deny copying/opening/modifying/finding/deleting any specified file;log any access to system files/registry keys;can work without running the main program;