Dubiaku is right, our registry monitor is checking only a few registry places. Since this also means checking files registry entries in critical places point to, our plans are to add it (it already exists) only once the file scan speed has been improved.