Author Topic: Is that so?  (Read 3908 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33895
  • malware fighter
Is that so?
« on: December 14, 2005, 01:34:43 PM »
Hello forum members,

Read on this antispyware site: http://detect-spyware.atspace.com/spyware-secrets.html that spyware leaves left-overs in the registry, and that it is good policy to use a RegCleaner program after getting rid of spyware. Is that a prooven fact or is it snake oil? Who has an opinion about this?

I personally think it is better to read the technical aspects of an infection together with what it does to the registry before you manually fiddle with it.
And you should have a backup of the registry ready at hand always.

greets,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline szc

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 6927
Re: Is that so?
« Reply #1 on: December 14, 2005, 01:41:13 PM »
That's what Bazooka Scanner always tries to teach you. You can't clean anything with Bazooka Scanner, but after scanning, and of course if it finds something malicious, it gives you a link for their official web site, section spyware/adware/hijackers removal and procedure. Best of all, it gives you as much detailed information as possible on how to boot in safe mode, which folders and files to remove (exactly the names and paths), and best of all, it lists all possible locations inside your registry. It tells you what is safe to remove, and how to find it... unbelievable that this program never got as popular as some others. Well, it's kind of understandable... people want everything to be done for them, so this program asking you to participate is kind of too much of a hassle for them I guess... By the way, during my work on client's computers, many, many times Bazooka found some browser hijacker that Spybot and Ad-aware never ever caught nor reported, besides some spyware and adware of course...

Their online encyclopedia:
http://www.kephyr.com/spywarescanner/library/index.phtml?source=appvisit

And just take a look how it deals with those things I mentioned up there:
http://www.kephyr.com/spywarescanner/library/exploit-beehappyy.biz/index.phtml

This is main page btw:
http://www.kephyr.com

And this is Spywarescanner's main page:
http://www.kephyr.com/spywarescanner/index.html
« Last Edit: December 14, 2005, 01:47:38 PM by S.Z.Craftec »
MB: GIGABYTE GA-Z77X-UD3H Intel 7 Series  - LGA1155, CPU: Intel Core i5-3570K - Quad Core, 3.40GHz (3.80GHz Max Turbo), CPU COOLER: Cooler Master Hyper 212 EVO Direct Heat Pipe R2, RAM: 16 GB Kingston HyperX Blu DDR3, VIDEO CARD: Galaxy GeForce GTX 560 Ti - 1GB, GDDR5, POWER SUPPLY: Corsair Enthusiast Series TX750 V2 - 750 Watts, HD: Seagate Barracuda - 2TB, 7200RPM, 64MB, SATA 6Gb/s

..::ReVaN::..

  • Guest
Re: Is that so?
« Reply #2 on: December 14, 2005, 01:51:27 PM »
I always clean my registry even when it's malware clean Polonus(to get rid of those unnecesary leftover keys left by programs i uninstalled) .I know alot of experts say registry cleaning causes nothing but trouble but that sure isn't the case with me(never had problems cause of that) and i have been cleaning the registry since win98 days.But if i get a spyware on my pc i like to do a little research about it to see what registry keys it actually leaves behind and delete them manually trough my registry cleaning program(no auto cleaning stuff)...


Cheers

Mikey

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33895
  • malware fighter
Re: Is that so?
« Reply #3 on: December 14, 2005, 01:54:41 PM »
Hi Sasza,

Thanx for the feed-back and I am going into my Bazooka with this in mind.
And ReVaN thanxs for underlining the facts I have found.

Have a nice day,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48542
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Is that so?
« Reply #4 on: December 14, 2005, 04:02:33 PM »
Your Uninstaller 2006! does a nice job of cleaning up the reg when uninstalling a program.
Unfortunately, it's not a free program.  :'(
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89015
  • No support PMs thanks
Re: Is that so?
« Reply #5 on: December 14, 2005, 04:30:41 PM »
Regardless of what the program is if I uninstall it (for good) I follow that up with a registry clean to ensure all traces are gone.

I have just done this with firefox 1.5 as I was having issues that I believe were related to NoScript stopping extension updates and/or installation. Nothing I did could resolve the problem and a simple uninstall doesn't get rid of everything, you have to delete the program folder and profile and any registry entries to be thoroughly clear.

Once reinstalled things are working as they should be with the exception I haven't installed the NoScript extension.

So if this applies to ordinary software which really isn't trying to hide, what would spyware leave behind.

A registry cleaner for the most part is fine depending on the one you choose some are very cautious some are very aggressive in what they flag and if you know little about the registry, then you could have problems especially if that cleaner doesn't have a backup/recovery function.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security