Protect regsvr32.exe to run

Discussion in 'ProcessGuard' started by hswanfang, Oct 8, 2005.

Thread Status:
Not open for further replies.
  1. hswanfang

    hswanfang Registered Member

    Joined:
    Sep 19, 2005
    Posts:
    8
    many trojan use regsvr32.exe to run,can you add a function to control it?
     
  2. Paranoid2000

    Paranoid2000 Registered Member

    Joined:
    May 2, 2004
    Posts:
    2,839
    Location:
    North West, United Kingdom
    Leave it at "Permit Once" and you will be prompted whenever it is used. Regsvr32 itself just makes registry changes for registering DLLs - the likes of RunDLL32.exe, Cmd.exe, Javaw.exe and Net.exe are more likely to be used to carry out malicious actions.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.