NOD32 and RegCleaner

[Antarctica]

Hello,
Why is that when I analyze my Registry with RegCleaner he show me the Quarantine Directory Key as invalid.
HKEY_LOCAL_MACHINE\Software\Eset\NOD\CurrentVersion\Common\Quarantine Directory

Yet in the NOD32 System Setup, in the advance tab, this is the default path:
C:\Program Files\Eset\infected

[martindijk]

Hi Antarctica,

I am gonna scan with regclean as well, to see what it will pick out of the registry, iam running ME.

Get back to you asap.

rgds,
Martin

[martindijk]

Hi again,

Did a scan with Regclean, and the registry string as you mentioned was not picked out as beeing invalid.

Did you let NOD install in the original directory, as in c:\program files???

Are you using the programm Regcleaner or Regclean from Microsoft??

rgds,
Martin

[Antarctica]

Hi MartinvDijk,

Thank you for your help. I am using "RegCleaner" and I let NOD install in the original directory in c:\Program Files.
Se I took a chance and I tried to delete that key and reboot.But on the next scan with RegCleaner It appear again as a invalid key!
Strange...

[martindijk]

Hi Antarctica,

Is there a way to exclude this string in regcleaner??

If not i would suggest switching to Microsoft's Regclean, a descent free cleaner which runs smoothly and will not capture the NOD string in your registry.

rgds,
Martin.

[Antarctica]

Hi MartinvDijk,

No there is no exclude function with RegCleaner. I guess I will just leave that string there, I don't think it will do any arm.
Thanks for your help anyway. :) :)

[martindijk]

Hi,

The string taken out by the registry cleaner should be put back, is there a way todo that with that program???

Cause this a part of NOD's input, it should be left in place, otherwise you should change Registrycleaner for a different one which does not extract this string from you registry.

rgds,
Martin

[Antarctica]

Hi MartinvDjik,

The string is coming back by itself on the next reboot, so the problem is probably with RegCleaner. :)

[martindijk]

Hi Antarctica,

Hmmm, than NOD is replacing this file with a new one at startup, so no harm is done when your cleaner is talking out the string when scanning.

Well problem solved, which is no actual problem when NOD is replacing the file, it must be Regcleaner which probalbly sees the string as absolete.

rgds,
Martin

[anders]

The directory doesn't exist as default (if it isn't needed). Simply create the directory in the NOD32 folder, and RegCleaner shouldn't warn about it anymore ;)

If you put an object in the quarantine, the directory should be created if it doesn't exist, and the warning disappear.. so.. you can just manually create the directory. :)

Ciao,
Anders

[Antarctica]

Thanks anders, it is appreciated. :)