Winpooch is a Windows watchdog, free and open source. Anti spyware and anti trojan, it gives a full protection against local or external attacks by scanning the activity of programs in real time. This version of Winpooch also includes an antivirus (ClamAV) and can provide a real-time virus protection.

API Hooking
Winpooch uses the API Hooking method. It spies programs when they are running and gives to the user a powerful control of their activity.For example, you can forbide a program to write in a system directory or in the registry, or else to connect to internet. That makes the difference between others anti spywares using a database of known signatures.

Antivirus
ClamWin is an open source antivirus for Windows that can not scan files in real time, unfortunately. With Winpooch, just associate ClamWin and it will be possible to detect virus in a program before it runs.

About version 0.6.3
This new release introduce a new efficient antivirus scanner cache. In previous versions (<=0.6.2) the cache was in user-space, which requires many communication between kernel module and user-space application. The new scanner cache is in kernel space, so this reduce exchanges between driver and application and thus increase the whole system speed. This new release also improves the support of Windows Vista.

Changelog Winpooch 0.6.3

• Added compatibility with many kernel version (26 new builds)
• Changed antivirus scanner cache. Now implemented in kernel space. This is much more efficient and memorize user choice when a virus is detected.
• Changed scanner cache window.
• Added a hook on NtCreateUserProcess (only for Windows Vista). This greatly improves Windows Vista support.
• Added a button "Make a donation" to about window.
• Don't report error anymore if ClamWin fails to open the file to scan.
• Added simplified Chinese translation.
• Added Czech translation.

Website
Download

This post has been edited by fariz: Dec 16 2006, 11:18 AM