DbgagD, Mysterious Registry Entry o-O?

July 19, 2012 at 05:26:02
Specs: Windows XP, PentiumD 945/4GB
DbgagD, Mysterious Registry Entry o-O?

I ran System Internals, Process Monitor (v3.3)

with the correct filters
as suspected in a previous report/question here I decided to test out the
Azureus Vuze (v4.7.1.0)_Win32_Setup.exe
Installer does seem to be the culprit o-O loi >_<
as the Installer has two Bundled Apps
one is the Vuze Web-browser Toolbar
and the other is RaptR
it seems it happened at the time Raptr offer to install came up.... o_O >_< I DO SO Dislike it when PEOPLE Bundle in other apps that area NOT why I downloaded *their* app

Here is more of the Data I have found (^_^ glad I could help in some way):
Process Monitor Log Info:
"Time of Day", "Process Name", "PID", "Operation", "Path", "Result", "Detail"
"7:49:07.5607601 AM","AzureusVuze(v4.7.1.0)_Win32_Setup.exe","2492","RegCreateKey","HKLM\SOFTWARE\Microsoft\DbgagD", "SUCCESS","Desired Access: All Access"
"7:49:07.5607901 AM","AzureusVuze(v4.7.1.0)_Win32_Setup.exe","2492","RegCreateKey","HKLM\SOFTWARE\Microsoft\DbgagD\1", "SUCCESS","Desired Access: All Access"
"7:49:07.5608137 AM","AzureusVuze(v4.7.1.0)_Win32_Setup.exe","2492","RegQueryValue","HKLM\SOFTWARE\Microsoft\DbgagD\1","SUCCESS","Type: REG_SZ, Length: 16, Data: ߜ

2012-07-19 07:49:07 2492 3128 ========================================
2012-07-19 07:49:07 2492 3128 Bunndle Offer Manager Client Starting
2012-07-19 07:49:07 2492 3128 Version:
2012-07-19 07:49:07 2492 3128 ========================================
2012-07-19 07:49:07 2492 3128 Requesting updated agent DLL
2012-07-19 07:49:07 2492 3128 DownloadFile() called
2012-07-19 07:49:07 2492 3128 Downloading https://services.bunndle.com/Produc...
2012-07-19 07:49:07 2492 3128 to C:\Temp-Sys\Bunndle\BunndleOfferManager-2B3987DE-CBA9-49D1-8C6E-9EB58379CDB7.dll

Bunndle Offer Manager v2.0.0.5

There in lies the Culprit >_< ;)

A bundle Manager icky.....

See More: DbgagD, Mysterious Registry Entry o-O?

Report •

December 1, 2012 at 07:39:28
People do this to help defray the cost of their free software distros. Not many of us like it, but have to live with it.

Thanks for the info and update.

Report •
Related Solutions

Ask Question