-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ***^\ ."_)~~ ~( __ _"o Was another beautiful day, Wed, 28 Jun 2006, @ @ at 21:59:59 -0400, when Joe wrote:
J>> The details on the culprit (found in the Registry) read: >> >> J> >> HKU\S-1-5-21-3126995848-1559877500-2177672217-1005-SOFTWARE\RIT\THEBAT!\ >> >> Perfect. The registry key TB uses for its own private GUID. Why on >> earth should Trend take any notice? The only spying going on here is >> by Trend. Having and using a registry key for configuration and setup >> data is certainly no indication of malware. Yes, some malware uses the >> registry. So does a lot of other (probably most) software. Some joker >> has told trend that this registry key is an indication of malware >> infection. Tosh. > I'll contact Trend tomorrow and see what they have to say. Actually you should rather consult some "third party" source(s) then, since the both Trend and TheBat are by definition biased. This way you could get much less mere emotional reactions instead of clear and precise reasonable definition what a particular reg. key exactly does and serves for. Until then I only could confirm that the branch/path HKEY_CURRENT_USER\Software\RIT\The Bat! is indeed used for storing configuration data, and that just any application ("bad" or "good" one) can make/remove just any registry key anywhere. Whether TB is "phoning home" should be easiest to determine by a firewall, for instance, and/or any other gadget monitoring activity of programs. - -- Mica PGP keys nestled at: http://blueness.port5.com/pgpkeys/ [Earth LOG: 666 day(s) since v3.0 unleashing] OSs: Windows 98 SE Micro Lite Professional IVa Enterprise Millennium Windows XP(ee) Micro Lite Professional 1.6, and, for TB sometimes, Gentoo and Vector Linuxes via Wine... ~~~ For personal mail please use my address as it is *exactly* given in my "From|Reply To" field(s). ~~~ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4-svn-4169 <>o<> tiger192 (MSYS/MinGW32) iQEVAwUBRKOvIrSpHvHEUtv8AQiU0wf/ZL+4RMqg6tz4gEqt5hUIJejwnlGNElHo 5jTJDU33EWq2rJy7thWV0xbNB2D8fcYanTX2gogFoY+Xx8ix7p6HXf8GWewMx4yP 0SPzUlMoqocuSXeSGhS2JU9RmjkvDzFD80O58t3mEZuWZqiPP93SHr/j2lQNlPQL U7C+8/JstbiKymZaEUylH6LBFfw3PSYBPijERHgKhrlQmXOW1a8b+NTmUF8SqRfW ukN7eIiPYZntqhc3JOW8z3uMzWhXd88o5KxG2d/N5tIOAUw1BCzvBvsqeLxKSTLr DgBo5FvkoBqoCYNI6ggPmgxBvpc2mV9ZVRtq3ZevxlsQf6dQWKvTkg== =83/Q -----END PGP SIGNATURE----- ________________________________________________ Current version is 3.80.06 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html