I only use Winpooch for virus-scanning; I use another app for spyware protection. So, I deleted all filters from my ruleset except the File:Execute virus scan. I wish it were easy to set such relaxed alerting by default.
Please add a "profiles" feature to Winpooch, as the #1378134 feature request asks. Then, once you add that feature, please ship 3 different profiles with Winpooch:
* disable_all: Disable all checks
* viruses_only: Check for viruses only
* all_checks: Check for viruses, new startup items, and other suspicious events
Make the viruses_only profile the default; the all_checks profile would have too many false positives and discourage new users. It would be better for them to discover it themselves and decide themselves if they want it.
Log in to post a comment.