Author Topic: Registry monitor not working  (Read 9025 times)

0 Members and 1 Guest are viewing this topic.

Offline fletch

  • Full Member
  • ***
  • Posts: 43
    • View Profile
Re: Registry monitor not working
« Reply #15 on: December 13, 2015, 07:23:24 PM »
Settings attached...


Offline Bret Lowry

  • WinPatrol Developer
  • Visiting Experts
  • Sr. Member
  • *****
  • Posts: 320
    • View Profile
Re: Registry monitor not working
« Reply #16 on: December 15, 2015, 07:02:20 PM »
Hi all I was pointed to this thread.

WinPatrol "should" prompt is the protected registry key is altered, unless it is a "Locked" key.
You can lock the key in the manner Corrine stated, by checking the box "Always protect this key. Do not alert me to changes."
You can also Lock/Unlock keys by right-clicking on one and selecting the appropriate option.

The key in question in this thread (and support emails) was not locked. Therefore, WinPatrol should have raised a message.

On my local computer and on our test computers registry monitoring works as expected. So, something odd is going on.

I just thought of this. Please check to see if all of the protected registry keys valid.
If not, please remove any non-existing keys. I've seen where this can result in the failure of WinPatrol to raise a prompt when a key is altered.

If are running an older version of WinPatrol for some reason and have the start-up program is defined using the -expressboot option, please remove it. V 33.6.2015.18 ignores that option because it's use resulted in many of the unwanted prompts and failure of prompts to be raised for registry key changes among other issues.

Worst case, I suggest removing all protected registry keys, restarting your computer and redefining them.

Also, we will be employing some of the newer technologies we're using in WinAntiRansom in WinPatrol in 2016. This will let us do a much more consistent job of monitoring registry keys as well as other changes.

I hope this helps.

Thanks,
Bret.



Offline fletch

  • Full Member
  • ***
  • Posts: 43
    • View Profile
Re: Registry monitor not working
« Reply #17 on: December 15, 2015, 07:42:25 PM »
Glad we cleared that up  :)

I'm running the latest version.  But, I've not changed the startup entry since it was added in 2009 so -expressboot is now gone.

Hmmm, wonder if Norton or MWB is blocking WP somehow?  Can't imaging "querying" a registry key being something that would be blocked by anything though.

If there is a key in the list that's not valid, WP should indicate that somehow in the listing.  Aside from the one I added and discussed here, the others were defaults I think.  I don't remember adding them manually.  In addition, an invalid key should not prevent WP from alerting.  It just should be skipped or a warning issued. 

Having said that, on your systems that alerting is working on, what keys are in your list?  The original defaults?

http://www.landzdown.com/winpatrol-help-information/registry-monitor-not-working/msg181507/#msg181507



Offline fletch

  • Full Member
  • ***
  • Posts: 43
    • View Profile
Re: Registry monitor not working
« Reply #18 on: December 15, 2015, 08:05:27 PM »
Ok, the image below illustrates the results.  The two entries that did not exist have now been added to the registry.

What about HKEY_CURRENT_USER\Software\BillP Studios\WinPatrol\Options?  Should it be FileType or FileTypes?

In the registry it's FileType = 0.  What does that do?  The WP example suggest it be "1".  What's up?

Here's a couple of to do's. 

1.  Enable right click navigation to regedit on the selected key.
2.  Enable right click edit of the item.  Currently if there's a typo, you have to start over from scratch.