Protect regsvr32.exe to run

Discussion in 'ProcessGuard' started by hswanfang, Oct 8, 2005.

Thread Status:
Not open for further replies.
  1. hswanfang

    hswanfang Registered Member

    Joined:
    Sep 19, 2005
    Posts:
    8
    many trojan use regsvr32.exe to run,can you add a function to control it?
     
  2. Paranoid2000

    Paranoid2000 Registered Member

    Joined:
    May 2, 2004
    Posts:
    2,839
    Location:
    North West, United Kingdom
    Leave it at "Permit Once" and you will be prompted whenever it is used. Regsvr32 itself just makes registry changes for registering DLLs - the likes of RunDLL32.exe, Cmd.exe, Javaw.exe and Net.exe are more likely to be used to carry out malicious actions.
     
Thread Status:
Not open for further replies.