new reg key to monitor

Shouldn’t this reg key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run* be added by default in Comodo ?

I don’t have it and I think it is important.

Sorry; misread the question. :-[

You probably have it, but it’s named \SOFTWARE\Microsoft\Windows\CurrentVersion\Run and not HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run*.


[ at ] pykko: Good find.

[ at ] Ragwing: There is \SOFTWARE\Microsoft\Windows\CurrentVersion\polices\Explorer\Run but not the \SOFTWARE\Microsoft\Windows\CurrentVersion\Run .

I believe these should be also added for improved security:


*\Software\Microsoft\Windows NT\CurrentVersion\Windows*

*\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit*

Same here, I had to add it manually. Egemen said something about something about this fixed in the .268 release but I still didn’t have it. There’s a “*\SOFTWARE\Microsoft\Windows\CurrentVersion\Load”, however.

No, there isn’t. Hope it will be added in the next update

The key is there but if you import your previous ruleset it will not be added.

very strange I can’t see it. Eh, I’ll reinstall perhaps when the new version is out.

.268 was the first version of cpf3 I installed, and I have that key.

[attachment deleted by admin]

Well, it isn’t there if you restore your settings saved in previous version. CFP didn’t add this key even when I removed ‘Automatic Starup’ rules set and added it once again. This is serious issue. Noone wants to make rules from scratch everytime CFP is updated.