Search the Community
Showing results for tags 'notify'.
Found 1 result
I am looking for a way to at least be notified of when a app/prog modifies the window registry, specifically the ~15 startup/auto-run areas of the registry. Hoping Malwarebytes premium has an option to do this. Yes many tools show you what is ALREADY in Run areas on Startup/Logon, but none that notify or block entry into those registry areas BEFORE or when they are created/modified. Tools such as Sysinternals Suite’s autoruns and Ccleaner (both recommended) show current RUN items, But do not block or notify. This should be windows innately ability: notify or block reg modifications. Yes I have windows UAC set to max, but it only notifies of a app/prog wanting to run and once given permission it doesn’t monitor the Allowed app/prog's other activities; including and specifically adding/modifying autorun reg areas.: Startup (user) - the current user's Startup folder in the Start Menu. Startup (common) - the common (all users) Startup folder in the Start Menu. HKLM / Run - the Run registry key located in HKEY_LOCAL_MACHINE. These apply for all users. HKCU / Run - the Run registry key located in HKEY_CURRENT_USER. These apply for the current user only. HKLM / RunOnce HKLM / RunOnceEx HKCU / RunOnce HKCU / Windows NT\CurrentVersion\Windows\RUN HKCU /Windows NT\CurrentVersion\Windows\Load HKLM / Policies\Explorer\Run HKCU /Policies\Explorer\Run HKCU / Control Panel\Desktop HKLM / Active Setup\Installed Components\ (Active-X) HKLM / Windows NT\CurrentVersion\Winlogon HKLM / CurrentVersion\ShellServiceObjectDelayLoad Added Service; usually SvcHost.exe Runned (Owner Process) Thanks for your time and consideration.