Why scriptrap.exe is a regData vuln.?

Viruses and worms
1

Dear forum-geeks,

I use scriptrap.exe, a program I saw also postings about it on this forum. Now an Adaware scan mentions it as a REG file extension compromised refile\shell\open\command through c\program files\scriptrap.exe AVAST does not see anything wrong scanning scriptrap.exe. Is there something wrong with HKEY_CLASSES_ROOT:regfile\shell\open\command etc.
I have never heard scriptrap.exe was a known virus or vulnerability. Can someone clear me out on this one. Maybe DavidR? No harm done, and my apologies for my recent remark on the HijackThis file.

ThankyouAll

POLONUS

2

Hi,

probably scriptrap made a registry-entry to intercept .REG-files before they’re opened/added to the Registry ?
Isn’t that the point of it ?

What does it say in the above RegKey (HKEY_CLASSES_ROOT:regfile\shell\open\command) about which program opens .REG-files ?

Usually those files are opened/handled by Regedit.exe; if scripttrap inserted itself there, of course Ad-Aware complains

you might write them that this might belong on an exclude-list/accepted applications there :wink:

3

I’ve used scrip trap for years with no problems. What adaware is reporting is the hook that scriptrap uses to ensure that all scripts are run through scriptrap first to check for malware.

EDIT and as above for the registry all to scan before actioning…

4

Hello Polonus,
it’s a fact that adaware warns for things that MIGHT be a vulnerability but, if the user knows about it, need not necesarily be so.
For example, I’ve protected my startpage with SpywareBlaster from being changed by hijackers, and adaware warns me for this, since it cannot “see” that it was me who locked it for a good reason.
The solution: ad this “vulnerability” to adawares ignorelist and next time you scan it wont complain about it.

Bye,

Fast
:slight_smile: