As Far as a new module goes, my major concern is Alwil spreading itself too thin an not focusing on the Core element, virus detection. People are already screaming about virus sample submission and inclusion, so all these proposed new modules, etc. need the resources not to slow the development of the Core program. This is especially true when there are other programs that do this and some of them free.
How about taking precautions to prevent malware being able to put files in system folders and create registry entries by denying them the rights to do so by restricting their rights. As in the DropMyRights in my signature or using an account without administrator rights.