Regdefend and long registry entries

Discussion in 'Ghost Security Suite (GSS)' started by Hal Jordan, Aug 26, 2005.

Thread Status:
Not open for further replies.
  1. Hal Jordan

    Hal Jordan Guest

  2. Jason_R0

    Jason_R0 Developer

    Joined:
    Feb 16, 2005
    Posts:
    1,038
    Location:
    Australia
    RegDefend alerts on any size value names being created, so you will see the entry being created. What you won't see is the "full value name" as there is a limit to how much RegDefend stores of it, but that doesn't affect whether or not you can block or allow the entry into the registry.
     
  3. Jason_R0

    Jason_R0 Developer

    Joined:
    Feb 16, 2005
    Posts:
    1,038
    Location:
    Australia
    I have created a test program which creates a long value name in an autostart area of the registry. You can download it from here :-

    http://www.ghostsecurity.com/downloads/regvaluetest.exe

    I have tested it with RegDefend , and it worked ok, but be warned there may be some kernel mode software out there which cannot handle long values in the registry and might blue screen your computer.
     
  4. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Just ran it here Jason several times, PG alerted for the .exe and RD alerted twice on adding the value and delete. Nice work:)
     
  5. beetlejuice69

    beetlejuice69 Registered Member

    Joined:
    Mar 16, 2005
    Posts:
    780
    Process Guard asked if I wanted it to run then ZoneAlarm done the same. After once I said yes, RegDefend took over. Good work Jason.
     
Thread Status:
Not open for further replies.