registry monitor program

Hi All,
  In response to a recent series of virus attacks where the malicious code
alters the registry on my dev machine I've written a program that uses
RegNotifyChangeKeyValue( ) to monitor the registry for any and all changes,
now that the program can detect changes to any and all registry keys (and
sub-keys) is there a way to programmatically deny any detected changes? It
doesn't do much good to only be notified about the change(s) if I can't deny
any that weren't my idea. Thanks guys.