Evidence of past connections is often retained to facilitate quick re-connection.
For system administrators, the registry provides vectors for both detection and prevention. anydesk registry
| Software | Registry Footprint | Encryption of saved data | Clean uninstall? | |----------|-------------------|---------------------------|------------------| | | Medium (~20-30 keys) | Hashed passwords, plaintext history | Leaves ~5-10 orphan keys | | TeamViewer | Large (~50+ keys) | Plaintext server-assigned ID only | Leaves many leftovers | | Splashtop | Small (~10 keys) | Minimal local data – relies on web auth | Generally clean | | RustDesk (open source) | Minimal (~5 keys) | No sensitive data stored | Very clean | Evidence of past connections is often retained to
