Please Sign In with Norton Account to Ask a Question or comment in the Community
Product Announcement: Norton Security 22.23.4.6 for Windows is now available!
I would like to see Norton use a monitored and locked area of the registry to store certain parameters and values that never can be changed by outside influences (i.e. - malware, user intervention that actually cripples the software from performing properly, OS corruption, etc.). The Norton software would be the only access path to these values and also the only way to remove them.
Posted: 29-Mar-2010 | 3:34AM · Permalink
athena, Can I? ;)
I think Norton should prevent from editing this registry keys:
HKLM\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options
HKLM\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon", "Shell"
HKLM\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon", "UIHost"
HKLM\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon", "Userinit"
HKLM\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify"
HKLM\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Windows", "AppInit_DLLs"
HKLM\SOFTWARE\\Classes\\exefile"
HKLM\SOFTWARE\\Classes\\scrfile"
HKLM\SOFTWARE\\Classes\\cmdfile"
HKLM\SOFTWARE\\Classes\\batfile"
HKLM\SOFTWARE\\Classes\\piffile"
Posted: 29-Mar-2010 | 6:12AM · Permalink
How would this be used? Basically, certain sections or keys would be under Norton's monitoring control. Maybe things like the Run keys (Run Once; Run; etc.) could be monitored to stop malware from using these keys to start at bootup. Also, Norton could lock its GUI interface to always startup instead of relying on the service to be perfect and running. I not saying that Norton needs to be a Registry Fix-All but monitoring and / or locking certain keys or values (see the post by EzzO above) could be useful; this could also be another form of defense for the Norton product itself to keep malware from blocking Norton from functioning.
Other vendors do this very successfully.
Posted: 29-Mar-2010 | 1:05PM · Permalink
This would be a good idea but coming to a concensus on what registry entries to protect would, I feel, be a bit of a headache.
Login or register to participate.