This content has been marked as final. Show 2 replies
I would start by looking at VirusScan Access Protection, as this can prevent the modification of the registry.
If it were having an effect you would see it recorded in the local access protection log.
I'll see it right now.