![Superstar Superstar](https://sprcdn-assets.sprinklr.com/404/9745e52a-0db4-445b-b744-fb67ceb5d027-1171630835/5superstar_p.png)
Superstar
•
190 Messages
•
7.6K Points
Threat Cleanup Minor Error
Hello,
I am reporting a minor cleanup issue.
![](https://prod-content-care-community-cdn.sprinklr.com/e3524b58-3f1e-4dbc-8cf7-704e4fc87dec/Untitled-5151085f-6a58-4422-90f6-670ab90bec59-515112824.jpg)
The highlighted item is a threat that was cleaned, but apparently, not entirely. It was initially not detected, but was then reclassified after my submission.
The startup item should have been removed. The registry entry is located in HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
This is the detection:
![](https://prod-content-care-community-cdn.sprinklr.com/e3524b58-3f1e-4dbc-8cf7-704e4fc87dec/Untitled-5ef1ce63-3304-4364-b754-a7dac4e238fb-515112824.jpg)
![](https://prod-content-care-community-cdn.sprinklr.com/e3524b58-3f1e-4dbc-8cf7-704e4fc87dec/Untitled-6b24d870-f529-4ac8-949f-b95aff219808-515118528.png)
Accepted Solution
tm_karr
Prodigy
•
231 Messages
•
4.4K Points
3 years ago
Hi, McMcbrad
Welcome to Trend Micro Home Users Community
Thank you for reporting this issue, The possible reason why Trend Micro why it is not detected is because the file path on the registry is not included in the pattern of reclassification.
What we suggest is for you to go to the file path: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, and from there find the detection and remove it.
Just to assure you that you are safe Trend Micro already cleaned the detected file it will no longer run and the only remnant files were left.
We will also update the pattern of reclassification for this issue to be avoided
Regards
TM_Kar
1
bvasilev
Superstar
•
190 Messages
•
7.6K Points
3 years ago
Also, in the root cause analysis graph, on top, you can see url=[]
It seems that product hasn’t captured the URL properly.
0
tm_karr
Prodigy
•
231 Messages
•
4.4K Points
3 years ago
Hi, McMcbrad
Thank you for the feedback we will see to it that this will be added to the reclassification loop
If you have further ideas, please do not hesitate to share them with us.
Regards
TM_Kar
0