Final Word was Mac Security: OSX.Exploit.MetaData.B Trojan 3262

Snit

There is no "regedit32" but buttuming you meant regedt32 and regedit they execute the same program. I just type "regedt32" from years of habit. In days of past regedit would allow you to search the registry, which was nice, but did not allow editing some types of values, so you would use both programs.

WFP, plus MSI packages (and their ability to repair files, etc.) might be, but I wouldn't say for sure without more reading into the topic. (I am not that interested).

Well, I don't know of any "non-standard" tools that make it any easier. I just don't think it is the tool that is the issue, but trying to determine what the appropriate security should be for every system folder and file is a mess, with Microsoft documentation often inaccurate or contradicting itself. At my last company we locked down the systems (Windows 2000 Pro, some 75,000 worldwide) so that users did not have local Admin rights but that took a lot of work to get that right, with many many workarounds.

Steve