FIXED: Strange registry access

General discussion . (Do not post bug reports or feature requests in this section!)

Moderators:X05, Dreamer, FredB

Syberdoor
Just popping in
Posts:4
Joined:Fri Jan 30, 2009 8:43 am
FIXED: Strange registry access

Postby Syberdoor » Fri Jan 30, 2009 8:55 am

I have a very strange thing happening whenever I start DVB Dream.
My Kaspersky IS2009 reports an access of MS Register Server to "hklm\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox".
More detailed analysis shows that dvbdream.exe seems to call cmd.exe which then calls regsvr32.exe the process that accesses the strange reg key.

The registry access itself seems to be unimportant, because blocking or allowing makes no difference.

The real problem for me is that it seems not possible to make a rule for the IS to permanently react to that, probably because it is a indirect call or something, so I have to click every time I start DVB Dream.

Does anybody know what causes this call?
Last edited by Syberdoor on Mon Feb 02, 2009 5:19 am, edited 1 time in total.
Terratec Cinergy S2 (1.1.1.301)
Windows Vista 64bit Ultimate
Geforce GTX 260
Syberdoor
Just popping in
Posts:4
Joined:Fri Jan 30, 2009 8:43 am

Postby Syberdoor » Mon Feb 02, 2009 5:17 am

Ok I found that it was created by a call to ddreg.bat, whihc was done at every start. As far as I understand it this call is not necessary though as a one time registering of ddsource.ax should be suffieicent (maybe this is a precaution so it enver breaks?). So I have commented out the corresponding call and it works fine now
Terratec Cinergy S2 (1.1.1.301)
Windows Vista 64bit Ultimate
Geforce GTX 260

Return to “General”

Who is online

Users browsing this forum: No registered users and 1 guest