Jump to content

Suggestion: Leave 'SMTMP' virus damage in tact


Silicon83

Recommended Posts

Hello,

 

There have been many viruses that remove the contents of the start menu. They move them to %TEMP%\SMTMP, SMTMP1 and SMTMP*. CCleaner is a great program to clear out garbage that slows down scanning but it will permanently remove the entire start menu on infected machines.

 

Please implement an exception to file removal for folders named "smtmp" and its derivitives (smtmp1, smtmp2, an so on). Here is a good example of a recent version in a string of infections that damage the system in this manner: http://www.bleepingcomputer.com/virus-removal/remove-system-check.

 

Thank you,

 

Silicon83

Link to comment
Share on other sites

  • 4 weeks later...

No-one appears to have answered this yet.

 

I thought about this somewhat, & my conclusion is that under normal non-virus infected systems, CCleaner is pretty safe to use & this does not happen.

CCleaner is meant to be a system cleanup utility & not an anti-malware or anti-virus solution. The efforts required for this would be astronomical. This may sound like a good idea on first thought, but consider the following:

 

If CCleaner were to implement this, it would also have to do the same for all other malware infections, & resultant in a CCleaner that would gradually denigrade in performance & trash removal capabilities as thousands of new antivirus & antimalware pattern sets to scan for before removing trash were set into place.

 

CCleaner would thus become bloated, slow, & nearly as useless as the trash it is designed to remove.

 

* I would hazard the guess that this would be the users responsibility to check for & properly remove malware & viruses, & not Piriform.

Link to comment
Share on other sites

If malware has temporarily inconvenienced the user by relocating the start menu,

that was quite kind compared to simply deleting the menu.

 

But WHY ?

Can you depend upon the integrity of what it has relocated ?

Can you ignore the risk that an entry has been added or modified and that sooner or later you may click and start something quite regrettable ?

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.