Which registry keys, folders etc. to exclude monitoring in uninstall programs?

Discussion in 'ESET NOD32 Antivirus' started by Spasserfan, Apr 6, 2008.

Thread Status:
Not open for further replies.
  1. Spasserfan

    Spasserfan Registered Member

    Joined:
    Jan 7, 2008
    Posts:
    9
    Hi guys,

    3rd party uninstallers like total uninstall or advanced uninstaller pro monitors changes in registry and on disk. To prevent any errors it would be nice to exclude registry keys files/folders used by NOD32 from monitoring or at least those that might be modified during normal usage/installation of new programs.

    The easy way would be just disabling NOD32 during installation, but this will also disables protection, and since there are a few installers that needs restart NOD32 need to be disabled during reboot too. I would prefer the protection by NOD32 during install and without causing any errors in a later uninstall, therefore I would like to exclude those in the uninstall program.
     
  2. Eryan

    Eryan Eset Staff Account

    Joined:
    Jan 17, 2008
    Posts:
    181
    Hi, here are the registry keys used by the software:

    HKEY_LOCAL_MACHINE\SOFTWARE\Eset
    HKEY_CURRENT_USER\SOFTWARE\Eset
    HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Eset Smart Security - Context Menu Shell Extension
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6953CFE0-74E6-4DE2-869E-D9ADFB2DC55F}
    HKEY_CLASSES_ROOT\CLSID\{B089FE88-FB52-11D3-BDF1-0050DA34150D}
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\eamon
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\easdrv
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\epfwtdir
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ekrn
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EhttpSrv
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

    Is that what you're looking for?
     
  3. prius04

    prius04 Registered Member

    Joined:
    Apr 14, 2007
    Posts:
    1,238
    Location:
    USA
    Excellent information! Any chance of making this a sticky, incorporating it in BlackSpear's tutorial or some other (sticky) thread?
     
  4. Spasserfan

    Spasserfan Registered Member

    Joined:
    Jan 7, 2008
    Posts:
    9
    I was indeed. Thank you very much!

    Are these the folders used by NOD32? (where C:\ is the partition where windows and NOD32 are installed)
    Code:
    C:\Documents and Settings\All Users\Application Data\ESET
    
    C:\Documents and Settings\%user name%\Lokale indstillinger\Application Data\ESET
    
    C:\Programs\ESET
     
Thread Status:
Not open for further replies.