Reply to thread

Message

<blockquote data-quote="Zorro" data-source="post: 954288" data-attributes="member: 80312">In addition to the hips rules that were recommended to you above, I recommend that you add the following rules:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\*HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\*HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\*HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\*HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\*HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\*HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\*HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\*HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\*HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\*HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DatabasePathIn addition, you can add a rule to protect the hosts file. If you use the Kaspersky Anti-Ransomware program, then you do not need to create rules for protecting document folders in Hips, but if you uninstall the Kaspersky program, then such rules can also be written.</blockquote>

[QUOTE="Zorro, post: 954288, member: 80312"] In addition to the hips rules that were recommended to you above, I recommend that you add the following rules: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\* HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DatabasePath In addition, you can add a rule to protect the hosts file. If you use the Kaspersky Anti-Ransomware program, then you do not need to create rules for protecting document folders in Hips, but if you uninstall the Kaspersky program, then such rules can also be written. [/QUOTE]

Verification