Repeat that permissions routine for every registry key you want to monitor. Note, however, that perhaps one percent of today’s malware is memory-resident only — that is, it doesn’t write itself to permanent storage. As such, it does not …