Block Write Access To Run and RunOnce Registry Entries.

Your system becomes unstable because of the malware programs running in the background. You identify these programs and kill them in the Task Manager but these programs will re-appear in the Task Manager after you reboot the system. This is because these programs will run again from the below mentioned registry keys:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

To run only allowed programs, you need to modify the permissions on the Run and RunOnce registry keys.

Steps:

  • 1. Remove all the unwanted programs from Run and RunOnce registry keys using Registry Editor.
  • 2. Remove any other account from the Security Tab except SYSTEM Account and grant this accound only the “Read Only” permission.
  • 3. Reboot your system.

 

Leave a Comment

Your email address will not be published.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Scroll to Top