FIXED: Strange registry access
Posted: Fri Jan 30, 2009 8:55 am
I have a very strange thing happening whenever I start DVB Dream.
My Kaspersky IS2009 reports an access of MS Register Server to "hklm\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox".
More detailed analysis shows that dvbdream.exe seems to call cmd.exe which then calls regsvr32.exe the process that accesses the strange reg key.
The registry access itself seems to be unimportant, because blocking or allowing makes no difference.
The real problem for me is that it seems not possible to make a rule for the IS to permanently react to that, probably because it is a indirect call or something, so I have to click every time I start DVB Dream.
Does anybody know what causes this call?
My Kaspersky IS2009 reports an access of MS Register Server to "hklm\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox".
More detailed analysis shows that dvbdream.exe seems to call cmd.exe which then calls regsvr32.exe the process that accesses the strange reg key.
The registry access itself seems to be unimportant, because blocking or allowing makes no difference.
The real problem for me is that it seems not possible to make a rule for the IS to permanently react to that, probably because it is a indirect call or something, so I have to click every time I start DVB Dream.
Does anybody know what causes this call?