Re: Registry Write Protected
As I said, many programs now offer that type of protection both for registry
and/or hive entries, and many provide system file monitoring/protection.
FileMon and RegMon are excellent diagnostic programs for tracing system
activities...
--
MEB
http://peoplescounsel.orgfree.com
--
_________
"Warren" <nospam@nospam.com> wrote in message
news:eRPc0OYnIHA.5208@TK2MSFTNGP04.phx.gbl...
| Sorry folks, I think I've discovered the culprit. I run Ad-aware AD-watch
| and there's a thousand options in there, one of which was blocking changes
| to the start-up section of the registry. A good security feature, but
......
| drives you crazy when you forget about it.
|
| I figured it out by installing a little proggy called regmon.exe, which
| monitors all activity in the Registry. I saw Ad-watch fly by in the
| scrolling processes when I tried to edit the registry.
|
|
| "glee" <glee29@spamindspring.com> wrote in message
| news:%23xyl13XnIHA.944@TK2MSFTNGP05.phx.gbl...
| > What do you mean by "the system won't let me"? Are you getting a
message
| saying you
| > are prohibited from performing the action? How exactly is the system
| stopping you?
| >
| > OR, are you just assuming the "system won't let you" because the items
are
| coming
| > back into the startup list?
| >
| > If you just remove an item in the Run key, but don't turn off the option
| in the
| > associated program to "run at startup" (or similar), the entry will just
| be added
| > right back again.
| >
| > What programs are you trying to remove from startup?
| > --
| > Glen Ventura, MS MVP Windows, A+
| >
http://dts-l.net/
| >
http://dts-l.net/goodpost.htm
| >
| >
| > "Warren" <nospam@nospam.com> wrote in message
| > news:uQ9WADVnIHA.1768@TK2MSFTNGP05.phx.gbl...
| > > Thanks MEB,
| > >
| > > There was only one small difference, regarding how the right mouse
click
| > > works on reg files ([HKEY_CLASSES_ROOT\regfile\shell]
| > > @=""). I loaded your file anyway. I noticed I could manually change
| the
| > > string value from "" to "edit" and confirmed the change in the right
| click
| > > context menu of .reg files.
| > >
| > > Which means the Registry isn't locked as I thought, instead I'm doing
| > > something wromg in my attempt to prevent programs from starting up. I
| am
| > > trying to remove some string entries in the
| > > [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
key,
| to
| > > prevent those programs from starting up at bootup, but the system
won't
| let
| > > me. What am I doing wrong ?
| > >
| > >
| > > "MEB" <meb@not
here@hotmail.com> wrote in message
| > > news:%23V$Bg9SnIHA.4504@TK2MSFTNGP06.phx.gbl...
| > >> "Warren" <nospam@nospam.com> wrote in message
| > >> news:u0CDAbQnIHA.5472@TK2MSFTNGP03.phx.gbl...
| > >> | I was trying to disable some programs from starting up by editing
| > >> registry,
| > >> | when I noticed that none of my changes are taking effect. I have
no
| > > idea
| > >> | how or when it became locked.
| > >> |
| > >> | How do you unlock it?
| > >> |
| > >>
| > >> Likely you have some other program that dis-allows modification.
That
| > >> presumes you DID shutdown and restart after the changes.
| > >>
| > >> Check your Anti-Virus, Anti-SpyWare, and like programs [any tweak
| > > programs
| > >> as well], to see if they provide that protection [system and/or file
| > >> protection].
| > >>
| > >> Check this key and entries [standard]:
| > >> ------
| > >> REGEDIT4
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile]
| > >> @="Registration Entries"
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile\DefaultIcon]
| > >> @="C:\\WINDOWS\\regedit.exe,1"
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile\shell]
| > >> @=""
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile\shell\open]
| > >> @="Mer&ge"
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile\shell\open\command]
| > >> @="regedit.exe \"%1\""
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile\shell\print]
| > >> @=""
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile\shell\print\command]
| > >> @="C:\\WINDOWS\\NOTEPAD.EXE /p %1"
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile\shell\edit]
| > >> @="&Edit"
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile\shell\edit\command]
| > >> @="C:\\WINDOWS\\NOTEPAD.EXE %1"
| > >>
| > >> --------------
| > >>
| > >> The above can be used to reset regedit to default activities by
| copying
| > > the
| > >> above to a TEXT editor, saving as a .reg, and merging, or by manual
| > > editing.
| > >> Manual editing should only be done by parties who understand a single
| > > wrong
| > >> entry may cause problems with their computer.
| > >>
| > >> --
| > >> MEB
http://peoplescounsel.orgfree.com
| > >> --
| > >> _________
| > >>
| > >>
| > >>
| > >
| > >
| >
|
|