Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Virus?  (Read 17495 times)

0 Members and 1 Guest are viewing this topic.

tgp1994



    Beginner

  • Think happy thoughts and have a nice day.
  • Thanked: 2
    • Yes
  • Experience: Experienced
  • OS: Other
Re: Virus?
« Reply #45 on: February 16, 2009, 09:53:56 AM »
No, but it could probably fix a few keys that malware messes with.

BC_Programmer


    Mastermind
  • Typing is no substitute for thinking.
  • Thanked: 1140
    • Yes
    • Yes
    • BC-Programming.com
  • Certifications: List
  • Computer: Specs
  • Experience: Beginner
  • OS: Windows 11
Re: Virus?
« Reply #46 on: February 16, 2009, 09:55:07 AM »
No, but it could probably fix a few keys that malware messes with.

 ::)
I was trying to dereference Null Pointers before it was cool.

kpac

  • Web moderator


  • Hacker

  • kpac®
  • Thanked: 184
    • Yes
    • Yes
    • Yes
  • Certifications: List
  • Computer: Specs
  • Experience: Expert
  • OS: Windows 7
Re: Virus?
« Reply #47 on: February 16, 2009, 10:00:52 AM »
No, but it could probably fix a few keys that malware messes with.

And wipe out the OS completely? Are you joking!

BC_Programmer


    Mastermind
  • Typing is no substitute for thinking.
  • Thanked: 1140
    • Yes
    • Yes
    • BC-Programming.com
  • Certifications: List
  • Computer: Specs
  • Experience: Beginner
  • OS: Windows 11
Re: Virus?
« Reply #48 on: February 16, 2009, 10:05:43 AM »
regardless as I said in my previous post (which was oddly ignored, sometimes I wonder why I bother...) CCleaner would not have done anything to remove the MBR, and it also does nothing to remove either infected files or registry entries. the keys aren't "broken" to be fixed.

CCleaner scans HKEY_CLASSES_ROOT, with very minimal accesses to the other keys. It mostly looks for unused file extensions and invalid CLSID InProcServer32 references. None of the keys it accesses can harbor malware, and if it does CCleaner doesn't do anything since it still contains valid data.
I was trying to dereference Null Pointers before it was cool.

kpac

  • Web moderator


  • Hacker

  • kpac®
  • Thanked: 184
    • Yes
    • Yes
    • Yes
  • Certifications: List
  • Computer: Specs
  • Experience: Expert
  • OS: Windows 7
Re: Virus?
« Reply #49 on: February 16, 2009, 10:06:49 AM »
Also, we know we should never use registry cleaners, don't we?

BC_Programmer


    Mastermind
  • Typing is no substitute for thinking.
  • Thanked: 1140
    • Yes
    • Yes
    • BC-Programming.com
  • Certifications: List
  • Computer: Specs
  • Experience: Beginner
  • OS: Windows 11
Re: Virus?
« Reply #50 on: February 16, 2009, 10:11:45 AM »
CCLeaner is different in that regard. missing InProcServer32 entries are essentially useless cruft that can inhibit the ability to register the same ProgIDs later on- useful for more then just gained space. I'm too lazy to run it since it keeps deleting my Programs Registry key, and then it forgets all about it's plugins and defaults, which confuses the heck out of me when I'm debugging it.
I was trying to dereference Null Pointers before it was cool.

evilfantasy

  • Malware Removal Specialist
  • Moderator


  • Genius
  • Calm like a bomb
  • Thanked: 493
  • Experience: Experienced
  • OS: Windows 11
Re: Virus?
« Reply #51 on: February 16, 2009, 10:55:44 AM »
Quote
And then restart your computer? I feel plagiarized

There is an easy way to avoid that. Stop hijacking a thread that's 3 pages deep with a one line "oh I know what to do now" statement.

You want to claim glory for suggesting a restart after the problem has been found, after about 12 hours of troubleshooting by others, and fixed? Pretty sad...

tgp1994



    Beginner

  • Think happy thoughts and have a nice day.
  • Thanked: 2
    • Yes
  • Experience: Experienced
  • OS: Other
Re: Virus?
« Reply #52 on: February 16, 2009, 02:29:41 PM »
Oh, sorry for offering help...

BC_Programmer, does CCleaner really have plugins, or are we talking about something different? I guess I would suggest to check for an updated CCleaner, and I think there's an option to save it's settings to an INF file.

BC_Programmer


    Mastermind
  • Typing is no substitute for thinking.
  • Thanked: 1140
    • Yes
    • Yes
    • BC-Programming.com
  • Certifications: List
  • Computer: Specs
  • Experience: Beginner
  • OS: Windows 11
Re: Virus?
« Reply #53 on: February 16, 2009, 03:01:37 PM »
CCleaner does not have plugins. And I have absolutely no clue where that query came from. Additionally I don't see how checking for a new version or it's ability to export INF files has any relevance in this context.
I was trying to dereference Null Pointers before it was cool.

tgp1994



    Beginner

  • Think happy thoughts and have a nice day.
  • Thanked: 2
    • Yes
  • Experience: Experienced
  • OS: Other
Re: Virus?
« Reply #54 on: February 16, 2009, 03:03:02 PM »
Umm, it was when you said it confused the heck out of you. Updating usually helps.

evilfantasy

  • Malware Removal Specialist
  • Moderator


  • Genius
  • Calm like a bomb
  • Thanked: 493
  • Experience: Experienced
  • OS: Windows 11
Re: Virus?
« Reply #55 on: February 16, 2009, 03:05:30 PM »

BC_Programmer


    Mastermind
  • Typing is no substitute for thinking.
  • Thanked: 1140
    • Yes
    • Yes
    • BC-Programming.com
  • Certifications: List
  • Computer: Specs
  • Experience: Beginner
  • OS: Windows 11
Re: Virus?
« Reply #56 on: February 16, 2009, 03:06:22 PM »
CCLeaner is different in that regard. missing InProcServer32 entries are essentially useless cruft that can inhibit the ability to register the same ProgIDs later on- useful for more then just gained space. I'm too lazy to run it since it keeps deleting my Programs Registry key, and then it forgets all about it's plugins and defaults, which confuses the heck out of me when I'm debugging it(my program).

CCleaner erases the registry entries that my program creates to keep track of it's Parser Plugins. CCleaner decides they aren't being used for some reason and deletes them. This confuses me when I'm debugging the Program (BASeParser XP), since code follows unexpected paths (it works, but I'll sometimes think that my initialization code is broken, when in fact there are simply no plugins to initialize.)
I was trying to dereference Null Pointers before it was cool.

tgp1994



    Beginner

  • Think happy thoughts and have a nice day.
  • Thanked: 2
    • Yes
  • Experience: Experienced
  • OS: Other
Re: Virus?
« Reply #57 on: February 16, 2009, 05:17:27 PM »
Oh, I'm pretty sure that you can have CCleaner ignore those keys in specific. I haven't had to avoid certain keys, but I guess it can be a difficult process going through 100+ keys, while making sure to avoid one or two.