Wilders Security Forums  

Go Back   Wilders Security Forums > Official BrightFort Forum > BrightFort Retired Apps > FileChecker & ID-Blaster Forum
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old February 13th, 2005, 04:04 PM
herbalist
 
Posts: n/a
Default watch list

Where does FileChecker 1.7 store the watch list and under what names? I'd like to make that part of my system backups.
Rick
  #2  
Old February 13th, 2005, 04:22 PM
Bubba's Avatar
Bubba Bubba is offline
Global Moderator
 
Join Date: Apr 2002
Posts: 11,279
Default Re: watch list

Quote:
Originally Posted by herbalist
Where does FileChecker 1.7 store the watch list and under what names? I'd like to make that part of my system backups.
Rick
Hey Rick,

FileChecker stores the watch list in the below registry key in bold....but it does not store them as names. As part of the {09201-21029B-293849302-CDE2929FF} reg key....they will be String values starting with 0(zero) for the first item on the watch list....then string value of 1 for the next item....and so on.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Settings\{09201-21029B-293849302-CDE2929FF}
Attached Images
 
  #3  
Old February 13th, 2005, 09:49 PM
herbalist
 
Posts: n/a
Default Re: watch list

Thanks. Is the checksum data stored elsewhere or is it all in that key? Can I back up the Filechecker watch list by exporting that key, even if it's in encrypted format?
Rick
  #4  
Old February 14th, 2005, 09:07 AM
Bubba's Avatar
Bubba Bubba is offline
Global Moderator
 
Join Date: Apr 2002
Posts: 11,279
Default Re: watch list

Quote:
Originally Posted by herbalist
Is the checksum data stored elsewhere or is it all in that key?
No....the checksum data is not stored per say. With checksum checking on....for every file on your watch list where the checkbox is checked....checksum computation will be performed on that file. Once you Start Checking!....the files checksum data is loaded into the memory buffer ? and on every cycle(as set by the user via Computation Interval Time setting)....the checked files are then checked for changes in respects to the computation data in memory.
Quote:
Originally Posted by herbalist
Can I back up the Filechecker watch list by exporting that key, even if it's in encrypted format?
Yes....the only encryted format entries you will see will be the String values 0(zero) thru whatever number of files you have on your watch list. The below pic represents the changes in the same string value entries....in comparison to my above pic.
Attached Images
 

Last edited by Bubba : February 14th, 2005 at 09:17 AM.
  #5  
Old February 14th, 2005, 12:28 PM
herbalist
 
Posts: n/a
Default Re: watch list

Thanks. That's what I needed. I have 82 files in the watch list and would prefer not to have to re-enter them all manually. I was concerned that it would not recognize the data if encrypted in the event of a full re-install. Had that problems with other programs that encrypt data, Mozilla for one.
Rick
  #6  
Old February 14th, 2005, 01:37 PM
Bubba's Avatar
Bubba Bubba is offline
Global Moderator
 
Join Date: Apr 2002
Posts: 11,279
Default Re: watch list

Quote:
Originally Posted by herbalist
I was concerned that it would not recognize the data if encrypted in the event of a full re-install.
Rick....I would also have that concern....so before I stick my foot in my mouth and imphatically answer that you should have no problems....I am going to attempt to run this by the programmer Javacool. All of my answers have been derived by trial and error. I am not associated with the software other than just being a user of the software like yourself and attempt to share my personal knowledge\experiences. I am also going to find out if it's possible to un-encrypt the watch list entries....so when the key is exported....it should then be a lesser chance of screw-up on a full re-install.

Regards,
Bubba
  #7  
Old February 15th, 2005, 02:07 AM
herbalist
 
Posts: n/a
Default Re: watch list

Thanks. I appreciate that.
  #8  
Old February 15th, 2005, 02:11 AM
javacool javacool is offline
BrightFort Moderator
 
Join Date: Feb 2002
Posts: 3,879
Default Re: watch list

Hi,

With the current version of FileChecker, you should be able to re-import those entries after a reinstall.

I haven't verified it, but it should work.

So while there isn't a built-in ability to decrypt and then back-up the database, you should be pretty set with a manual restore of those registry entries (although a warning: if any of the paths of those files have changed after the reinstall, it could potentially cause issues or tons of alerts).

Best regards,

-Javacool
__________________

*Official BrightFort Website*
*SpywareBlaster*

*Please note: I am not responsible if any advice herein causes any trouble whatsoever *
  #9  
Old February 15th, 2005, 02:46 AM
herbalist
 
Posts: n/a
Default Re: watch list

Thanks. I'll add that to my backup set. I appreciate you taking the time.
Rick
 

Wilders Security Forums > Official BrightFort Forum > BrightFort Retired Apps > FileChecker & ID-Blaster Forum « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 01:35 AM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums