Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Topics - Brown Sugar

Pages: [1]
Feature Requests / File comparison by version number, size or date?
« on: December 29, 2007, 04:52:17 AM »
Several months ago, I suggested that a good feature would be if Uninstaller could report on files that were changed, using size version number and date of the file.   I think the administrator agreed at the time and thought it was possible. 

I think this would be of great benefit as some programs might install their own Windows OS dll or exe file, replacing a newer or older version currently on the system.  Upon installation, Windows is supposed to alert the user when a program wants to replace a system file with a different version, but I get the feeling some may slip through, or one could choose yes when they meant to choose no.   Regardless, it would be interesting to know and see

a) which  file was changed, and 
b) a comparison of the two versions.

In addition, Uninstaller could be used periodically to just compare the OS directories.  Using a separate file comparison utility, one could copy and save the files_1.txt file in the Uninstaller\logs directory after a before analysis, edit the txt file anddelete everything but the OS files, and compare it as often as they wish by performing subsequent "before" analysis'.  The same could be done for just the program files (or one could also include both the program files and OS files in the edited files_1.txt file).

If this feature were included, an option would probably be needed to deselect the comparison as it would result in a slower before and after analysis for those who don't want it.

I've often received a message after uninstalling a program which states that some files or keys couldn't be deleted, and Uninstaller will try again.   Exactly when does it try again and how long are these items retained in the trydelete.dat file?   I still see items in the file from several uninstalled programs ago.

General Support / Best way to update to new version 2.4?
« on: September 10, 2007, 02:04:44 AM »
I'm currently using version 2.3.  Should I:

1) uninstall version 2.3 first, but backup my Logs file directory before uninstalling, then install version 2.4 and copy the Logs subdirectory back to the Uninstaller directory?

2) Install version 2.4 and that will just write over version 2.3?

Regardless, I backup the logs directory and dat files as those are always needed.

Instead of uninstalling or writing over version 2.3, can I install version 2.4 into a separate directory and monitor the install of that with version 2.3?  This way I can save the zulog file for version 2.4, then uninstall version 2.3, and be able to have a complete uninstall of the Zsoft Uninstaller every time a new version is released.    ;D

The only way I can see that being a problem is if each Uninstaller version is written to similar registry keys.   If that's the case than an uninstall of an earlier version subsequent to the install of a later version could cause problems for the later version, as the uninstall of version 2.3 for example, might delete registry items just created by  the install of version 2.4.

It's my understanding that the "Reg Deleted!" will be added back to the registry upon uninstalling a program.  I usually edit the zulog files and delete these as they consist of MRU's, counts, Zone Alarm information, or strings that are copies of Reg Added! ones.

Is there any reason these should be kept in the zulog file?

General Support / Does Zsoft compare file versions and dates?
« on: August 28, 2007, 06:37:41 PM »
I was just wondering if Zsoft compares file versions and dates when it does it's before and after installation scans.

If it doesn't, would it be a hard feature to add?  My main concern when analyzing the installation logs is to see if anything has been added to the Windows directory and the System and System32 subdirectories in particular.

It's not enough to just see if a file has been added.  Some programs might actually load a dll or exe file with the same name, but an older or newer version.   Windows should pick this up and ask if you want to replace a file, but I'm sure there are times when it misses a few (as indicated by the many trojans and viruses that replace existing OS files).

General Support / Safe to edit zulog and delete Reg deleteds?
« on: April 30, 2007, 08:21:47 PM »
When I check the zulog file, I usually see MRU streams in the reg deleted area which match similar strings in the reg added area.
Doesn't this mean that those strings will be added back when uninstalling?  Aren't those strings unnecessary?  I've edited the zulog file before and deleted all references to reg deleted MRU streams, then uninstalled with no problem

In addition, I sometimes find a load of keys similar to this in the reg deleted area.  I think this string is from a Zone Alarm system check and probably should remain deleted. 

REG DELETED!   HKU   S-1-5-21-329068152-1060284298-842925xxx-xxxx\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints\Q\_DriveFlags
This is from a Spyware Terminator zulog file and for that program the system has to be rebooted.  (I replaced actual numbers with x's).

I also see items called "Perflib data counts" which are probably related to Zone Alarm.

There are also such items as:

REG DELETED!   HKLM   SOFTWARE\Zone Labs\ZoneAlarm   ProgramSecuredCount   int:
REG DELETED!   HKLM   SOFTWARE\Microsoft\Cryptography\RNG   Seed   

along with references to updated programs.

Won't they be added back to the registry when uninstalling and is it really necessary that they should be added back? 

Most of the time, when I analyze the "reg deleted" area, it appears that most of the strings should remain deleted.

General Support / Suggestions for analysis of add-ons?
« on: March 08, 2007, 06:22:13 PM »
After I install a program like Winamp, I like to install many plug-ins.

What would be the best way to analyze the installation of these so that one doesn't spend a great amount of time analyzing the installs?

I was thinking of installing several at a time if they're small, and then naming the zulog file so that I'll know that several comprise the install.

1) From what I've been told here before, the deleted registry strings are added back when the uninstall procedure is selected.
When I check my zulog file using notepad, I usually notice many mru streams and zone alarm references.
In addition, if a program requires a restart to finish the analysis, there's a good chance that an autostart program like Ccleaner or MRU blaster will remove temp files and registry strings.  Uninstall will then complete the analysis and reflect that these files and strings have been deleted.

The files won't be added back because they're gone, but won't the registry strings be recreated?  Regardless, will Zsoft issue a message that the uninstall wasn't totally completed if this is the case?

What I usually do is edit the zulog file and remove the strings referring to deleted mru streams.

2) Other deleted registry strings I find:

REG DELETED!   HKLM   SOFTWARE\Zone Labs\ZoneAlarm   ProgramSecuredCount   int:325

REG DELETED!   HKLM   SOFTWARE\Microsoft\Cryptography\RNG   Seed  (with a huge string following this key)

Do these really need to be added back?

3) Perflib files

Files such as these are created and show up in the zulog files:

FILE ADDED!   E:\WINNT\system32\Perflib_Perfdata_510.dat

According to:

The %SystemRoot%\System32\Perflib_Perfdataxxx.dat files are created by the System Monitor. When you shutdown normally, the file should be deleted.

If you have an abormal shutdown, these files can become orphaned, and accumulate on your computer.
Under some yet to be determined circumstances, these files can become orphaned during normal operation.
The best way to remove these files is to add a command in a logon script:
del /q %SystemRoot%\System32\Perflib_Perfdata*.dat

Since these are usually deleted upon shutdown, they will never be found by Zsoft Uninstaller, thus resulting in a program alert that all files could not be deleted.  Correct?

Some more info:

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion

The Perflib subkey stores configuration data for the Windows Performance
Library, which collects and organizes data for performance tools, such as
System Monitor.

In addition to entries, the Perflib subkey contains a Language-code subkey
for each spoken language you configure for Windows 2000. The Language-code
subkey stores performance counter names and their descriptions in the
specified language. The Language-code subkey is named for the language code
for that language. For example, the counters and descriptions for the
English language are stored in a subkey named 009, the language code for
English (United States).

In some instances, I'll receive a message to the effect that Zsoft couldn't remove everything and will try again the next time I run uninstall.
However, when I do a sample search for files and strings, they've been deleted.  Obviously, I can't check every one.  Uninstall will give me the same message every time subsequent time I run it for that same uninstalled program.

Could it be that there were temp files analyzed by Zsoft that were subsequently cleaned by a program such as CCleaner, and Zsoft is still looking to delete them because they're still listed in the zulog file?

Would it be possible in future versions to summarize what files and strings the program thinks couldn't be deleted?

Administrator - you might also like to know the program is discussed very favorably in the CCleaner forums.
Others have mentioned this same problem:


Bugs / 2.3.3 had a taskbar version error
« on: February 20, 2007, 08:43:24 PM »
Is this corrected on the new version?

Version 2.3.3. showed this in the taskbar:

General Support / Upgrading
« on: February 20, 2007, 08:37:20 PM »
If I install, v 2.3.4, do I have to uninstall v. 2.3.3, or can I just install it right over the old version?

Bugs / Installed programs menu and Uninstall option problems
« on: February 12, 2007, 06:59:29 AM »
I'm using version 2.3.3 on a Windows 2000 Pro OS.  I was looking to find your three box confirmation that one must select before uninstalling, so I right clicked on a program using the "Installed Programs" tab, chose the "uninstall" option, and then selected "No" when I was asked if I wanted to uninstall. 

1) Happily, the program didn't uninstall, but the ".zulog file disappeared from my Uninstaller\Logs subdirectory, as did the selection for it in the "Analyzed Programs" tab.  It still appeared in the "Installed Programs" tab, though!

Even though the program correctly DID NOT uninstall from my programs partition, a message appears in the Info Box that states:

XXXX Program should now be uninstalled.  The list has been updated.

The program is still listed in the "Installed Programs" tab, but not on the "Analyzed Programs" tab.

2) Most of the time, the Uninstall box on the upper left doesn't work when I click it.  Right clicking with the mouse and choosing uninstall seems to be the way to handle an uninstall.

3) To test the Uninstall button, I just chose to uninstall Winrar by using the Uninstall button.  A message appeared that said that Windows is waiting for Microsoft Framework 1.1 to finish.  Suddenly, an OS message appeared that asked me if I wanted to delete MS Net Framework 1.1 Hotfix?!  Naturally, I chose "no" but this message still appeared, even though the program thankfully wasn't uninstalled:

I didn't even use Zsoft to install Net Framework!
There must be a conflict with the program and Net Framework.

I know that you use XP to test the program, but can you see if you can duplicate the uninstaller problems when choosing "no" after selecting "Uninstall".

Pages: [1]