Question

I know that I can monitor registry changes using RegNotifyChangeKeyValue. What I am wondering is if its possible to intercept and possibly prevent reading and writing to the registry. I know some virus programs, such as Norton Anti-Virus, will popup a warning, asking if its okay for some program to modify the registry, there for, I can only assume there must be a way to do this.

Preferably, I’d prefer a managed way, using C#, however, if anyone has any idea how to do this, even if its using some WINAPI function, I’ll accept that answer too.

Thanks, in advance

Answer 1

Have a look at Easyhook – this is a managed version of an existing Microsoft Research project called Detours. This should do what you want.