|
Posted by Jake Dodd on February 19, 2006, 8:43 pm
If you were Registered and logged in, you could reply and use other advanced thread options
> Hello I ran KAV and Ad-aware and Ad-aware came back with this;
>
> Name:Windows
> Category:Vulnerability
> Object Type:RegData
> Size:15 Bytes
> Location:regfile\shell\open\command "" (notepad.exe %1)
> Last Activity:2-19-2006
> Relevance:Low
> TAC index:3
> Comment:Possible virus infection, REG file extension compromised
> Description:General Windows Security Issue. Your system security may be
> compromised. The specifics of the possible compromised item are listed in
> the comments section.
>
> Does anyone know what this is? I had Ad-aware delete it then I ran sys mech
> 6 comprehensive check up, rebooted and ran Ad-aware again. Ad-aware showed
> this same reg file as a problem a second time.
> thanks mc
Personally, I wouldn't want the registry association for .reg files to be the
correct
"regedit.exe %1" and would change it to "notepad.exe %1" for security reasons.
If any .reg files were doubleclicked it would now open notepad and display the
contents of the registry patch in notepad instead of altering the registry.
The patch could still be imported via the command line.
Are you sure you don't have some sort of automated security here?
| 
XML site map