Registry Cleaner Bug? 338 has changed my registry's language

indecline

Hi there,

As a computer professional, I have been using and and suggesting (to others) jv16 for years now and am pretty familiar with the program.

After just updating to version 338 (from 336, in which I had zero problems), I am getting what seems to be a really weird bug in the Registry Cleaner - this is with all default settings and it occurs when I use both Normal and Aggressive modes; after the scan is completed, I come up with something like 60 or 70 entries that were not detected when I was using version 336.

Anyways, here's the odd part, I now seem to have all these mysterious registry entries that are either a) a foreign language or, b) just complete random mumbo-jumbo

Either way, I have no idea how this stuff got there ... as I previously stated, these entries did not, and have never, appeared with any scan from any of the older versions of jv16 2006 or the original 2005, neither with your older program Regcleaner.

And I cannot even find them if I do a manual search in Regedit ...

The first thing that I thought was that it was put there by a virus/malware/spyware/etc etc, but I always use Spybot S&D, AdAware, etc, etc, etc - none of them come up with anything ...

----------------------------------------------

Here are some of the entries that appear under the "Entry Name" column:

HRZR_EHACNGU:\Qbphzragf ...

HRZR_EHACNGU:\Qbp ...

HRZR_EHACNGU:\Qb ...

--------------------------------------------------------------

It's the HRZR registry keys that I dont understand .... anyone?

Thanks,

Jason

ajofcp

I have the same problem with 338: 100s of new entries with many of them in a foreign language. Unfortunately, the problem got much worse....

I decided to go ahead and delete the entries and my computer became unbootable. Fortunately I use Norton GoBack and was able to restore my computer to a previous state.

siliconman01

Seeing the same problem on my XP-SP2 HE system after updating to Build 338. :|

tullik

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

brian49

You might wish to see this thread:

http://www.macecraft.com/phpBB2/viewtopic.php?t=1148

siliconman01

Ooops, I jumped on the "bug wagon" too quickly.

All of my strange entries starting with HRZR as found by jv16 were remants of using CryptoSuite to decrypt an XLS file out to a memory stick, modifying the file, and then encrypting the XLS file and moving it back onto my hard drive. Then did a secure erase of the XLS file on my memory stick. All the strange language did exist in the registry as discovered by jv16.

So I let jv16 delete these leftover registry entries and all is fine...rebooted okay, etc., etc.

NO BUG found here. Sorry :

jv16

It's not a bug, these entries are infact errors in the registry which jv16 PowerTools can detect and remove.

jv16

ajofcp wrote

I decided to go ahead and delete the entries and my computer became unbootable. Fortunately I use Norton GoBack and was able to restore my computer to a previous state.

I find this hard to believe. Could you tell me 1) what exactly did you do and 2) what exactly happened?

It's very rare that removing registry keys can create problems of this kind, usually the problems are of different nature. Especially if one takes to account the nature of these HRZR entries.

ajofcp

JV16 Developer,

Thanks for your feedback. I reinstalled JV16. I received similar registry cleaner entries as before, but was able to delete them (including the cryptic HRZR entries) with no adverse impacts to my system. Not sure what happended the first time, but you may remove my previous posts regarding this matter.

ajofcp

redseujac

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

tullik

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

jv16

redseujac wrote

I repeat my question: what are those entries containing? what is their purpose? what are they for? I suppose we cannot delete all those entries, even those not listed by Registry Cleaner?

All of those entries are referring to files and/or directories on your system. Some of the references are invalid since the file/directory they are linking to no longer exist, therefore they are listed as errors.

I don't know what they are there for. Removing all of them should be safe, but the Registry Cleaner lists only the ones which have an invalid file/dir reference, just to be sure.

To be clear: Removing all of the items listed by the Registry Cleaner is safe, removing all of those entries with RegEdit should also be safe.

redseujac

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

sacles

Hello,

V. 1.5.2.338

Even after abolition (deletion), this type of key often returns(*):

Why???

(*) I find them by making a search on this: HRZR (with the Registry Finder).

Regards

jepe

Hello,

Using "Google" with search-word REHAG.RKR points to a software named FlashFXP - a file transfert utility.

Jean-Paul

sacles

Using "Google" with search-word REHAG.RKR points to a software named FlashFXP - a file transfert utility.

Perhaps but often, the keys are coming back..

Are they deleted when JV16 is closed?

redseujac

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

sacles

Hello,

That explains why those entries are always recreated and reappear all the time (unless one reduces the number of programs in the Startmenu to zero?). I shall try out that and give you my experiences!

Thank you for your explanations and your observations.

Perhaps, there are no these keys when all the counters of the history cleaner (History /MRUcleaner) are 0.

Now, on my system, these counters are 0 and the tool "Registry finder" finds no key "HRZR" (I had just used MruBlaster before this search).

Regards.

redseujac

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

tullik

Thanks redseujac!

Following your lead, I found some other small bits on the Web that confirm your findings. For example:

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(1)

{5E6AB780-7743-11CF-A12B-00AA004AE837} is for Microsoft's Internet toolbar and {75048700-EF1F-11D0-9888-006097DEACF9} is for Active Desktop.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(2)

"NoEncrypt"=dword

"NoLog"=dword

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(3)

User Key:

System Key:

Value Name: NoInstrumentation

Data Type: REG_DWORD (DWORD Value)

Value Data: (1 = enable restriction)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(1) Information only.

(2) Tested these. NoEncrypt does the logging in plain text instead of the simple rot13 encryption. NoLog turns off logging after a reboot.

(3) Apparently turns off userassist altogether -- did not test this.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

I did some additional tests:

1. Deleted the entire key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist then rebooted.

2. The key reappears with no Count entries, but starts logging new activity.

3. If you used Nolog, Count has one entry (UEME_CTLSESSION, not encrypted), but nothing else is logged.

4. You lose the start menu list of frequent programs, as redseujac found. Since I sort of like that list, I probably won't use NoLog. :)

Why is windows doing all that logging? In my opinion, it was originally a tool for debugging and collection of data for frequency analysis by developers. Since it worked so well, they just adapted it to provide the "start menu list of frequent programs" feature. I may leave it with NoLog for a time to see if there is a noticeable performance difference. I doubt there will be anything noticeable.

Edit: At least one forum member has found an application (Microsoft AutoRoute) that apparently actually uses the UserAssist entries.

~~Next Page »~~