skizior8
Joined: 12 Jan 2009 |
Posts: 0 |
|
|
 |
Posted: Tue Jan 13, 2009 5:32 pm |
|
 |
 |
 |
 |
Hi all,
I'm new to clamwin in general and I could use some help. I'm testing it out the command line portion to scan loaded processes and modules and the regristry. While I can scan the memory it doesn't appear that clamscan.exe is scanning the registry (based on testing an infected PC). Any advice?
FYI: Here is the command line I'm using
clamscan.exe c:\windows --memory --database=c:\clamwin\db\main.cvd --no-mail --no-archive --log=c:\clamwin\PCHC.txt
|
|
alch
Site Admin
Joined: 27 Nov 2005 |
Posts: 0 |
|
|
 |
Posted: Wed Jan 14, 2009 12:48 am |
|
 |
 |
 |
 |
ClamWin does not scan the registry
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Wed Jan 14, 2009 2:15 am |
|
 |
 |
 |
 |
If they can grab some malicious action a piece of malware does to the registry, Clam might include it in a signature, but they concentrate upon getting signatures for malware files and leave the registry alone. If you want registry protection, look to the anti-malware stuff, the behaviour blockers, and AVs that incorporate some behaviour blocking.
Regards,
|
|