But you would notice being unable to use regedit or the like.

There's no point hampering removal once you're detected if you have a good mechanism for hiding or repairing the infection.