Saturday, March 21, 2009

Disable/Enable Registry Editing tools in Windows

3/21/2009 11:36:00 AM |

THANKS TO DOUG KNOX!!!!!! This gives back access to REGEDIT!
http://www.dougknox.com/security/scripts_desc/regtools.htm
regtools.vbs - Disable/Enable Registry Editing tools in Windows
© Doug Knox - rev 01/10/2000 This code may be freely distributed/modified.
Usage: Download regtools.vbs Save the file to the folder of your choice. Double click the VBS file. The VB Script file will check for the appropriate value and if not found will create it. If the value was found, it will be toggled to its opposite state and you will be informed that you need to log off/back on or restart your computer. One note. This change is made in HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Syst­em. Disabling the tools takes effect immediately. Enabling requires a restart. This script can be viewed in Notepad or any text editor, as to the specific Registry key and value that are updated. Your antivirus software may report this script as potentially malicious, or a possible virus. This is because the script writes to the System Registry.

Then go to regedit and edit the following
HKEY_CURRENT_USER
SOFTWARE
MICROSOFT
WINDOWS
CURRENT VERSION
POLICIES
EXPLORER

ONCE YOU GET HERE START AT THE BOTTOM OF THE LIST AND DELETE THE ENTRIES----YOU CAN DELETE THEM ALL BUT I LEFT THE TOP ONE WHICH IN MY CASE WAS “ AB DEFAULT”

Then, check the registry to see if "NoDispCpl" had been added.
"Deny Access to the Display Settings"
http://www.winguides.com/registry/display.php/167/

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies
\System]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
\CurrentVersion\Policies\System]
Value Name: NoDispCPL
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disabled, 1 = enabled)
In regedit use the edit option to FIND any of the following entries in the registry
DisableRegistryTools delete any entries found
DisableTaskMgr delete any entries found
NoDispCpl delete any entries found
Virus Alert!
Also if the worm put VIRUS ALERT! By the time go control panel---regional and
Language----click customize---------and delete VIRUS ALERT!

AddThis Feed Button
Bookmark and Share

You Might Also Like :


0 comments: