Which registry keys, folders etc. to exclude monitoring in uninstall programs?

Discussion in 'ESET NOD32 Antivirus' started by Spasserfan, Apr 6, 2008.

Thread Status:
Not open for further replies.
  1. Spasserfan

    Spasserfan Registered Member

    Joined:
    Jan 7, 2008
    Posts:
    9
    Hi guys,

    3rd party uninstallers like total uninstall or advanced uninstaller pro monitors changes in registry and on disk. To prevent any errors it would be nice to exclude registry keys files/folders used by NOD32 from monitoring or at least those that might be modified during normal usage/installation of new programs.

    The easy way would be just disabling NOD32 during installation, but this will also disables protection, and since there are a few installers that needs restart NOD32 need to be disabled during reboot too. I would prefer the protection by NOD32 during install and without causing any errors in a later uninstall, therefore I would like to exclude those in the uninstall program.
     
  2. Eryan

    Eryan Eset Staff Account

    Joined:
    Jan 17, 2008
    Posts:
    181
    Hi, here are the registry keys used by the software:

    HKEY_LOCAL_MACHINE\SOFTWARE\Eset
    HKEY_CURRENT_USER\SOFTWARE\Eset
    HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Eset Smart Security - Context Menu Shell Extension
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6953CFE0-74E6-4DE2-869E-D9ADFB2DC55F}
    HKEY_CLASSES_ROOT\CLSID\{B089FE88-FB52-11D3-BDF1-0050DA34150D}
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\eamon
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\easdrv
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\epfwtdir
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ekrn
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EhttpSrv
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

    Is that what you're looking for?
     
  3. prius04

    prius04 Registered Member

    Joined:
    Apr 14, 2007
    Posts:
    1,248
    Location:
    USA
    Excellent information! Any chance of making this a sticky, incorporating it in BlackSpear's tutorial or some other (sticky) thread?
     
  4. Spasserfan

    Spasserfan Registered Member

    Joined:
    Jan 7, 2008
    Posts:
    9
    I was indeed. Thank you very much!

    Are these the folders used by NOD32? (where C:\ is the partition where windows and NOD32 are installed)
    Code:
    C:\Documents and Settings\All Users\Application Data\ESET
    
    C:\Documents and Settings\%user name%\Lokale indstillinger\Application Data\ESET
    
    C:\Programs\ESET
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.