I found a solution that works really well so far. I found it at this SuperUser page. There's a file there you can copy, paste into a text document, save it as a .cmd file and run as administrator.
It installs the a sort of fake MSS folder and changes the permissions so that it can't be written into. It's been pretty effective so far.