Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Registry Rule action Prompt has unexpected side effect on Windows XP

Registry Rule action Prompt has unexpected side effect on Windows XP

Issue:

Created a Registry Rule to Prompt on path *\bar\* Attempts to add keys result in unexpected behavior.

 

Symptoms:

Created a new key "bar" - this prompts.  Allow the create.

Under "bar", create a new key called "aa" and block the create. 

You now see a key named "New Key #1"

Now try to delete the key named "New Key #1"

Popup: Error while deleting key.

You now have two keys: "aa" and "New Key #1"

 

Cause:

This is a limitation or the registry filter capabilities as provided by Microsoft.

Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎11-16-2015
Views:
320