Lock the registry and unlock the Registry

Source: Internet
Author: User

Lock the registry and unlock the Registry

 

Under the HKEY_CURRENT_USER/software/Microsoft/Windows/currentverssion/policies/System Branch, create the DWORD Value "disableregistrytools" and set the key value to "1 ". In this way, when someone runs the Registry Editor, the "register and edit is forbidden by the Administrator" dialog box will appear, so as to limit others to use the Registry Editor. There are many ways to unlock the Registry. Editing Reg files to import the registry is the most common.

Use the word macro to unlock

The specific method is: run the word and write the "unlock" macro as shown below to unlock the registry:

Sub unlock ()

Dim regpath as string

Regpath = "HKEY_CURRENT_USER/software

/Microsoft/Windows/CurrentVersion/policies/system"

System. privateprofilestring (filename: = "", Section: = regpath, key: = "disableregistrytools") = "OK !"

End sub

In fact, this method is not mysterious at all. It only utilizes a feature of the registry, that is, under the same registry key, there cannot be string values with the same name and DWORD values, if a previous DWORD value exists, the string value with the same name will overwrite it, which indirectly deletes the original value. In this example, the DWORD Value disableregistrytools is overwritten and deleted by the string value with the same name.

Modify the regedit.exe File

You can also unlock the Registry by modifying the regedit.exe file, provided that there are hexadecimal file editing software such as ultraedit or winhex on hand. Using ultraeditas an example, we use ultraeditto open the Registration Table editor regedit.exe. Click "Search" under the "Search" menu. In the displayed dialog box, set "√" before "Search ASCII characters". In the "Search for ASCII characters" column, enter "disableregistrytools, click "OK" to start searching. You can find only one result and change it to another character. However, the length must be the same (20 letters), so that you can disable the Registry Editor.

Disable Registry Editor

Perform a minor operation on the Registration Table editor regedit.exe to make it "immune" to the Registry disabling function, and create a registry editor that cannot be locked. This is very beneficial to prevent malicious web pages from disabling the registry. Open regedit.exe with the hexadecimal file editor ultraeditand search for 74 1B 6a 10 A1 00. Then, change 74 to EB. Now you have an unlockable Registry Editor. You don't have to worry about disabling the Registry next time. Just run it and the modification of the malicious webpage is invalid.

Unlock with INF file

The inf file is composed of sections. The name of a section is in brackets and must be unique in this file. The name of a section is its entry point. The content in the following section is in the form of "key name = key value ". You can add comments to the file, which are completed by a semicolon. The content after the semicolon is not interpreted and executed. Let's get started and use NotePad to edit the following files:

Unlock with INF file

[Version]

Signature = "$ Chicago $"

[Defainstall install]

Delreg = del

[Del]

Hkcu, software/Microsoft/Windows/CurrentVersion/policies/

System, disableregistrytools,

1, 00, 00, 00

Save the above content as del. INF. When using it, right-click it and select "Install" in the pop-up menu to unlock the registry.

Unlock with JScript

Use NotePad to edit the following files and save them as any files suffixed with. js. You can double-click them.

VaR wshshell = wscript. crea-tobjet ("wscript. Shell ");

Wshshell. Popup ("unlock the registry for you ");

Wshshell. regwrite ("hkcu // software // Microsoft //

Windows // CurrentVersion // policies //

System // disableregistrytools ", 0," REG_DWORD ");

We can see that when using js to perform operations on the key value, we need to use two slash "//" and use ";" to end the operation. Generally, you only need to pay attention to these two points.

Use Vbscript to unlock

Use NotePad to edit the following content:

Dim wsh

Set wsh = wscript. Createobject ("wscript. Shell ")

Wsh. Popup ("unlock the registry for you !")

Wsh. regwrite "hkcu/software/Microsoft/Windows/

CurrentVersion/policies/system/disableregistrytools ", 0," REG_DWORD"

Wsh. Popup ("Registry unlocked successfully !")

Save the preceding content as any file with the. vbs extension. Double-click the file.

Disclaimer: resources are collected by the network. I am not responsible for this. Please think twice before using it!
 

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.