Winpooch
| Winpooch
|
|
|---|---|
|
|
| Basic data
|
|
| developer | Benoit Blanchon |
| Current version | 0.6.6 (beta) (March 19, 2007) |
| operating system | Microsoft Windows |
| programming language | C. |
| category | safety |
| License | GPL |
| German speaking | Yes |
| sourceforge.net/projects/winpooch/ | |
Winpooch or Winpooch Watchdog is free security software for the 32-bit versions of Windows 2000 , Windows XP and Windows Server 2003 . The project, written in C , is published under the GPL and is intended to be an alternative to the commercial software ProcessGuard , as well as a free Windows counterpart to AppArmor (from the Linux world ).
Author Benoit Blanchon stopped the further development of Winpooch on June 13, 2008 because it would take up too much of his free time. He offers other programmers to take over the project.
functionality
Winpooch is designed to prevent all forms of malware from nesting without the need for signatures . This protection is implemented through "API hooking", constant monitoring of the Windows programming interface . The user can grant or revoke rights to programs , such as setting up network connections, starting / stopping other programs, writing / reading to directories on the hard disk, as well as interfering with the Windows registry . With the help of wildcards , these restrictions can also be applied to previously unknown programs, which would then also affect malware. If a predefined scenario occurs, the user is optionally asked to decide what should happen, or the process is automatically stopped, accepted or simulated (whereby Winpooch tries to pretend to the respective process that the desired action has been carried out).
By default, every program is prohibited from making changes in sensitive areas of Windows. Winpooch is also able to check executable files beforehand with the included antivirus ClamAV .
criticism
A previously missing documentation, as well as a series of violent bugs from the early, public testing of 0.6er series meant that Winpooch fell some users into disrepute. Since the software can cause crashes or unwanted restrictions if the configuration is incorrect or neglected , its use is sometimes referred to as risky. In extreme cases, the user could withdraw all control from himself (even if he is an administrator ), so that he could not even shut down Windows. In the event of a hardware reset becoming necessary, there is a risk of data loss.
Web links
Individual evidence
- ↑ Taken from the project directory on SourceForge
- ↑ Taken from the enclosed Readme file, section "Next evolutions"
- ^ Entry and explanation of Winpooch at pctipp.ch
- ↑ Entry at freenet.de in which inexperienced users are advised against using Winpooch