Detailed scan results: Analyzing registry settings

The registry is one of the most delicate parts of Windows-based operating systems since it coordinates the various hardware and software blocks of a system. It is quite obvious that in order to keep up with its task, the registry must store key information. These include hardware and software settings such as which drivers and applications will be automatically launched at system startup.

The registry’s prominent role within a Windows-based system makes a primary target for all hackers and malicious users. Just by gaining access to the registry settings, a crafty hacker could enable malicious software such as Trojans to automatically run at every program start-up. This way he would be able to gain backdoor access to a system unnoticed.

Screenshot 38 - Registry node

GFI LANguard N.S.S. helps you identify foul play in your registry by collecting the registry settings from all scanned computers and making them available for you to analyze from a centralized location. To access the registry settings collected during a scan, click on the Registry sub-node.

For example, by examining the values in the Run folder which is included by default in the scan results, you can identify which programs are set to automatically run at system startup. This way you can identify any type of software that is automatically run without your express instruction.