not delete any programs from your hard drive. It will however remove the ability for this program to start. This will prevent it from doing any damage or just slowing down your computer. Removing the entry for that program from the Startup Programs list, prevents the program from restarting every time your restart your system.
If the program is currently running, the Remove button will also offer you the choice to shut it down immediately.
If you change your mind and didn't want to Remove this program from the Startup Program you can review any actions using the History button under the Options tab to restore your Startup Program.

Disable

When you disable a program in WinPatrol it will automatically be removed for good. It will be removed automatically whenever it is detected in the future and won't include any pop-up alert messages.

This feature can be handy because some programs have a bad habit of returning after they have been removed from the Startup Programs list. For example, we discovered many programs like QuickTime, RealPlayer, and MSN Messenger who think they're so important they put themselves in the Startup Programs list every time they run. Ideally, you should find the option within the program so it doesn't become an auto Startup but until you do WinPatrol will help.

Just leave these programs as disabled and Scotty will remove them for you every time they reappear. If you want to Enable them in the future, click to select the program and the "Disable" button will automatically change to "Enable."

Add

This button allows you to Add a new program to the list of programs that will always start when you reboot or logon to your computer. When you click Add you'll see the standard Windows Open dialog which will allow you to navigate to the folder where your program is located.

Secret Startup Locations

You may notice some new Startup programs which aren't listed by most Startup programs. These are undocumented registry locations which Spyware has been known to use to infect your system. They won't be listed by programs like MSConfig.exe Scotty will monitor these locations and in some cases will allow you to Reset your computer back to their original settings and remove the Spyware additions.

Windows System Updates

You may notice during Microsoft updates you'll see numberous alerts about changes. You should always allow these changes. Any changes can be reviewed in the History button.

To close or Exit the WinPatrol tab interface click the X in the upper right hand corner or the Close button. WinPatrol will continue monitor changes but the main interface will be removed from memory.

Dealing with Stubborn Programs

If you notice a Startup Programs entry keeps coming back after you disable or remove it, you should take a peek at the Active Tasks currently running. Sometimes malicious programs will come in pairs or groups that protect each other to prevent you from removing them. In such cases, you will want to find all the suspicious tasks on the Active Tasks list and use the Kill Task feature to shut down each one before removing the suspicious entry from the Startup Programs list.

First, close down all the applications that you know about.
Click the Active Tasks tab to check what programs are still listed.
You may see multiple suspicious programs. Some may have what look to be randomly created filenames.
Hold down the CTRL key to select several tasks at once and click on each suspicious task.
Click on the Kill Task button.

Once the programs are no longer active you should be able to remove them from the Startup Programs list and reboot.

Delete File on Reboot

If after trying to remove a suspicious or dangerous program you find it still will not go away, right-click on the title of the program and select "Delete File on Reboot." This action will not take place until the next time you boot, but the file will be deleted before Windows starts and any other programs that may attempt to prevent its deletion.

There is no way to recover the file once it is deleted, so use this feature only when you are absolutely sure you want to remove the file.