quote:
Originally posted by ShawnZ
quote:
Originally posted by vikke
if you block the registry access in executables Windows would stop working.
obviously, i didn't mean executables that are part of the system
quote:
Originally posted by vikke
I hope you understand what I mean.
not really.
Viruses are often part of the system. Either injected or running as a service. And any executable which is blocked from registry will stop working as every Win32 application is independent of the registry.
Blocking every program (with PE-files) would just be stupid, all programs would stop working. However if you block it from scripts, there's a chance you actually stop a virus.
There could be other methods which are more accurate than registry blocking, but Symantec chose to apply this block, and I don't see why to remove a block that actually blocks viruses quite often.
/ 
