Spyware Process Detector

Versions description

Added "Mean CPU usage" column. This column shows how much percent this process has used the CPU. You can identify processes that use much CPU time over a longer period.

Fixed many bugs.

Added a startup manager (new tab on main form). The startup manager shows all processes that run on Windows startup. The program examines each startup item and assignes status of the item (rating of danger). You can open details information about each startup item, delete, create item or mark it as safe.

Added "Startup item information" window with details information about startup item. It includes item place, item name, file name, value, status, reason of status, state, date/time of first finding, company, description and other detailed file information.

Added "Monitors for new startup items" and "Popup SPD when found the following startup items" options. SPD will popup when found new or dangerous startup item.

Improved detection of status. Fixed bugs.

You can get a full-licensed version of Spyware Process Detector for FREE when you try or buy any product from our trusted partners. In return for sending them a new customer (that's you), they will pay your software registration fee. Just follow the advertiser's instructions and you will receive a fully licensed version for FREE! Click here to try!

Now SPD shows memory usage and work time of hidden processes.

New option "Scan for changes in threads and in code of processes".

Fixed crash bug when a process runs itself many times.

Fixed bug when a dead process looks as alive.

Added "Maximum Memory Usage" column. There you see how much memory the process has maximum used. This might be helpful increasing the speed of your system if you identify processes that need much memory.

Added "CPU Time" column. This column shows how much time this process has used the CPU at 100%. You can identify processes that use much CPU time over a longer period.

New option "Show CPU Time for System Idle Process". This process runs while your machine is idle. The CPU Time of this process is the time spent in idle.

Added "Domain" column.

Fixed many bugs.

German language support. German plugin has been added. Special thanks for translation to Oliver Sahr. You can select the language of the interface and manual while installation.

Added commands Save and Load the process. You can use it for saving in a game, if the game has no save function. Read the manual for details about this functions. You can load processes in the Trial version for a maximum of Three (3) times only.

Now you can set the filter on Type field in Handles page of process information.

Fixed bugs.

Now SPD stores username and date-time when user marks a process as Safe or as System. You can view it in reason when you open process information window.

If system process hash (checksum) has been changed then you can mark this process as System again. System process hash can be changed when you install Service Pack or Windows Hotfixes.

Now SPD can work without administrative rights. But SPD installation needs administrative rights.

Fixed crash bug on Windows XP.

Optimization of memory usage.

Improved analysis of threads.

Improved detection of status. Fixed bugs.

Added background system scan. SPD will popup when found dangerous process.

New "Scan" page in options. Scan page contains "Scan on program start" and "Background system scan". Also you can select a type of process and SPD will popup when found it.

New options "Use own functions - ReadProcessMemory and WriteProcessMemory".

Fixed bugs.

New spyware detection methods. Now SPD catches a spy that replaced a system process.

Now SPD uses calculated process hash (checksum) to assign status for a process. If process hash has been changed then the process status will become ALTERED. Altered process is potentially dangerous.

Added process Hashes in database. Now SPD encodes database files.

Added columns to table of windows - Minimized, Position X, Position Y.

Added menu command "Always on Top". The command makes SPD window always on top.

New option "Replace Windows Task Manager". If you like SPD, you can replace Windows Task Manager with it.

New option "Scan on program start". When you launch SPD then it immediately scan your system.

New option "Show CPU usage for System Idle Process". This process runs while your machine is idle. The CPU usage of this process is the percentage of time spent in idle.

Now SPD shows total CPU usage in status bar.

Fixed bug with module detection of window.

Fixed memory leak.

New detailed process information dialogue. Special thanks for design to Oliver Sahr. New dialogue contains five pages with process information. General information on first page. Added buttons "Copy Process Info to ClipBoard" and "Show Details of Parent Process".

Added fields - Reason of status, Process Hash, Version, Copyright, Trademarks, Language. Added icons of selected process and parent process.

New page "Windows" contains detailed information about windows of a process (Title bar, Class, Parent, Visible, Active, Module). You can show or hide a window, activate, destroy it. And special feature - You can change window title.

New page "Threads" contains detailed information about threads of a process (Thread ID, Creation time, Start address, Priority, State, Wait reason, Context switch count, Kernel time, User time). You can stop or resume a thread, change priority, destroy it.

New page "Modules" contains detailed information about loaded modules in a process (Module name, filename, Address, Size, Entry point, Company, Description).

New page "Handles" contains detailed information about opened handles of a process (Type, Name, Address). You can view all opened files by the process.

Fixed crash error when you running SPD for the first time on Windows XP.

Improved detection of Rkdemo Rootkit and other rootkit processes.

Added french and bulgarian interface plugins.

Fixed bugs.

Improved detection of hidden processes. New detection method.

New columns - Username, Filename of parent process.

Program shows CPU usage of hidden processes.

New option "Use own function - OpenProcess". Set it to receive more information about hidden processes.

New option "Use own function - TerminateProcess". Set it to delete a protected process.

Refresh process information. You can change refresh interval in options. The program detects new and terminated processes.

New columns - CPU usage, memory usage, work time, process priority.

Constructor of processes list. You can change a position and visibility of any column.

New command "Set priority" to change priority of selected process.

Tray icon like Task manager with the graphical representation of processor usage. When you move a mouse on tray icon, you can see a list of applications that use much processor time at this moment.

New option "Run on Windows startup". The program will launch automatically when Windows restarts.

Trial period was increased to 14 days.

Fixed bugs.

Full support for Microsoft Windows Vista x86. The first time when you run SPD application in Vista you will need to input password of local administrator for authentication. Or you can do Right Click on the application and select "Run As Administrator" from the context menu. This will allow the application to register the service.

The program can work with ArtMoney together as process selector. You need ArtMoney 7.23 or higher.

New command "Save to Excel". You can save current list of processes to Microsoft Excel.

Fixed bug with reinstalling.

Now each process status has own color. The red process is dangerous, the yellow process is suspicious and etc.

You can mark a process as Safe or UnSafe. Safe list stores in file.

New methods of process detection. Total 16 methods of process detection and 2 additional methods for properties reading.

Added status "Deleted". The process is deleted, but it still presents in system records. The first reason is that dead process has unclosed handles.

Added status "Altered". A thread created by another process in the altered process. The process contains and executes alien code of another process. This process is potentially dangerous.

Full support for Windows Server 2003.

Limited support for Windows 95/98. Detection of dangerous processes will not work on Windows 95/98.

New icon with traffic lights.

Support for language plugins.

Main menu added.

12 methods of process detection.

The program examines each process and assignes status of the process (rating of danger).

New menu commands "Stop the process", "Resume the process", "Delete the process" and "Delete the process and its file".

Support for Windows 2000/XP only.