Didier Stevens - UserAssist utility

Windows Explorer keeps track of the programs you run in the UserAssist registry keys, which are ROT13 encrypted. Some people say this is spyware behavior of Windows. This program will display the decrypted entries and allow you to delete them. I’ve also reverse-engineered the binary data stored in the entries: it’s a counter and a timestamp. This new version uses a table in stead of a treeview to display the data. A new feature allows importing a REG file.

Read more…



Leave a Reply

XHTML: You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>