1. quickly delete a key value
In general, to delete a key or key value in the registry, open the Registry Editor and locate the relevant branch to delete it. But what if we want to perform the same operation on multiple computers? Or is this delete operation frequently required? This is inconvenient. In fact, you can delete the *. reg file by double-clicking the *. reg file.
Delete A registry branch: Open Registry Editor, export the branch to be deleted as the *. reg file, and open the file with notepad, as shown in "[HKEY_LOCAL_MACHINESOFTWARE…]" To "[-HKEY_LOCAL_MACHINESOFTWARE…]" You can.
Delete a registry key: export the key *. reg file, open the file with "Notepad", and modify the key value of the key to be deleted to "-". To delete a key named "cfan", change it to the following format: "cfan" = -.
2. Fixed the Registry Association of the EXE file.
After a trojan is detected, the most troublesome part is not the detection and removal process, but the system configuration and recovery process after the trojan is detected. Because Trojans are generally interested in the registry, anti-virus software does not automatically repair the registry after the virus is detected, so it is often unavailable after the virus is detected. The Registry Association of the EXE file is the most typical example. How to quickly fix it?
(1) You can modify the Registry through regedit.exe after running the EXE file. Therefore, you must rename the regedit.exe file in the C: Windows directory to Regedit.com and run Regedit.com to start the Registry Editor ".
(2) hkey_classes_root.exe], and change the "default" key value in the right window to "exefile ".
(3) Expand the [HKEY_CLASSES_ROOTexefileshellopencommand] branch in sequence, and change the "default" key value in the right window to "" % 1 "% *" (do not enclose it in quotation marks ).
(4) Close "Registry Editor" and run an EXE File to check whether it is normal. If not, click here to download an "EXE File Association Fix" File, decompress the package and merge the file into the registry.
3. Homemade Net Transport 128 thread patch
Step 1: click "starting from" run ", enter" “regedit.exe "(without quotation marks), press enter, open" Registry Editor ", go
[HKEY_CURRENT_USERSoftwareXiNetTransport 2 Download].
Step 2: Create a DWORD Value in the edit box on the right and name it "Max Threads". Double-click the value and enter 128 in "value, in "base", select "hexadecimal ".
Step 3: Select "File> export ", set the "Save type" to "Win9x/NT4 registration file" (the Registry file exported using the default save type cannot be imported under Windows 9x in Windows 2000/XP ), save as 128threads. reg.
Step 4: Copy threads. reg and name the new file uninstall128.reg. open the file in notepad and copy "Max Threads" = dworD under the subitem [HKEY_CURRENT_USERSoftwareXiNetTransport 2 Download: 00000128 "is changed to" "MaxThreads" =-"(excluding Chinese quotation marks outside). In the Registry file, set the key
If the value is set to "-", the key value is deleted. You only need to double-click Import 128threads. reg to install the 128 thread patch, and double-click Import uninstall128.reg to restore the status before the patch is installed.
4. automatically back up the Registry
[HKEY_CURRENT_USER] and [HKEY_LOCAL_MACHINE] are the most common targets of hacker programs, backdoors, viruses, and malicious websites. Once the data under these two branches is modified by viruses, it is very difficult to troubleshoot the modified data one by one, but it is quite troublesome to manually enter commands to back up the data. How can we quickly back up and restore the system that has been hijacked?
Step 1: Open notepad, enter the following content, and save it as myregbak. bat:
@ Echo off
Set mypath = "C: myfolder" % date % ""
If exist "% mypath %" rd/s/q "% mypath %"
Md "% mypath %"
Cd "% mypath %"
Reg export hkcu myreg. reg
Reg export hklm sysreg. reg
The main idea of this script is: first define a variable and set it to a directory named on the day under C: myfolder. If the directory does not exist, create the directory based on the variable value. Then, convert the current directory to this directory. If the user's personal registry backup file myreg. reg already exists, delete the file and re-export the user's personal registry data to the file. If the system registry backup file sysreg. reg already exists, delete it and re-export the system registry data to the file.
Tips
If you are not an administrator, you do not need to back up the registry data of the system (do not enter 7th rows ). The above batchcompute corner is tested in Windows XP and can be customized for the drive, path, and file name.
Step 2: Create a shortcut for myregbak. bat batch processing files on the desktop, taskbar, and start menu, and manually back up the files at any time.
Step 3: click "Control Panel> Task Scheduler> Add Task Scheduler", select the myregbak. bat batch file in the wizard, and create a "backup Registry" task. Right-click the "backup Registry" task icon, select "properties", click the "Schedule" tab, and select a daily scheduled or regular backup mode so that the computer can automatically back up the registry.