In the case of the *Hosts* file, it would be mentioned so you'd know what to do. For other cases, if you didn't do anything then it should be denied. If it's the registry as in your example, I'd look at the key then I'd know. If the key isn't mentioned, as with anything else, deny it if you're unsure. I doubt many have gone to more websites sites as I have, 12 hrs a day, 7 days a week, for about 15 years, and countless "questionable" hacking type/malware sites, and I never once had anything try to change my hosts file. And I can count the times on one hand that my PC has been infected with something. We ALL must use various anti-malware programs, and like I said earlier we all have an obligation to ourselves **to learn** how they work. It's also an obligation to others online, for if 1 PC gets infected with something, that can and will spread to millions. You don't have to "monitor" anything, that's what the software is for, *it* does the monitoring for you. It really is simple: when it doubt, deny. Nothing should be running in the background anyway if you're installing something because that can interfere with installations, so you won't get any warnings doing that. -Clint God Bless Clint Hamilton, Owner http://www.OrpheusComputing.com http://www.ComputersCustomBuilt.com ----- Original Message ----- From: "David Grossman" > Hugh Vandervoort > > AV and Spyware programs should monitor rogue entries, so > there's not > much to worry about if you pay attention. If only it were that simple, Hugh. How many times have you received a warning message from an antivirus program, such as "there has been an attempted change of XXXXX in your Registry - accept or deny?" Sometimes I know what to do. More often that not I'm stumped when I get that message. So, when you write "there's not much to worry about if you pay attention" then I DO begin to worry. It means that I have to monitor the AV program that's monitoring my computer, and that I have to make decisions that are beyond my capabilities! David Grossman ========================= The list's FAQ's can be seen by sending an email to PCWorks-request@xxxxxxxxxxxxx with FAQ in the subject line. To unsubscribe, subscribe, set Digest or Vacation to on or off, go to //www.freelists.org/list/pcworks . You can also send an email to PCWorks-request@xxxxxxxxxxxxx with Unsubscribe in the subject line. Your member list settings can be found at //www.freelists.org/cgi-bin/lsg2.cgi/l=pcworks . Once logged in, you have access to numerous other email options. The list archives are located at //www.freelists.org/archives/pcworks/ . All email posted to the list will be placed there in the event anyone needs to look for previous posts. -zxdjhu-