You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Changes made at the same time. New check: a 14-day timeline of services and drivers installed, scheduled tasks created, startup items added and new executables/scripts in Temp and hideout roots. A driver/service/task/startup change arriving within ten minutes of a new unsigned file is flagged (Medium; High when the new service or task runs that file), with the whole burst as evidence and steps to check it.
Every kernel driver, running or not. New check in every scan (not only Deep): drivers registered from hideout folders or without a valid signature (High; Critical while running), signed drivers registered from unusual folders such as a game folder on another drive (Low, with how to check the signer and remove it), and an inventory of drivers under Program Files.
Free plan stays on the PC. Free users upload nothing (the app skips it; the service refuses it), so they cost nothing to run. One-click "Apply safe fix" is part of Watch; everyone keeps the step-by-step instructions and Undo. Reports stored during a trial or subscription are kept 30 days after it ends, then deleted.
Watch adds a weekly summary email (Mondays; opt-out in the dashboard) and plans read "(lifetime)" for very long admin grants.
Self-test button: runs 29 built-in samples (real miners, pools, attacker tricks, unsafe drivers, and clean controls) through the detection rules.
Send error details button when a check fails: sends only check name, error message (user/computer names and e-mail addresses removed) and versions. They appear in the dashboard's Admin panel.
A failed check now says to run the scan again and send error details, instead of only "run as administrator". The RED verdict gives direct advice instead of pointing at README.md.
Service: report HTML stored gzip-compressed; /api/diagnostics; weekly summaries; automatic purge of reports for accounts without cloud history; website: sample report page, updated plans, privacy policy and FAQ; the site's inline script moved to site.js so the strict security policy no longer blocks it.
