SIMBE Blog

Registry Manipulation

This post, we’ll give some of tips and tricks along windows registry.

The Windows Registry is a directory which stores settings and options for the operating system for Microsoft Windows 32-bit versions, 64-bit versions, and Windows Mobile. It contains information and settings for all the hardware, operating system software, most non-operating system software, users, preferences of the PC, etc. Whenever a user makes changes to Control Panel settings, file associations, system policies, or most installed software, the changes are reflected and stored in the registry. The registry also provides a window into the operation of the kernel, exposing runtime information such as performance counters and currently active hardware. This use of registry mechanism is conceptually similar to the way that Sysfs and procfs expose runtime information through the file system (traditionally viewed as a place for permanent storage), though the information made available by each of them differs tremendously.

Source : Wikipedia

Some of tips and trick on registry :

1. to access registry windows, just enter words “regedit” at Run command (Start -> Run)
2. we’ll use operating system windows xp as our example, maybe there are some keys and subkeys that are different. The key is the part shown as a folder at the left side of the Registry Editor. Overall it will not affect the part we change.
3. If there are no keys or values right click at the key or the blank space at Registry Editor then choose New. After type the value, double click the related value.
4. For DWORD value type, there are 2 ways of entering the value, decimal and hexadecimal. Writer recommends to use decimal type since it is easier.
5.To simplify the writings :

- HKEY_CLASSES_ROOT = HKCR

- HKEY_CURRENT_USER = HKCU

- HKEY_LOCAL_MACHINE = HKCM

- HKEY_USERS = HKUS

- HKEY_CURRENT_CONFIG = HKCC

1. Vanishing Find Utility
Enter : HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Enter New Value for :
Value Type : DWORD
Value Name : NoFind
Value Data : 0×00000001 (hexadecimal) or 1 (decimal)

2. Vanishing Run Utility
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Enter New Value for :
Value Type : DWORD
Value Name : NoRun
Value Data : 0×00000001 (hexadecimal) or 1 (decimal)

3. Vanishing Setting Utility
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Enter New Value for :
Value Type : DWORD
Value Name : NoSetFolders
Value Data : 0×00000001 (hexadecimal) or 1 (decimal)

4. Vanishing Shutdown Utility
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Enter New Value for :
Value Type : DWORD
Value Name : NoClose
Value Data : 0×00000001 (hexadecimal) or 1 (decimal)

5. Vanishing Taskbar Utility
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Enter New Value for :
Value Type : DWORD
Value Name : NoSetTaskbar
Value Data : 0×00000001 (hexadecimal) or 1 (decimal)

6. Hide Desktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Enter New Value for :
Value Type : DWORD
Value Name : NoDrives
Value Data : 0×00000001 (hexadecimal) or 1 (decimal)

7. Hide Cursor Shortcut
Go to:
HKEY_CLASSES_ROOT\piffile
HKEY_CLASSES_ROOT\lnkfile

Delete or replace the value for ‘IsShortcut’

Bookmark It