PDA

View Full Version : Mate Watcher



bcs0262cop
2007-12-27, 16:24
I am a Computer Forensic Specialist I have encountered Mate Watcher during a forensic analysis. I have searched the registry for the common location this software may sit in the registry

HKEY_ Classes_root\interface\{4340DF8E-D7A3-4675-BE7480077B2B3E81

HKEY_local\software\userfriendlyproduct, inc

HKEY_local\software\microsoft\windows\currentversion\uninstal\control panel software

none of these were located in the registry
Does anyone know the header signature for this software or any other place this software may reside in the registry

Metallica
2008-01-12, 15:10
Hi bcs0262cop,

I probably don't need to tell you that the best way to find out is to backtrack from what you have found.
Are you in a position to share that information?