TeaTimer apparently does not currently monitor the Registry keys that launch various Windows Services. Since such services supply a neat but nasty way to compromise a system, it would be desirable for TeaTimer to watch these. They should be announced by an appropriately worded TeaTimer popup. The action of such a monitor is easily tested by launching Rootkit Revealer from Sysinternals. This launches a randomly named Windows service whenever it is launched.