Jump to content

Glenn8D

Members
  • Content Count

    3
  • Joined

  • Last visited

About Glenn8D

  • Rank
    New Member
  1. HUH? Is this a mis-post that should be aimed at another post?
  2. Wow, thanks for all the advice. So Malwarebytes doesn't have such a feature. I have to install another ~active security suite, and we know that is not recommended, as they tend to fight for the right to party on the same dance floor at the same time! Maybe a single focused app like TeaTimer, or if all of Spybot S&M except reg watch can be disabled, then I'll add it. Thanks again.
  3. I am looking for a way to at least be notified of when a app/prog modifies the window registry, specifically the ~15 startup/auto-run areas of the registry. Hoping Malwarebytes premium has an option to do this. Yes many tools show you what is ALREADY in Run areas on Startup/Logon, but none that notify or block entry into those registry areas BEFORE or when they are created/modified. Tools such as Sysinternals Suite’s autoruns and Ccleaner (both recommended) show current RUN items, But do not block or notify. This should be windows innately ability: notify or block reg modifications. Yes I have windows UAC set to max, but it only notifies of a app/prog wanting to run and once given permission it doesn’t monitor the Allowed app/prog's other activities; including and specifically adding/modifying autorun reg areas.: Startup (user) - the current user's Startup folder in the Start Menu. Startup (common) - the common (all users) Startup folder in the Start Menu. HKLM / Run - the Run registry key located in HKEY_LOCAL_MACHINE. These apply for all users. HKCU / Run - the Run registry key located in HKEY_CURRENT_USER. These apply for the current user only. HKLM / RunOnce HKLM / RunOnceEx HKCU / RunOnce HKCU / Windows NT\CurrentVersion\Windows\RUN HKCU /Windows NT\CurrentVersion\Windows\Load HKLM / Policies\Explorer\Run HKCU /Policies\Explorer\Run HKCU / Control Panel\Desktop HKLM / Active Setup\Installed Components\ (Active-X) HKLM / Windows NT\CurrentVersion\Winlogon HKLM / CurrentVersion\ShellServiceObjectDelayLoad Added Service; usually SvcHost.exe Runned (Owner Process) Thanks for your time and consideration.
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.