prosecurity not protecting my registry it seems

I trying out prosecurity. I already have kaspersky av and all proactive enabled but i disabled it so prosecurity does it instead. To test it i created a key and value in HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run manually and prosecurity didn't even alert me it had been created. It was set to registry protect in the options and this registry location was listed with a * and set on ask. Previously kaspersky proactive alerted me when a key had been created. Maybe it only works when it gets created by a program by api etc not manually. I didn't change any of the option all on default and i turned off learning mode and rebooted. I'm perplexed why it wont alert me and so disappointed. I go back to kaspersky if it can't do this.

 

From regedit you can create keys try changing a value from a startup tuner
http://www.mlin.net/StartupCPL.shtml

The key is covered

 

WoW! Even old freeware regprot would alert to any registry KEY being added at the run line mentioned.

 

Ok i created 3 startup programs in HKLM/Run from within your startup program and prosecurity did nothing. Balloon alerts are turned on and it running normally. All is running well it says. I hear such good protection from prosecurity. Theres a ton of startup locations listed including that one in the options enabled. Thanks for the startup program but i think that any startup program software that don't list activex installed components as crap because this is a hidden startup trojans can come from. A good one is Autostart Viewer by diamondcs.

 

If you want to block the creation of subkeys (and values therein), you need to modify your "Run" rule(s):

HKLM\Software\Microsoft\Windows\Currentversion\Run*\*\

I do not believe that a value within a "Run" subkey is a valid Windows autostart trigger.

Nick

 

markymoo,
Is it the paid edition?
The free edition will not protect registry

 

Its will be setup on default to protect that location surely.

I have the demo edition. This would explain why it don't work...

I just discovered Returnil and Baseline Shield. Wow

Thanks All.

 

yes the free one man band programs like regprot and drive snapshot do it better. less red tape to get it done.