Request for one of the developers, please...

  • 1
  • Question
  • Updated 2 years ago
  • In Progress

Hi TM_Claudia,

Would be possible to ask one of the developers for a list with ALL items restored to default by Trend Micro upon a detection and removal?

While initially I found out a few items being modified, later on I discovered here and there other items being changed.

I would like to have the FULL list of items reset to default, in order to restore them according to my needs.

Thanks,

Claudiu B.

Photo of claudiu_botezatu

claudiu_botezatu

  • 2,708 Points 2k badge 2x thumb

Posted 2 years ago

  • 1
Photo of erza

erza, Official Rep

  • 3,110 Points 3k badge 2x thumb
Hi claudiu_botezatu,

The list changes depends on the behavior of the virus. But the basic would be:
- IE Home Page - will be set to blank
- Screensaver - will be disabled
- Wallpaper - will be removed

We will need to have a look at a specific *.ini file to see the changes done by the virus and what Trend Micro Security did in response.

^erza
Photo of claudiu_botezatu

claudiu_botezatu

  • 2,708 Points 2k badge 2x thumb

Thank you for your answer!

In addition I found that UAC will be set to "Default" (mine was on max, initially),  windows update will be set to "Install updates automatically" and "Files and folders visibility" will be set to "Make all files and folders visible"

The test malware I used DOESN'T CHANGE ANY OF THESE, so why Trend would perform all these changes???

Is quite annoying (and ironic) that after a "detection" an user has to manually go an change all these back to his preferences , which in fact were not modified by the virus itself , but by the ....antivirus!!!! 

Photo of claudiu_botezatu

claudiu_botezatu

  • 2,708 Points 2k badge 2x thumb

Hi erza,

I'm still getting certain items changed by Trend Micro every time there is a detection; any progress in this issue?

In your answer:

"We will need to have a look at a specific *.ini file to see the changes done by the virus and what Trend Micro Security did in response."

However , in later versions of Windows including Windows ( Vista, 7, and later) no longer have a win.ini. Instead of storing these settings in this file, they are stored in the system registry.

So if trend will continue to look on .ini file, will produce more harm than necessary.

Again, the changes are:

-UAC to default

-files and folders visibility set to "visible"

-win update set to "install updates automatically

-IE home page set to blank

-wallpaper removed

For a normal user, these changes are equivalent to a disaster produced by a malware infection.


This conversation is no longer open for comments or replies.