Link to home
Start Free TrialLog in
Avatar of Tzeacla
Tzeacla

asked on

Intercept registry changes

Hello,

Can someone tell me how can I intercept, in DELPHI, registry changes from other applications and block them?
Avatar of Madshi
Madshi

May I ask for what purpose you need that?
Avatar of Tzeacla

ASKER

For a monitoring software to prevent spyware installation!
Ok, you have 4 choices, I think:

(1) Either write a device driver. You'll need one for win9x and another one for winNT. Unfortunately you can't really do that with Delphi. Or:

(2) Use API hooking. See here: http://help.madshi.net/madCodeHook.htm. Or:

(3) If you only need to watch some specific registry keys/values, you could use "RegNotifyChangeKeyValue". This doesn't work on all OSs, though.

(4) Alternatively to (3), if you only need to watch some specific registry keys/values, you could also set up a timer and periodically check those specific registry keys/values.
Avatar of Tzeacla

ASKER

The most usefull is to use API hooking.

But I don't know very much delphi. Coud you write the code?
I don't have the time for that, I'm sorry...
ASKER CERTIFIED SOLUTION
Avatar of modulo
modulo

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial