makerbiles6
Joined: 02 Jun 2020 |
Posts: 2 |
|
|
 |
Posted: Sat Oct 02, 2021 4:29 pm |
|
 |
 |
 |
 |
Basically it found an html exploit in my registry and so after the first scan I ran a second one afterwards and I still see it.
Does ClamWin "fix" or do anything with infected registry? Or is this something I'm supposed to run something like RegAssassin for?
Or is this one of those cases where the infected registries might have some write protection?https://19216801.onl/ 192.168.0.1 https://routerlogin.uno/ router login https://192168ll.link/ 192.168.1.1
|
Last edited by makerbiles6 on Thu Oct 07, 2021 11:39 pm; edited 1 time in total
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 4935 |
Location: USA |
|
 |
Posted: Mon Oct 04, 2021 2:21 am |
|
 |
 |
 |
 |
I don't think Clam AV has ever worried about the Windows registry. It is actually designed to detect malicious files on Linux email scanners, where the Windows registry is no problem. ClamWin uses ported Clam AV code and the Clam AV virus database, which I am sure does not contain any signatures for .reg files or whatever extension/format they are in.
On the off-chance yours truly is wrong, set up a custom database of about 20-25 common malware extensions, and include registry extensions and see what happens.
If you want registry protection, I suggest that you also use Microsoft Defender (formerly Windows Defender). That should provide you with good/better protection. Alternatively, look at some of the stuff from NoVirusThanks. They are not charging for their top protection program, but it is worth it--after possibly excluding some things it does from real-time AVs.
Regards,
|
|