Regesrty

[GoliatHD 0]

Hallo,

ich finde es auf jedenfall gut, dass ESET die Möglichkeit bietet eine Meldung zu geben falls die Starteinstellungen in der Regestry umgeschrieben wurden. Leider ist es so, dass nur ein Sector überprüft wird. Leider fehlen manche. Dies sind : \HKEY-LOCAL-MACHINE\SOFTWARE\Microsoft\Windows\Currentversion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\microsoft\WindowsNT\CurrentVersion\Winlogon (Dort kann sich die Malware zu dem Explorer.exe hinzuschreiben), Außerdem Fehlen auch noch die Autostart Ordner: \Users\[Accountname]\AppData\Roaming\Mic­rosoft\Windows\Start Menu\Programs, \ProgramData\Microsoft\Windows\Start Menu\Programs\Startup, \Users\All Users\Microsoft\Windows\Start Menu\Programs\Startup

Wenn ESET Smart Security 9(+) nun diese Ordner/Schlüssel auch noch überwachen würde, wäre es viel sicherer für den Endkunden.

[Marcos 5,074]

This is an English forum and most users and moderators will not understand if you post in other languages. If you don't speak English, try using a translator please.

I, for one, am not sure about what message you mean if autostart locations are modified. It'd be good if you write in English and add some screen shots and instructions how to reproduce the issue.

[dom1da 10]

Hello,

I think it's good in any case, that ESET provides the opportunity to give a message if the initial settings have been rewritten in the Regestry. Unfortunately, it is so that only one sector is checked. Unfortunately, some are missing.

 

These are: \ HKEY-LOCAL-MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run, HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon (where the malware can be added writing to the Explorer.exe)

 

Also lack even the startup folder: \ Users \ [account name] \ AppData \ roaming \ Microsoft \ Windows \ Start Menu \ Programs \ ProgramData \ Microsoft \ Windows \ Start Menu \ Programs \ startup \ Users \ All Users \ Microsoft \ Windows \ Start Menu \ Programs \ Startup

 

If ESET Smart Security 9 (+) would now also monitor these folders / keys yet, it would be much safer for the consumer.

 

Translated with Google Translate  by Dom1da hope this helps Marcos 

[GoliatHD 0]

Thank You @dom1da  and I will write in the future in English

Edited May 7, 2016 by GoliatHD