Hello All, I have noticed that my computer's registry has
been modified via the internet by spyware companies.
They add or modify entries into my registry via the web.
Is there a way to stop my registry from being modified
without my permission?

I really would appreciate any help on this topic.

Thanks

Chuck

The way that this happens is when you have run something
that you got from the web, it can do whatever the accout
you are using can do.
Most limited accounts cannot change much of the registry,
mostly only the account's own registry areas.
So, one way to limit this behavior is to use a limited account.
There is one category of more malicious code that exploits
unpatched weaknesses to run with system capabilities, and
these can write on the registry even when one is using an
account that is limited. For these you need to be careful to
remain patched and to use common sense on what you are
willing to allow to run.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Chuck" <(E-Mail Removed)> wrote in message
news:005701c3cb29$64b00220$(E-Mail Removed)...
> Hello All, I have noticed that my computer's registry has
> been modified via the internet by spyware companies.
> They add or modify entries into my registry via the web.
> Is there a way to stop my registry from being modified
> without my permission?
>
> I really would appreciate any help on this topic.
>
> Thanks
>
> Chuck

You likely have Actrive Scripting enabled in your Internet Zone.
You should disable Active Scripting
Tools > Internet Options > Security > Internet > and change Active Scripting to disable or prompt.
For those sites that require Active Scripting, such as Microsoft Updates, add the site's URL to your Trusted Sites.
If you think you have Spyware, download Adaware and/or Spybot.
http://download.com.com/3000-2144-10...age&tag=button
http://majorgeeks.com/download.php?det=506

>-----Original Message-----
>Hello All, I have noticed that my computer's registry
has
>been modified via the internet by spyware companies.
>They add or modify entries into my registry via the
web.
>Is there a way to stop my registry from being modified
>without my permission?
>
>I really would appreciate any help on this topic.
>
>Thanks
>
>Chuck
>.
>Chuck, i'm looking for the same bit of info; did you
ever receive a reply?

Thanks

Sorry to be the bearer of bad news, but the registry was probably changed by
something running in your user context - changed by you, whether you knew it
or not.

The best way to deal with this (IMHO) is to check for viruses and spyware on
a regular basis, keep up to date on any patches, and don't run anything you
can't trust.
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


"hannibal" <(E-Mail Removed)> wrote in message
news:250601c3d339$48050130$(E-Mail Removed)...
>
> >-----Original Message-----
> >Hello All, I have noticed that my computer's registry
> has
> >been modified via the internet by spyware companies.
> >They add or modify entries into my registry via the
> web.
> >Is there a way to stop my registry from being modified
> >without my permission?
> >
> >I really would appreciate any help on this topic.
> >
> >Thanks
> >
> >Chuck
> >.
> >Chuck, i'm looking for the same bit of info; did you
> ever receive a reply?
>
> Thanks