Identify Software

J

JD

I wonder if anyone can tell me what these software entries in HKLM
represent? The "right pane" offers not a clue. A Google search tells me that
the second one has something to do with "batch files" and the third with
marketing (?), I think. I'm wondering if their folders in the registry are
legit or perhaps malware of some sort.

1. NoTreat
2. Wilson WindowWare
3. Wise Solutions
 
N

NewScience

Right click on one of the keys and select Copy Key Name.

Paste in reply post.

Is the key path HKEY_LOCAL_MACHINE\Software\Wise Solutions or
HKEY_LOCAL_MACHINE\Wise Solutions.

You made it sound in your post that they are directly under
HKEY_LOCAL_MACHINE.

I checked mine nad I have Wilson WindowWare (which contains a reference to
WBDCC34I.DLL in the Settings\WWWBatch\DllUsage key). I do not have that DLL
on my system.

Wise Solutions is also associated with Wise Installation packages.

What I usually do is rename the topmost key, with my initials, e.g. Wilson
WindowsWare-XXX
That after a period of time, and nothing has happened, I delete them.
 
J

JD

Here is the correction: HKEY_LOCAL_MACHINE\Software\Wise Solutions
I thought I'd made that clear by identifying them as "software entries."
In any case, you must wonder how these things get into your registry.
I like your suggestion as to how to deal with them. Thanks.
 
J

JD

I had found the pages for two of the three, as I indicated in my op.
However, I'm no more enlightened as to what these entries mean. What do they
do? How did they get there? I know nothing about "batch writing," but would
like to know that these entries are legit, and not malware or remnants.
 
G

Gerry Cornell

JD

You might look at the entries in Add / Remove Programs.

There is information there about usage. Unfortunately it
is not reliable but it may give a date when it was it was last
used. Note that it could be the installation date as for some
programmes using the programme does not update this
record.

Are you the only person using the computer and has
this always been so?

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
J

JD

There are no entries in Add/Remove that show any relation to these names.
The right panes in each show simply "default" and no connection to any known
existing installed program. The Wilson WindowWare folder has been in the
registry for a long time. The other two I had not noticed before.
 
G

Gerry Cornell

JD

Do they appear in a HijackThis log?

Install and run HijackThis:
Download HijackThis (Freeware)
http://tomcoyote.com/hjt/


--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
G

Gerry Cornell

JD

Running HijackThis is very easy. The difficulty can be identifying
the significance of individual items in the Report. However, it should
be relatively easy to spot the three items if they are there and to see
how they are reported may yield clues.

This Tool can be used to interpret individual entries but it does
give false information so it is not totally reliable
http://hijackthis.de/index.php

Another helpful link is:
http://www.aumha.org/a/hjttutor.php

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
G

Gerry Cornell

JD

You could email me a copy of your HijackThis log if you
wish. I am no expert with these logs but I have looked at a few.

Email me at (e-mail address removed) but reversing the order of the
first four letters.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top