Registry Editor Windows

Memanipulasi Registry Windows

Seperti yang anda tau Registry merupakan “jantungnya” Windows berbeda dengan OS Linux yang tidak memakai Registry dan untuk orangorang yang iseng seperti saya mungkin dan anda setelah membaca artikel ini, Registry pada windows dapat dimanfaatkan untuk dimanipulasi.. jangan keterlaluan ya!!! Registry pada Windows terdapat di C:\Windows\system32\reg.r dan windows mempunyai tool untuk mengeditnya yang bernama regedit di directory yang sama pula..Delphi mempunyai Unit Registry yang dapat digunakan untuk menulis, mengganti, menghapus registry-registry Windows, dengan delphi dan sediktit pengetahuan tentang registry kita bisa melakukannya!! Misalnya:

*Mendisable TaskManager* {tambahkan Registry pada klause uses} Procedure TForm1.Form.Create(Sender:TObject); var reg:Registry; Begin reg:=TRegistry.Create; Try reg.RootKey:=HKEY_CURRENT_USER; reg.OpenKey(’\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System’,true); reg.WriteInteger(’DisableTaskMgr’,1); reg1.CloseKey; Finally reg.free; end; end;

Agar Aplikasi jalan saat window pertama aktip User_key:[HKEY_LOCAL_MACHINE\Software\Microsoft\Wind ows\CurrentVersion\Run Name:String nama applikasi{sperti contoh make virus with delphi Type:REG_SZ(String_Value) Value:

Disable TaskManager User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ System] Name: DisableTaskMgr Type: REG_DWORD (DWORD Value) Value: (0 = default, 1 = disable Task Manager)
jika typenya DWORD maka reg.writenya integer. diatas adalah Value2/nilai untuk mendisable TaskManger,anda juga bisa memanipulasi value-value yang lain dengan melihatnya di Regedit tool yang penting adalah parameter-parameternya… anda tidak perlu repot2 membuka regedit untuk melihat nilai-nilai yang lain saya saya sudah merangkum sebagian nilai-nilai yang biasa di gunakan.kuarang baik apa saya coba untuk pengunjung fajardelhpiscript,,he…nih:

Mendisable regedit User Key: [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ System] Name: DisableRegistryTools Type: REG_DWORD (DWORD Value) Value: (0 = allow regedit, 1 = disable regedit)

Menghilangkan “RUN” dari Start Menu User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] Name: NoRun Type: REG_DWORD (DWORD Value) Value: (0 = disabled, 1 = enabled) System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] Name: IgnoreShiftOveride Type: REG_DWORD (DWORD Value) Value: (0 = default, 1 = ignore shift) menDisable Taskbar Context Menu User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] Name: NoTrayContextMenu Type: REG_DWORD (DWORD Value) Value: (0 = disabled, 1 = enabled)

Menyembunyikan subfolder Start Menu User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] Name: NoStartMenuSubFolders Type: REG_DWORD (DWORD Value) Value: (0 = default, 1 = enable restriction)

MEnghilangkan tombol All Program dari start menu User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] Name: NoStartMenuMorePrograms Type: REG_DWORD (DWORD Value) Value: (0 = default, 1 = disable button)

Disable kemampuan klik kanan di Desktop User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] Name: NoViewContextMenu Type: REG_DWORD (DWORD Value) Value: (0 = disabled, 1 = enabled)

menDisable Task Scheduler System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices] Name: SchedulingAgent Type: REG_SZ (String Value) Value: mstask.exe

Disablemen MS-DOS Command Prompt User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ WinOldApp] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ WinOldApp] Name: Disabled Type: REG_DWORD (DWORD Value) Value: (0 = disable, 1 = enable)

menDisable Command Prompt dan Batch Files User Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System] Name: DisableCMD Type: REG_DWORD (DWORD Value) Value: (0 = default, 1 = disabled, 2 = disabled but allow batch) Run Start up di CMD(Command Prompt) User Key: [HKEY_CURRENT_USER\Software\Microsoft\Command Processor] Name: AutoRun Type: REG_SZ (String Value) Value: Command to Execute ex:AutoRun REG_SZ “c:\batch\environ.bat”
kalau lebih dari satu maka ?”command1 && command2?

menspesifikasi exe file saat winlogon System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Name: System Type: REG_SZ (String Value) Value: (default = lsass.exe)

menDisable Menu Bars dan Start Button ubah nama key dengan mengganti “-” di atas GUID (i.e. {-5b4dae26-b807-11d0-9815-00c04fd91972}). System Key: [HKEY_CLASSES_ROOT\CLSID\{5b4dae26-b807-11d0-9815-00c04fd91972}]

Hide or Display Administrative Tools Menu User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ Advanced] Name: StartMenuAdminTools Type: REG_SZ (String Value) Value: Yes or No

menghilagkan kemampuan klik kanan di start menu Button (All Windows) Nilai manipulasi ini akan kelihatan ketika user menekan klik kanan pada tombol start untuk memilih Explore atau Find. key [HKEY_CLASSES_ROOT\Directory\shell] kemudian nilai ’shell’ ganti menjadi ’shell.old’. lakukan juga pada key [HKEY_CLASSES_ROOT\Folder\shell] dan ganti nilainya menjadi [...\shell.old].

menghilangkan Control Panel, Printer dan Network Settings User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] Name: NoSetFolders Type: REG_DWORD (DWORD Value) Value: (0 = disabled, 1 = enabled)

menghilangkan setting taskbar di start menu User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] Name: NoSetTaskbar Type: REG_DWORD (DWORD Value) Value: (0 = disabled, 1 = enabled)

menghilangkan tombol logoff di start menu User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] Name: NoLogOff Type: REG_DWORD (DWORD Value) Value: (1 = no log off, 0 = show log off) Disable Drag-dan-Drop di Start Menu User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] Name: NoChangeStartMenu Type: REG_DWORD (DWORD Value) Value: (0 = disable restriction, 1 = enable restriction)

menghilangkan Run dari Start Menu User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] Name: NoRun Type: REG_DWORD (DWORD Value) Value: (0 = disabled, 1 = enabled)

menghilangkan “Search” dari Start Menu User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] Name: NoFind Type: REG_DWORD (DWORD Value) Value: (0 = disabled, 1 = enabled)

MEnghilangkan Tray Items dari Taskbar User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] Name: NoTrayItemsDisplay Type: REG_DWORD (DWORD Value) Value: (0 = default, 1 = enable restriction Disable Folder Options Menu User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] Name: NoFolderOptions Type: REG_DWORD (DWORD Value) Value: (0 = show options, 1 = hide options)

Remove Properties from My Computer User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] Name: NoPropertiesMyComputer Type: REG_DWORD (DWORD Value) Value: (0 = Properties, 1 = No Properties)

menghilangkan semua Items di Desktop User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] Name: NoDesktop Type: REG_DWORD (DWORD Value) Value: (0 = disable restriction, 1 = enabled restriction)

Disable Hotkeys Windows User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer] Name: NoWinKeys Type: REG_DWORD (DWORD Value) Value: (0 = disable restriction, 1 = enable restriction)

Peringatan HardDisk penuh System Key: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\ Parameters] Name: DiskSpaceThreshold Type: REG_DWORD (DWORD Value) Value: 0 - 99 percent (Default is 10)
semoga bermanfaat…