FILESpy and REGSpy

Hello

2 years ago the guy that reinstalled my windows decided to install bitdefender on it
I removed it within the first days and installed another anti virus

It has been bugging me few months ago but I didn't care much about it… anyhow i noticed that in the event viewer every day there is an error about the 2 mentioned strings in the topic title:

"The REGSpy service failed to start due to the following error:
The system cannot find the path specified."

I believe this is because of not a complete uninstall of bitdefender

Was searching in the registry and found

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_REGSPY]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_REGSPY\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_REGSPY\0000]
"Service"="REGSpy"
"DeviceDesc"="REGSpy"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_REGSPY\0000\Control]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\REGSpy]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\REGSpy]
; Contents of value:
;   \??\C:\Program Files\Softwin\BitDefender8\regspy.sys 
"ImagePath"=hex(2):5c,00,3f,00,3f,00,5c,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,\
  67,00,72,00,61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,53,00,6f,\
  00,66,00,74,00,77,00,69,00,6e,00,5c,00,42,00,69,00,74,00,44,00,65,00,66,00,\
  65,00,6e,00,64,00,65,00,72,00,38,00,5c,00,72,00,65,00,67,00,73,00,70,00,79,\
  00,2e,00,73,00,79,00,73,00,00,00
"DisplayName"="REGSpy"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\REGSpy\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\REGSpy\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\REGSpy\Enum]
"0"="Root\\LEGACY_REGSPY\\0000"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_REGSPY]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_REGSPY\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_REGSPY\0000]
"Service"="REGSpy"
"DeviceDesc"="REGSpy"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\REGSpy]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\REGSpy]
; Contents of value:
;   \??\C:\Program Files\Softwin\BitDefender8\regspy.sys 
"ImagePath"=hex(2):5c,00,3f,00,3f,00,5c,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,\
  67,00,72,00,61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,53,00,6f,\
  00,66,00,74,00,77,00,69,00,6e,00,5c,00,42,00,69,00,74,00,44,00,65,00,66,00,\
  65,00,6e,00,64,00,65,00,72,00,38,00,5c,00,72,00,65,00,67,00,73,00,70,00,79,\
  00,2e,00,73,00,79,00,73,00,00,00
"DisplayName"="REGSpy"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\REGSpy\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_REGSPY]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_REGSPY\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_REGSPY\0000]
"Service"="REGSpy"
"DeviceDesc"="REGSpy"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_REGSPY\0000\Control]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\REGSpy]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\REGSpy]
; Contents of value:
;   \??\C:\Program Files\Softwin\BitDefender8\regspy.sys 
"ImagePath"=hex(2):5c,00,3f,00,3f,00,5c,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,\
  67,00,72,00,61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,53,00,6f,\
  00,66,00,74,00,77,00,69,00,6e,00,5c,00,42,00,69,00,74,00,44,00,65,00,66,00,\
  65,00,6e,00,64,00,65,00,72,00,38,00,5c,00,72,00,65,00,67,00,73,00,70,00,79,\
  00,2e,00,73,00,79,00,73,00,00,00
"DisplayName"="REGSpy"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\REGSpy\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\REGSpy\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\REGSpy\Enum]
"0"="Root\\LEGACY_REGSPY\\0000"

Is it safe to delete these traces? Will the errors in the even viewer stop?

P.S. sorry if this is not the right section but I had no idea where to post it

Warning: You are about to be instructed how to modify your registry. Anytime a change to the registry is performed there may be undesirable consequences and it may prevent your computer from working at all.

Please read and perform one of the following methods to produce a backup of your registry BEFORE proceeding with any registry modifications.

How to backup the windows registry:

• Method 1: Using ERUNT (Preferred method)
  
  • Using the third party software called ERUNT you can back up your registry and can also configure automated registry backups to help ensure your system's integrity. This is the preferred method to perform a registry backup and instructions can be found in the first portion of the following post: Read by clicking HERE.
• Method 2: Using System Restore
  
  • Windows Vista
    
    • Click Start, type systempropertiesprotection in the Start Search box, and then press ENTER.
      Note: If you are prompted for an administrator password or for a confirmation, type the password, or click Allow.
    • Wait for Windows to search for available disks and most recent restore points. In the System Properties dialog box, on the System Protection tab, click Create,
    • Type a name for the restore point (preferably something recognizable you can easily go back to and find) and then click Create.
    • After the restore point has been created successfully, click OK two times.
      Note: If System Restore is turned off, click to select the local disk, click Apply and then click Create.
  • Windows XP
    
    • Click Start, click Run, type %SystemRoot%\system32\restore\rstrui.exe, and then click OK.
    • On the Welcome to System Restore page, click Create a restore point, and then click Next .
    • On the Create a Restore Point page, type a name for the restore point (preferably something recognizable you can easily go back to and find) and then click Create.
    • After the restore point has been created, click Close.
      Note: If System Restore is turned off, you receive a message that asks whether you want to turn on System Restore now. Click Yes. Then, in the System Properties dialog box, click to clear the Turn off System Restore check box, click OK, and then repeat this step.
• Method 3: Using REGEDIT
  
  • Click Start, click Run, type regedit, and then click OK.
  • In the Registry Editor, click File, click Export, choose a location to save the registry (Preferably on your desktop) and choose a name (Preferably using the date… i.e. regbackup012308.reg).
• Near the bottom of the window, in the Export Range box, click All, then click Save.

If you encounter any problems following these instructions, please STOP and report back here for assistance before continuing further. You may now continue with the instructed registry modifications.

The errors you are mentioning in event viewer are completely harmless. The registry entries you listed are completely harmless.

However, if you first backup your registry, in case you make a mistake, you can delete all the registry entries that you listed. And yes, it will stop that error in event viewer.

Good luck.

The errors you are mentioning in event viewer are completely harmless. The registry entries you listed are completely harmless.

I'm the guy that wants everything to be perfect on his computer and I've always tried to fix minor problems.
But this time I won't do anything.

Thanks

I'm the same way.. So, I do understand. If it was me, I would remove those entries. I'm not discouraging you from doing so. Only encouraging you to first make a backup of your registry in some way, just in case.

If it was me, I would remove those entries.

Well after reading this, I did it. Hope my comp wont blow up on the next reboot

p.s. you should have mentioned there are some extra steps for deleting the legacy keys