GoliatHD 0 Posted May 5, 2016 Share Posted May 5, 2016 Hallo, ich finde es auf jedenfall gut, dass ESET die Möglichkeit bietet eine Meldung zu geben falls die Starteinstellungen in der Regestry umgeschrieben wurden. Leider ist es so, dass nur ein Sector überprüft wird. Leider fehlen manche. Dies sind : \HKEY-LOCAL-MACHINE\SOFTWARE\Microsoft\Windows\Currentversion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\microsoft\WindowsNT\CurrentVersion\Winlogon (Dort kann sich die Malware zu dem Explorer.exe hinzuschreiben), Außerdem Fehlen auch noch die Autostart Ordner: \Users\[Accountname]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs, \ProgramData\Microsoft\Windows\Start Menu\Programs\Startup, \Users\All Users\Microsoft\Windows\Start Menu\Programs\Startup Wenn ESET Smart Security 9(+) nun diese Ordner/Schlüssel auch noch überwachen würde, wäre es viel sicherer für den Endkunden. Link to comment Share on other sites More sharing options...
Administrators Marcos 4,704 Posted May 6, 2016 Administrators Share Posted May 6, 2016 This is an English forum and most users and moderators will not understand if you post in other languages. If you don't speak English, try using a translator please. I, for one, am not sure about what message you mean if autostart locations are modified. It'd be good if you write in English and add some screen shots and instructions how to reproduce the issue. Link to comment Share on other sites More sharing options...
dom1da 10 Posted May 7, 2016 Share Posted May 7, 2016 Hello, I think it's good in any case, that ESET provides the opportunity to give a message if the initial settings have been rewritten in the Regestry. Unfortunately, it is so that only one sector is checked. Unfortunately, some are missing. These are: \ HKEY-LOCAL-MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run, HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon (where the malware can be added writing to the Explorer.exe) Also lack even the startup folder: \ Users \ [account name] \ AppData \ roaming \ Microsoft \ Windows \ Start Menu \ Programs \ ProgramData \ Microsoft \ Windows \ Start Menu \ Programs \ startup \ Users \ All Users \ Microsoft \ Windows \ Start Menu \ Programs \ Startup If ESET Smart Security 9 (+) would now also monitor these folders / keys yet, it would be much safer for the consumer. Translated with Google Translate by Dom1da hope this helps Marcos Link to comment Share on other sites More sharing options...
GoliatHD 0 Posted May 7, 2016 Author Share Posted May 7, 2016 (edited) Thank You @dom1da and I will write in the future in English Edited May 7, 2016 by GoliatHD Link to comment Share on other sites More sharing options...
Recommended Posts