Tzeacla
asked on
Intercept registry changes
Hello,
Can someone tell me how can I intercept, in DELPHI, registry changes from other applications and block them?
Can someone tell me how can I intercept, in DELPHI, registry changes from other applications and block them?
May I ask for what purpose you need that?
ASKER
For a monitoring software to prevent spyware installation!
Ok, you have 4 choices, I think:
(1) Either write a device driver. You'll need one for win9x and another one for winNT. Unfortunately you can't really do that with Delphi. Or:
(2) Use API hooking. See here: http://help.madshi.net/madCodeHook.htm. Or:
(3) If you only need to watch some specific registry keys/values, you could use "RegNotifyChangeKeyValue". This doesn't work on all OSs, though.
(4) Alternatively to (3), if you only need to watch some specific registry keys/values, you could also set up a timer and periodically check those specific registry keys/values.
(1) Either write a device driver. You'll need one for win9x and another one for winNT. Unfortunately you can't really do that with Delphi. Or:
(2) Use API hooking. See here: http://help.madshi.net/madCodeHook.htm. Or:
(3) If you only need to watch some specific registry keys/values, you could use "RegNotifyChangeKeyValue".
(4) Alternatively to (3), if you only need to watch some specific registry keys/values, you could also set up a timer and periodically check those specific registry keys/values.
ASKER
The most usefull is to use API hooking.
But I don't know very much delphi. Coud you write the code?
But I don't know very much delphi. Coud you write the code?
I don't have the time for that, I'm sorry...
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.