Author Topic: Registry monitor not working  (Read 8950 times)

0 Members and 1 Guest are viewing this topic.

Offline fletch

  • Full Member
  • ***
  • Posts: 43
    • View Profile
Registry monitor not working
« on: December 10, 2015, 10:28:29 PM »
I've not used this for any specific key before but I recently added one.  Then I changed the value but got no alert.  It's been 10 minutes so far.  I couldn't find anything about the poll interval or if it was supposed to be real time.

Online Digerati

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 1037
    • View Profile
Re: Registry monitor not working
« Reply #1 on: December 11, 2015, 01:19:20 PM »
Assuming you have WinPatrol PLUS, the description of this feature says, "Scotty can monitor the following locations to make sure they don't change without your permission." The key phrase there is "without your permission". If you then make the change, WinPatrol assumes you are authorized to give yourself permission to make that change and will not alert you.

If you click the Help button (the big ? mark), it will take you to WinPatrol Help where it further says under "Monitoring Registry Locations" (my bold underline added),
Quote
If you chose to be alerted, WinPatrol will let you know is (sic) some other program has changed one of the registry locations you want to protect.

So bottom line, WinPatrol is behaving as it should.


***

PS: I reported the typo where "is" should be changed to "if".
Bill (AFE7Ret)
Freedom is NOT Free!
2007 - 2018

Offline fletch

  • Full Member
  • ***
  • Posts: 43
    • View Profile
Re: Registry monitor not working
« Reply #2 on: December 11, 2015, 03:21:56 PM »
That would be impressive if it could do that.  I would suggest however that WinPatrol has no way of knowing who made the change. 


Online Digerati

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 1037
    • View Profile
Re: Registry monitor not working
« Reply #3 on: December 11, 2015, 04:31:23 PM »
Huh? Why not? You seem to be assuming that anybody can access your computer and make changes as they please. If so, then it is you, the user and ALWAYS weakest link in security, who has failed, and failed miserably to keep your computer fully updated and secured. Not WinPatrol, or Microsoft.
Bill (AFE7Ret)
Freedom is NOT Free!
2007 - 2018

Online plodr

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 1092
    • View Profile
Re: Registry monitor not working
« Reply #4 on: December 11, 2015, 06:38:09 PM »
I've been running WinPatrol for years. (First license was purchased Jan. 29th 2010).  I have never gotten alerts for any registry changes I've made. I suspect if I did, that would annoy me. (Similar to how when I manually install updates and reboot, MS informs me I've installed updates. DUH!)

I have gotten notices on registry changes for programs I'm installing that try to change things. These I want to know about. The above ones, I do not.

Online Digerati

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 1037
    • View Profile
Re: Registry monitor not working
« Reply #5 on: December 11, 2015, 07:34:29 PM »
Interesting. I got my license 1/29/2010 too! Must have been during the same promotion deal.

Yeah, it would irritate me too if I got an alert for a change I made. That would be like being asked over and over again, "Are you sure?"
Bill (AFE7Ret)
Freedom is NOT Free!
2007 - 2018

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19421
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Registry monitor not working
« Reply #6 on: December 11, 2015, 10:16:29 PM »
Could have been the WinPatrol One Day Only: 50% off WinPatrol Plus.  No, that was 2009.  This was in 2010:  The Great 99 Cent Software Experiment of 2010.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Online plodr

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 1092
    • View Profile
Re: Registry monitor not working
« Reply #7 on: December 11, 2015, 11:23:33 PM »
That's it, Corrine. I was running the free version then bought 2 licenses on that day. One for my computer and one for my husband's.

Offline fletch

  • Full Member
  • ***
  • Posts: 43
    • View Profile
Re: Registry monitor not working
« Reply #8 on: December 12, 2015, 10:46:41 PM »
I've been running WinPatrol for years. (First license was purchased Jan. 29th 2010).  I have never gotten alerts for any registry changes I've made.

Got mine in 2009  :P

I don't get alerts for registry changes I make either - as long as the things changed are not on the list of things being monitored by WinPatrol.

But, "general" registry changes aside, if I specify a certain key/value to monitor on the registry tab, I'd expect WinPatrol to notify me if it ever changes - regardless of who made the change.



Online Digerati

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 1037
    • View Profile
Re: Registry monitor not working
« Reply #9 on: December 12, 2015, 11:09:46 PM »
Quote
But, "general" registry changes aside, if I specify a certain key/value to monitor on the registry tab, I'd expect WinPatrol to notify me if it ever changes - regardless of who made the change.
Again, why? If you read the description of the feature, that is NOT how it works. Therefore, you should not be expecting it. If the feature was designed to notify you of changes you make yourself, and didn't then you would have an issue.

And again, it would seem you are in the minority here. I don't need to be notified of a change I made. I already know I made it.
Bill (AFE7Ret)
Freedom is NOT Free!
2007 - 2018

Offline fletch

  • Full Member
  • ***
  • Posts: 43
    • View Profile
Re: Registry monitor not working
« Reply #10 on: December 12, 2015, 11:59:19 PM »
I think we're interpreting the description of the feature differently.  IF WinPatrol could detect "WHO" changed a registry key, then I'd expect the WHO to be included in the alerts.  You never see that in any alerts.

I'm not saying the feature should notify me of changes I make "myself".  I'm saying if the value changes for ANY reason from what I specified on the Registry tab in WinPatrol, I should be notified.

If WinPatrol in general is working at you propose - which is - any changes "I" make intentionally should not generate an alert, then I found a bug.

"I" changed HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\RESTART_STICKY_NOTES from C:\Windows\System32\StikyNot.exe to C:\Windows\System32\StikyNot.XXX and got an alert from WinPatrol about 10 seconds later - for a change that "I" made myself.

Online Digerati

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 1037
    • View Profile
Re: Registry monitor not working
« Reply #11 on: December 13, 2015, 12:17:59 AM »
Quote
I think we're interpreting the description of the feature differently. 
There is nothing to interpret. It is written in plain English so I am puzzled as to why you just aren't getting it! Did you read the quote from the WinPatrol help file I posted above? I don't see how it can be any clearer. And I put it bold underline too.

As for who? Well, that really makes no sense. The who would be the user logged in.

Bug? So first your complaint was it is not reporting, now you are saying it is?
Bill (AFE7Ret)
Freedom is NOT Free!
2007 - 2018

Offline fletch

  • Full Member
  • ***
  • Posts: 43
    • View Profile
Re: Registry monitor not working
« Reply #12 on: December 13, 2015, 01:45:35 AM »
No complaint.  Just an example of WinPatrol sending an alert for a change that "I" made to an area of the registry that it monitors. 

It seems you think that no alerts will/should be displayed if "I" am the one making the change to an item that is monitored.  The example illustrates that is not the case.  Anytime something WinPatrol monitors is changed, regardless of who/what made the change, a notification is displayed.

I did read your quote from the help file - which is the first place I looked for clarification before starting this thread.  It's wording is subject to misinterpretation.

A more concise explanation should read...

"If you chose to be alerted, WinPatrol will let you know if one of the registry locations you want to protect is changed. "

Actually, the first sentence in that section of the help file is what I'd expect.

"WinPatrol will monitor registry locations and alert you if a change has occurred."  Period.

The latter explanation is worded in a user friendly manner that could make someone think that WinPatrol is very smart and will only alert you if "some other program" makes the change.  No where does it state that if you make the change yourself, WinPatrol will know this and not bother alerting you. 

Online Digerati

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 1037
    • View Profile
Re: Registry monitor not working
« Reply #13 on: December 13, 2015, 12:23:32 PM »
Well, I don't really know what more to say here. Perhaps one of the WP development team will see this thread and offer a comment.
Bill (AFE7Ret)
Freedom is NOT Free!
2007 - 2018

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19421
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Registry monitor not working
« Reply #14 on: December 13, 2015, 02:55:34 PM »
Whether or not there will be an alert if a change is made to a registry key that WinPatrol is monitoring depends upon how the entry was made.  If the box "Always protect this key, do not alert me to changes." is checked, there will be no alert.  Conversely, if unchecked, there will be an alert.  See WinPatrol Registry Monitoring Scripts.



Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.