Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

How to stop the system from editing registry


  • Please log in to reply
2 replies to this topic

#1 or00

or00

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:08:41 PM

Posted 11 April 2009 - 05:35 AM

hello guys ..

i mean .. software like live messenger always creat a value at startup application even if u deleted it billion times .. so i need to put permission on registry keys which manages the startup applications .. that make the registry only can be edited by administrator

BC AdBot (Login to Remove)

 


#2 Hertsky

Hertsky

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Alberta, Canada
  • Local time:06:41 PM

Posted 11 April 2009 - 05:54 AM

I use a program that allows me to selectively "Allow" or "Deny" a change to only certain registry keys (Like it wont popup to ever single registry key inside the registry).

Its called SpyBot Search & Destroy. Safe program, I run it along with all my other processes.

Also this program is a malware scanner, which can search for and remove any malware. Very nice program.

Download Link:
- SpyBoy Search & Destroy

Click "Spybot - Search & Destroy©® 1.6.2 - product description" in the Downloads box, Then click on a download mirror on the next page.
Posted Image

#3 hamluis

hamluis

    Moderator


  • Moderator
  • 56,295 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:41 PM

Posted 11 April 2009 - 10:54 AM

I don't think you can do what I understand you want to do.

In every situation that I've seen...there are always at least two entities with total control over registry entries: System and Administrator.

As I understand it, when an Admin/User installs a program (or attempts such), registry keys are written to as a result of the install process which has been initiated by an authorized person. I don't think that a user can authorize such writing...and, at the same time, attempt to deny it.

What most of us do is just kill the startups after the registry/file entries have been put in place by the program installer. It's simple enough to do so, using a program like AutoRuns for Windows - http://technet.microsoft.com/en-us/sysinte...s/bb963902.aspx

If you decide to use Autoruns, please read the instructions for using it and note the different tabs. For ordinary startup items, I suggest that you just take a look at the Logon tab. All of the other tabs involve processes which ordinarily do not have to examined/changed and some can cripple the system.

Louis




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users