View Single Post
Old 03-01-2008   #3 (permalink)
Synetech
CD Freaks Member
 
Synetech's Avatar
 
Join Date: Nov 2005
Location: Not LA or NYC :(
Posts: 217
Re: ! Conspicious Behavior From CloneCD (and possibly other SlySoft apps)

Quote:
Originally Posted by ArcCoyote View Post
that temp file is referenced by a registry entry at \HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ElbyTemp
I’m familiar with the registry entry and while I cannot check it now because I have deleted it since I found this behavior and it has not been recreated, I am fairly sure it was not the same.

I am also fairly sure that it did not do this before, and only started with the latest version of everything (I am not certain of the exact versions).

Quote:
Originally Posted by ArcCoyote View Post
it is in fact checked 10 seconds by the ElbyCDIO driver and is part of the trial period enforcement. Rootkit behavior, basically.
Well they’ll need to find something less intrusive. Checking a file every ten seconds for eternity is unacceptable. It may not have a huge performance hit for everyone, but it can certainly add up, especially for those of us who have older systems. Besides, doing something the wrong way is still wrong no matter how little the its effects. Microsoft would never be able to get away with doing something like this (and they haven’t, people nagged and complained from day one of WGA), neither did Sony, so why should any other company?
__________________
--
Synetech
Synetech is offline