Copyright: (c) 2003 Security Task Manager    Wed Jun 22 10:45:13 2005


Please click Topics to get a list of available Help topics.


-


 Security Task Manager

Security Task Manager detects and removes spyware, trojans, keyloggers and adware.

More information         .


Please register Security Task Manager. Registration is easy. You can order online via the Internet, by email, by fax, by phone or by ordinary mail.


Thank you for choosing to evaluate Security Task Manager. You were free to use it for the 30 days-trial period. Now it's your turn. Please register Security Task Manager for only $29 today!


Security Task Manager

Security Task Manager is not free software. Your 30-day evaluation period has expired. If you wish to continue using Security Task Manager, you should register for $29 (29 Euro).

For more informationen click here


Security Task Manager  Trial version

The trial version shows you all running processes.

The full version also analyzes services and drivers on your computer.

With Security Task Manager registration you get SpyProtector for free. Spyprotector eliminates your Internet traces, warns when the Autostart key in your registry is changed, and disables keyboard and mouse surveillance on your computer.  All minor updates are free. These are just a few good reasons to buy Security Task Manager today.


Welcome

We thank you for your registration.

Security Task Manager will help you find and remove unwanted software. All nag screens and shareware limitations were turned off. SpyProtector is unlocked and can now eliminate your Internet traces, warn when your registry is changed, and disable keyboard and mouse surveillance on your computer.

Please keep your registration key. This key will work with all future minor updates of the program.

If you have any questions please contact us


Features of Security Task Manager

Security Task Manager provides advanced information about programs and processes running on the computer. For each process it shows the following information not shown in Windows Task Manger:

  file name and directory path

  security risk rating

  description

  start time

  CPU usage graph

  program icon

  contained hidden functions
(keyboard monitoring, Browser supervision, manipulation)

  process type
(visible window, systray program, DLL, IE-Plugin, service)

The Security Task Manager also recognizes virtual driver software, services, BHO or processes hidden from the Windows Task Manager.

 Related Topics


Using Security Task Manager

Security Task Manager shows all active processes on your computer. The Rating tells you all relevant security functions a process contains.

The listed processes can be sorted by the following properties. Click on View menu to chose, which properties are shown:

  Name

  Rating

  Process ID (PID)

  CPU

  Memory

  Active runtime

  File

  Type

  Start

  Title and Description

  Manufacturer and Product

Click a process to obtain more information about the process. You can:

 see properties

 end process

 place process in quarantine

 Note

•  Click [image] Windows processes button to see all internal Windows operating system processes. Windows system processes are not shown by default.

 Related Topics


A process can be a program, driver, service or PlugIn - so every executed code which is active in your computers memory.


Shows name of software or name of driver.


Shows an objective and relevant security process Rating. The longer the red Rating bar, the more dangerous functions the process contains. Highly rated programs are not always dangerous; however, they might contain some typical spyware properties.

Click a process to learn more about it. Then you can assess trustworthiness of this software.


Shows the identification number of the process. Each process has an unique ID.


Shows CPU (processor) usage. Active programs keep the processor more occupied than inactive processes.


Shows working memory usage.


Shows the active running time of the process since Windows was last started.


Shows the directory path and name of the file.


Shows the file type. The file type can be a program, a system tray icon program, a Browser Helper Object, a driver or a service.

process types distinguished by Security Task Manager         .


Shows how and when the process started.


Shows the Title and file description contained in the file. For a visible window the title corresponds to the text in the window's title bar.


Shows the name of the company and product description found in the file.


Process types

Security Task Manager distinguishes between the following types of processes. Click Type on View menu, to see or hide the type as column in the main window.

Software

  Program

  Taskbar icon

DLL files

  DLL

  ShellExecute

Internet PlugIns

 Browser Helpers Objects

Driver and Services

 device driver

 file driver

 Service (own process)

 Service (own process with desktop interaction)

 Service (shares process)

 Service (shares process with desktop interaction)

Click on an above type to learn more about this.

 Note

•  Click the [image] Windows processes button to see all internal Windows operating system processes. Windows system processes are not shown by default.

 Related Topics


Labels a program with a visible window or an unvisible program without a window.


This is a program with an icon in the system tray (left of the clock in your taskbar). Right-mouse click this icon to open a context menu and get more information.


A Dynamic Link Library (DLL) executes program code just like a program. A DLL file contains function seldom used by main program.


This file was started by a Hook using the ShellExecute command in the Windows registry. ShellExecute runs a process (almost like a DLL) when any Windows program was started. This process should be verified.


A Browser Helper Object (BHO) is a DLL that allows developers to customize and control Internet Explorer. Alexa, GetRight, Go!Zilla and other download manager uses a BHO. BHO's can monitor all your Internet activities. To deactivate BHO's, run Internet Explorer. Then click on Extras menu Internet Options. Click Advanced tab. Scroll down to the  Browsing section, and uncheck the option Enable third-party browser extensions check box.


Drivers and Services execute system functions at lower hardware level.  (available only in full version)


A service type flag that indicates a Windows NT device driver to control hardware components (e.g. graphic adapter or scanner). Some software modules (e.g. Firewall, AntiVirus) are device driver therewith users cannot close it.


A service type flag that indicates a Windows NT file system driver.


A service type flag that indicates a Win32 service which runs in its own process. A Win32 service starts automatically on Windows start, is always running and doesn't depend on users.


A service type flag that indicates a Win32 service (e.g. Firewall, AntiVirus) which runs in its own process and can interact with the desktop. A Win32 service starts automatically on Windows start, is always running and doesn't depend on users.


A service type flag that indicates a Win32 service which shares a process with other services. A Win32 service starts automatically on Windows start, is always running and doesn't depend on users.


A service type flag that indicates a Win32 service which shares a process with other services and can interact with the desktop. A Win32 service starts automatically on Windows start, is always running and doesn't depend on users.


Risk Rating of processes

Security Task Manager uses objective criteria to judge the safety risk of a process. Security Task Manager examines the process to determine if it contains critical function calls or suspicious properties. Points are allocated depending on the potential danger of these functions and properties. The sum of the points results in the Security Task Manager Risk Rating (0 to 100 points).

Security Task Manager examines the processes after the following functionalities (sorting by dangerousness):

  Able to record keyboard inputs

  Hidden stealth process

  File is hidden

  Keyboard driver, could record inputs

  Could manipulate other programs

  Able to monitor Internet browser

  Starts when starting of programs

  Listen on port <No.>

  Send to <computer name> on port <No.>

  unknown program listens or sends

  Monitor program starts

  Window not visible

  Start when Windows starts

  No detailed description available

  Unknown file in Windows folder

  No Windows system file

  No description of the program

  functions: Internet, monitor, record inputs, hide, manipulate

  functions: not determinable

  Unknown manufacturer

Trusted properties (reduces risk):

  Microsoft signed file

  Verisign signed file

  Belongs to <software product> from <manufacturer>

  Certified by <registrar> for company <manufacturer>

  Own comment

Click on an above property to learn more about this.

 Note

•  Highly rated programs are not always dangerous; they may just contain properties typical of some known spyware programs.

•  Click the [image] Windows processes button to see all internal Windows operating system processes. Windows system processes are not shown by default.

 Related Topics


This property doesn't seem to be critical. To learn more about the process please use the Internet search.


The process monitors each keyboard input. This is realize by a Hook function. Serious programs don't use this Hook function.

To prevent keyboard surveillance         .


The process hides from the Windows Task Manager by API Hooking. It's not visible in any process viewer. We recomment that you quarantine it.


The file hides from Windows Explorer.  This is not the same as selecting the ’hidden’ file attribute, which is a real setting utilized by Windows.


It is a keyboard driver and can read every keyboard input you make.


The process can manipulate any program running on Windows, or any program that is part of the Windows operating system. A Hook is set for this one.  A Hook is a Windows internal function that can forge a list of files on your hard drive, for example, by manipulating the dir command.  The program that starts the process is not visible to other programs like AntiVirus software.


The process can receive information from the Internet. Hackers use such leaks to take control over your computer. You can prevent such attacks with a good firewall.


The process connects to the named computer or IP address and can send any information to this. You can prevent such connections with a good firewall.


A port was opened to receive or send information over network or Internet. Please find out which program it is. You can prevent such connections with a good firewall.


The process monitors which programs are started or closed.


The program doesn't have any visible window and runs in the background. In the best case it is device driver software.


Because it wrote an autostart key in your registry, this program is started each time Windows starts.

Warning when Registry is changed         .


Some important standard descriptions in the file were not found.  By default, every file contains internal descriptive fields.


The file is not a part of the Windows operating system.  The file was copied into the Windows directory, but was not registered correctly. It could be a poorly programmed file, or the file might be trying to hide in the Windows folder.

Please be careful if you cannot associate the file with any installed software product or hardware driver.


The file is not a part of the Windows operating system. Please be careful if the file is in the Windows directory and it cannot be associated with any installed software product or hardware driver


Descriptions were not found in the file. By default, every file contains internal descriptive fields.


The file contains function calls with the named properties.  Since there is no evidence this function is utilized, it doesn’t have much influence on the Rating.


No dangerous function calls were found in the file, but they could be hidden.


The software manufacturer cannot be found in file description fields. By default, every file contains internal descriptive fields with the name of the software developer/company.


This file was signed by Microsoft. You can trust this file like you trust Microsoft.


This file was signed by VeriSign. You can trust this file like you trust VeriSign.


This file was signed by a registrar. You can trust this file if you this registrar and the software manufacturer.


You can trust the file. It's a part of the mentioned and installed software. When you deinstall that software, the file will be removed.


Viewing process details

Click on a process to see more information about this process. Follwing properties are shown:

  Name

  Rating

  Manufacturer

  Description

  Type

  Start

  File

  Comment

Receive further information or stop the process:

 Information from the Internet about a process

 Ending process

 Putting in quarantine

 Note

•  Click [image] Windows processes button to see all internal Windows operating system processes. Windows system processes are not shown by default.

•  Click on View menu to chose which properties are shown as column in the main window.

 Related Topics


Ending a process

1  Click on a process you want to close.

2  Click the button    [image] Remove.

3  Then select one of following options:

  End process

  Move file to quarantine

  Uninstall <Software>

 Note

•  Ending a process can cause system instability, including crashes. Software that needed Adware programs could not work. Please save opened documents.

•  You can create a restore point, to can restore your Windows system at any time.

•  You need administrator rights for this dialog. To start Security Task Manager with administrator rights, please right-mouse click the Security Task Manager shortcut. Then click Run as...

 Related Topics


The process will be removed from memory. If the process wrote an autostart entry in the Registry (Windows configuration data base), it will load into memory the next time Windows starts.


The process will be removed from the memory too. In addition, Security Task Manager put the corresponding file into quarantine folder and deletes corresponding Autostart entries in Registry. File and registry entries are saved, so you can restore the process at any time.


The software which belongs to the process will be completely removed from your computer. The uninstall program will be startet.


Using quarantine folder

The quarantine folder works like the Windows Recycle Bin (trash). When you put a file into quarantine folder , the file is renamed and moved to an isolated folder. Corresponding Autostart keys in the Windows registry are deleted so the process cannot be started again. Restoring the whole process is possible at any time:

Restoring processes

1  Click   [image] quarantine button on tool bar.

2  In the quarantine folder click on process you want to restore.

3  Click Restore button.

 Note

•  You can create a Windows restore point in the [image] Remove dialog, to restore your Windows system at any time.

 Related Topics


Checking Hosts file changes

The Windows hosts file is located in c:\Windows\system32\drivers\etc folder by default. This text file contains the mappings of IP addresses to Internet domain names (e.g. www.file.net). If the hosts file was changed without your knowledge, there could be a malware which redirects websites (e.g. from banks, antivirus companies) to fake web pages.

You can edit the hosts file with Windows notepad. To deactivate a redirection, simply delete the line.

 Note

•  The hosts file replaces DNS (Domain Name Service). The lmhosts file in the same folder replaces WINS, which IP addresses to computers in your LAN network.

 Related Topics


Learning more about a process

1  Click on the process you want to examine.

2  Click   [image] Google button on tool bar.

An information web page is displayed on www.neuber.com/taskmanager where you can submit your opinion about this software/driver software, or read other user comments. You can also search for further information about this process at Google.com.

 Note

•  Your Internet browser transmits information (e.g. operating system, language setting). Neither the Security Task Manager  program nor any of its components connect to the Internet directly.

•  Google.com is one of the most commonly used search engines, and will provide you with relevant results.

 Related Topics


Exporting process list

1  On File menu click Export to.

2  Chose a file type:

  Text file (*.txt)

  Website (*.html)

 Note

•  Click [image] Windows processes button to see also all Windows internal processes. Then you be able to save Windows processes too. Windows system processes are not shown by default.

•  Please save the process list from time to time. A saved process list can serve as a point of comparison to help you find new processes in the future.

 Related Topics


Printing process list

1  On File menu click Print.

2  Chose a printer and make any necessary settings (e.g. duplex print).

 Note

•  Click [image] Windows processes button to see all Windows internal processes. Then you can print Windows processes too. Windows system processes are not shown by default.

 Related Topics


Writing a comment

You can record a remark about each process, which will be visible in the process properties. You can vote the process to change the Security Task Manager Rating.

To write a comment

1  Right mouse click a process you want.

2  Click Comment... on the appearing context menu.

3  Enter you comment and your opinion about the process.

 Related Topics


When you register you get SpyProtector too
Protect your computer with SpyProtector

Buy Security Task Manager today and get SpyProtector for free. SpyProtector contains following tools to protect your computer from keylogger, spyware and trojans:
 Deletes traces of your Internet and computer activity

 Prevents keyboard input monitoring

 Prevents mouse activity monitoring

 Prevents software usage monitoring

 Warns you when your registry is changed

 Related Topics


SpyProtector can neutralize mouse monitorings programs for the current Windows session. The surveillance of your mouse movements and clicks by keyloggers is blocked.


SpyProtector can neutralize programs which log starting and ending of any programs for the current Windows session.


Protecting your computer with SpyProtector

To run SpyProtector, click the icon in the system tray of your task bar.

SpyProtector contains following tools to protect your computer from keylogger, spyware and trojans:

 Delete history

 Block keyboard monitoring

 Block other monitoring

 Warn when your registry is changed

 Related Topics


Check this option to block the redirection of all keyboard inputs to a keylogger for the current Windows session.  Keyboard redirection is realized by programing a Hook function; even keyboard utilities like macro and autotext programs don't use these malicious Hook functions.


Check these options to block programs which log data for the current Windows session:

Keyboard inputs (indirect)

This prevents monitoring of internal Windows messages (e.g. keyboard inputs) by other programs.

Mouse activities

This prevents monitoring of mouse movements and mouse clicks

Macro

This prevents recording of user activities. This methode, often used by macro programs, is not typically used by keyloggers.

Starting and ending of programs

Program starts and stops are logged. This function is frequently used by tutorial programs (computer based training) to aid user interaction with the software.

Attention: Some safe and valid programs (e.g. some Macro programs) do use these Hook functions.  If one of your programs stops working after selecting an option above, please deselect the option or restart your computer.


Check this option to eliminate traces of Internet activities (cookies, cache, history, typed URLs) in Internet Explorer. You can also delete the recently used file list of programs (Word, ACDSee, PDF, WinZip, Mediaplayer, etc) and the recently used program list on the Windows Start menu.


Check this option to see a warning message when any program tries to create an autostart key in the Windows registry.  Many dangerous programs use an autostart key in the Registry to activate themselves.


Changing the language

Security Task Manager recognizes the used language (English, Deutsch, Espanol, ...) automatically. To change the language do the following:

1.  On View menu click Language

2.  Then click the language you want.

 Note

•  The software can easily be translated to any language. Simply translate the lgs_english.txt text file in the program's folder, and send it to info@neuber.com. You will receive a free registration for your translation.

•  Um die deutsch Sprache einzustellen, klicken Sie hier [image].

 Related Topics


Adding a language file

You can download additional language files at [image] www.neuber.com/taskmanager.

1  Go to www.neuber.com/taskmanager.

2  Here you can see all available languages.

3  Copy the lastest version in the Security Task Manager directory. for example C:\Program Files\Security Task Manager

4  Change the language and then run Security Task Manager.

 Note

•  The German and English language files lgs_deutsch.txt and lgs_english.txt are contained by default.

 Related Topics


Contacting the Security Task Manager Team

Technical Contact:

address:	Alexander and Matthias Neuber GbR

PF 11 05 25

D-06019 Halle

Germany

fax:	(+49) 0700-11 777 000

Internet:

WWW:	www.neuber.com/taskmanager

email:	info@neuber.com

The registration is executed by the international registration service ShareIt (Eden/U.S.A, Köln/Germany, London/UK, Roissy/France, Upplands Väsby/Sweden).

Eine deutsche Version erhalten Sie unter http://www.neuber.com/taskmanager

 Related Topics


Remarks about the shareware version

Security Task Manager is distributed as shareware. Shareware is a distribution method based on honor, and is not a type of software. You are free to use it for a trial period of up to 30 days. If you find this program useful and would like to continue using Security Task Manager, then you are required to register for $29 (29.EUR). You will receive a registration code that you can use to unlock the shareware. The registration code will turn off all nag screens and shareware limitations, and work with future minor updates.

As a registered user, you will get:

• legal license for the software

• your personal key to unlock trial version

• free minor updates

• free software SpyProtector

Spyprotector eliminates your Internet traces, warns when Autostart key in registry is changed and disables keyboard and mouse surveillance

• free technical support (via email or mail)

On Help menu click Info... to see whether your version is registered.

 Related Topics


How to register Security Task Manager
Get Security Task Manager now!

Order your own registration code for $29 (29 EUR) from our distributor ShareIt today! ShareIt accepts credit cards, bank/wire transfer, checks or cash.

You can order by

Internet:	Secure Order Form
mail/fax:	Order Form
phone:	+1-800-903-4152   (orders only) +1-724-850-8186   (ShareIt customer support) +49-221-3108820  (ShareIt Germany) +33-1-491926-54   (ShareIt France) program ID: 174510

 Notes

•  If you pay by credit card, you'll receive the registration code immediately. The code unlocks the shareware.

•  If you have questions about the program please ask developer.

•  If you have questions about ordering please ask: ShareIt! Inc., 9625 West 76th Street, Suite 150, Eden Prairie, MN 55344, U.S.A., phone: 724-850-8186, support@shareit.com (ShareIt has further offices in U.S.A, Germany, UK, France and Sweden)

 Related Topics


Compre Security Task Manager (Portugês)
Compre Security Task Manager

Peça o seu código de registro por euro 29 ($29)!

Pode pedir pela

Internet:	Formulário de segurança
mail/faxe:	Formulário de compra
telefone:	+49-221-3108820 (compras somente) program ID: 174510

 Notas

•  Depois de comprar, voce receberá o código de registro por email ou faxe.

•  O código de registro desbloqueia a versão de avaliação na versão integral desbloqueada.

 Related Topics


Acquista Security Task Manager (Italiano)
Acquista Security Task Manager

Ordina il tuo codice di registrazione al costo di 29 EUR!

Puoi ordinarlo tramite

Internet:	Procedura d'ordine sicura
mail/fax:	Modulo d'ordine
telefono:	+49-221-3108820 (solo ordini) ID del programma: 174510

 Nota

•  Dopo l'acquisto riceverai un codice di registrazione personale via email o fax.

•  Il codice di registrazione sblocca il programma in versione di prova e lo rende versione registrata.

 Related Topics


Compra Security Task Manager (Español)
Compra Security Task Manager!

Ordenar hoy su código de registro para 29 EUR ($29)!

Usted puede ordenar por

Internet:	presione la licencia deseada
mail/fax:	Formato de Orden
telefónica:	+49-221-3108820 (sólo ordenes) número: 174510

 Notas

•  Después de registrarse, Ud. Recibirá por email, fax o correo postal su código de liberación en un lapso de 24 horas. Si Ud. Se registra en línea y paga con tarjeta de crédito, recibirá el registro inmediatamente.

•  El código de registro será válido también para todas futuras actualizaciones.

 Related Topics


Achetez Security Task Manager (Français)
Achetez Security Task Manager

Commander votre code d'installation encore aujourd'hui pour 29 EUR!

Commander simplement par

Internet:	Commande en ligne
courrier/fax:	Bon de commande
téléphone:	+33-1-491926-54  (ShareIt France) +1-800-903-4152  (orders only) +1-724-850-8186  (ShareIt customer support) +49-221-3108820 (ShareIt Allemagne)

N° commande: 174510

Vous recevrez votre code d'installation immédiatement (en cas de commande en ligne avec une carte de crédit) ou dans les 24 heures après réception de votre paiement. Vous transformerez votre particiel en produit complet avec votre code d'installation. Le code d'installation est valable pour toutes les versions de Security Task Manager.

      Notre vendeur en France:

element 5 AG / ShareIt! Le Dôme, BP 10910 1, rue de la Hayey 95731 Roissy CDG Cedex France	Téléphone : +33 (0)1 49 19 26 54 Télécopie : +33 (0)1 49 19 21 00 ventes@element5-france.com
 voir aussi


Switching the shareware to a registered version

1  On REGISTER menu click Unlock the shareware version.

2  Enter the Name and Code in the registration dialog exactly as shown in the information sent to you.

3  Click  Unlock.

 Notes

•  If you have questions please ask us.

•  You can order your registration code for $29 (29 Euro).

 Related Topics


Uninstalling Security Task Manager

1  Click Start-Settings-Control panel.

2  Click  Software.

3  Click the Remove button to delete Security Task Manager from your Computer.

 Note

•  You can also run uninstal.exe in the Security Task Manager directory


Enter the code in the registration dialog exactly as shown in the information sent to you. Then click Unlock to switch the shareware version to a registered version.

For more information click here [image].