• Share
  • Email
  • Embed
  • Like
  • Save
  • Private Content
MELJUN CORTES Operating System Computer Tips Virus
 

MELJUN CORTES Operating System Computer Tips Virus

on

  • 368 views

MELJUN CORTES Operating System Computer Tips Virus

MELJUN CORTES Operating System Computer Tips Virus

Statistics

Views

Total Views
368
Views on SlideShare
368
Embed Views
0

Actions

Likes
0
Downloads
7
Comments
0

0 Embeds 0

No embeds

Accessibility

Categories

Upload Details

Uploaded via as Adobe PDF

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment

    MELJUN CORTES Operating System Computer Tips Virus MELJUN CORTES Operating System Computer Tips Virus Document Transcript

    • Are you among those who are not able to access or see your folder options under FileMenu>>Tools in Windows Explorer on your Windows XP ? This problem of hidden ordisabled folder options occur normally due to malicious virus (w32.rontokbro@mm)activity.The virus creates an entry in registry to disable “Folder Options” in Windows explorer.Let us see how we can fix it.Fix:In most of the cases, even if the virus is been already removed by your anti-virusprogram, it doesn’t restore the registry back to the original state. Also anti-virus usuallydoes not delete the registry entry created by the virus.For restoring the registry settings,follow the steps given belowEnable your folder options in explorer.1. Go to Start > RUNFolder options disabled by Virus / TrojanPosted by Rohit in computer problems, how to fix, virus problems, windows, xpTags: folder-options, registry, troubleshooting, virus, windows, xp25Dec Trouble:Are you among those who are not able to access or see your folder options under FileMenu>>Tools in Windows Explorer on your Windows XP ? This problem of hidden ordisabled folder options occur normally due to malicious virus (w32.rontokbro@mm)activity.The virus creates an entry in registry to disable “Folder Options” in Windows explorer.Let us see how we can fix it.
    • Fix:In most of the cases, even if the virus is been already removed by your anti-virusprogram, it doesn’t restore the registry back to the original state. Also anti-virus usuallydoes not delete the registry entry created by the virus.For restoring the registry settings,follow the steps given belowEnable your folder options in explorer.1. Go to Start > RUN 2. Type regedit and press enter.3. Go to HKEY_CURRENT_USER > Software > Microsoft > Windows >CurrentVersion > Policies > Explorer4. On the right side of the screen, you can see some registry entry names, out of them,right-click on NoFolderOptions and click Modify option.5.A new small screen pops up, on this screen, sen the value data field as 0 (zero).PressOK.That’s it but it requires reboot. Trouble Fixed.If you don’t want to play with the registry yourself ,you can also download the registryfile and double click it to add it to the registry.
    • How to disable Windows Scripting Host These instructions explain how to tell whether Windows Scripting Host (WSH) is installed on your machine and how to disable the running of VBS scripts. This can prevent some worms from infecting your computer. When Windows, Internet Explorer or some other products are installed or upgraded, Windows Scripting Host might be reinstalled. You would then have to repeat the procedures described below. Important note: Some applications require Windows Scripting Host. They will cease to function if it is disabled or removed. What to do• Windows 98• Windows 95• Windows NT 4.0• Windows 2000/Me/XP/2003 Windows 98 WSH is installed if you choose a standard installation of the operating system, or if you install Internet Explorer 5, or if you download WSH from Microsoft. To disable WSH, preventing scripts from being run: 1. From the Windows taskbar, select Start|Settings|Control Panel. 2. In the Control Panel screen, double-click the Add/Remove programs icon. 3. In the Add/Remove Programs window, open the Windows Setup tabbed page. Select Accessories and double-click. 4. In the Accessories list, find Windows Scripting Host. 5. Click on the check-box by Windows Scripting Host to deselect it.
    • 6. Click OK to return to the Add/Remove Programs window. Then click on OK.Windows 95WSH is installed if you install Internet Explorer 5, or if you download WSH from Microsoft.To prevent scripts with a .VBS extension from being run: 1. On the Desktop, or in Windows Explorer, right-click on My Computer. 2. Select Open from the menu. 3. In the My Computer window, open the View menu and select Options.... 4. Open the File Types tabbed page. 5. These instructions explain how to tell whether Windows Scripting Host (WSH) is installed on your machine and look for VBScript Script File in the list of file types (if you cant find it, you dont need to do anything else). 6. Click on the Remove button. 7. If you see a dialog asking you to confirm removal, click Yes.Windows NT 4.0WSH is installed if you install Internet Explorer 5, or if you download WSH from Microsoft.To prevent scripts with a .VBS extension from being run: 1. Log on as an administrator. 2. On the Desktop, or in Windows Explorer, right-click on My Computer. 3. Select Open from the menu. 4. In the My Computer window, open the View menu and select Options. 5. Open the File Types tabbed page.
    • 6. Look for VBScript Script File in the list of file types (if you cant find it, you dont need to do anything else). 7. Click on the Remove button. 8. If you see a dialog asking you to confirm removal, click Yes.Windows 2000/Me/XP/2003WSH is installed by default.To prevent scripts with a .VBS extension from being run: 1. Log on as an Administrator. 2. On the Desktop, or in Windows Explorer, right-click on My Computer. 3. Select Open from the menu. 4. In the My Computer window, open the Tools menu and select Folder Options. 5. Open the File Types tabbed page.
    • 6. Look for VBScript Script File in the list of file types (if you cant find it, you dont need to do anything else). 7. Click on the Delete button. 8. If you see a dialog asking you to confirm removal, click Yes.Removing the "Folder Options" menu involves modifying the Windows Group Policy editor (gpedit.msc).Just follow the below listed steps.1. Go to Start >> RunType gpedit.msc and press Enter.2. In the resulting window, navigate to the folderUser Configuration >> Administrative Templates >> Windows Components >> WindowsExplorer.Look for the key named "Removes the Folder Options menu from the Tools Menu".Double-click the key and select Enable.Click OK.
    • 3. To display the "Folder Options" menu, follow the previous steps and select the Not Configured option for the "Removes the Folder Options menu from the Tools Menu" key. If you like this, click here to get updates by emailWe have received mails from some readers of Trouble Fixers about task manager isdisabled on their system suddenly.Problem: It is due to some kind of virus/ trojan activity which normally disables the taskmanager.Now due to this problem when ever the user press alt+ctrl+del to launchwindows task manager it gives an error saying “Task Manager is being disabled by youradministrator”.Solution:To Enable the Disabled Task Manager on your system1. Press window key+r to show run prompt2. Follow the following stepsEnter gpedit.msc in the run prompt and click OKIn the Group Policy settings windowSelect User ConfigurationSelect Administrative TemplatesSelect SystemSelect Ctrl+Alt+Delete optionsSelect Remove Task ManagerDouble-click the Remove Task Manager option’.Set the property of this item as disabled.
    • For Those who use Windows XP Home Edition can use the registry to enable TaskManager1. open start >> run and type regedit2. Navigate to the following path:Hive:HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem3. You will find a registry key with name DisableTaskMgr of type: REG_DWORD4. Double click the key with and set the Value to 05. Exit the registry and restart to see the effect.Another most common problem faced due to virus infection is when certain types of viruslike rontokbro or brontok, disable command prompt, we have also covered the removal ofbrontok virus.There are also cases when the user reported that their computer restart when they try tolaunch command prompt, or command prompt blinks for a second and nothing happens.Let’s see how can you enable your command prompt again when it is disabled by a virus.Fix:There has been two most successful methods with which you can enable your disabledcommand prompt.Method 1:The simplest method to get your command prompt back is to add a registry key , but youshould be having registry editing is enabled.1. Open Start >> Run and type the following command ( or just copy it )
    • REG add HKCUSoftwarePoliciesMicrosoftWindowsSystem /v DisableCMD /tREG_DWORD /d 0 /f2. Copy the above command and press Enter.This will solve your trouble and your command prompt will be enabled.Note: Method 1 may not work when your system is severely infected by a virus and eventhe registry editing is disabled due to which you are not able to run the above commandfrom run prompt.Method 2:It involves a tool called RRT - Remove Restrictions Tool by sergiwa which can enable thedisabled command prompt by virus.It also helps in removing other restrictions which are also caused due to virus infectionlisted below.Disable Folder OptionsDisable Registry ToolsDisable Ctrl+Alt+DelDisable Show hidden files & folders come with hidden attribute set to true!Disable Run CommandOther than it also includes fixes for the removing 38 restrictions that are caused bydifferent types of viruses.Note: Make sure you boot in to Safe Mode to use Remove Restrictions Tool (RRT). Justclick on the buttons and it’ll do it’s job.
    • The limited version is RRT tool is for FREE for personal use only. If you would like touse the application in a business environment you are required to license the application.Another most common problem faced due to virus infection is when certain types of viruslike rontokbro or brontok, disable command prompt, we have also covered the removal ofbrontok virus.There are also cases when the user reported that their computer restart when they try tolaunch command prompt, or command prompt blinks for a second and nothing happens.Let’s see how can you enable your command prompt again when it is disabled by a virus.Fix:There has been two most successful methods with which you can enable your disabledcommand prompt.Method 1:The simplest method to get your command prompt back is to add a registry key , but youshould be having registry editing is enabled.1. Open Start >> Run and type the following command ( or just copy it )REG add HKCUSoftwarePoliciesMicrosoftWindowsSystem /v DisableCMD /tREG_DWORD /d 0 /f
    • 2. Copy the above command and press Enter.This will solve your trouble and your command prompt will be enabled.Note: Method 1 may not work when your system is severely infected by a virus and eventhe registry editing is disabled due to which you are not able to run the above commandfrom run prompt.Method 2:It involves a tool called RRT - Remove Restrictions Tool by sergiwa which can enable thedisabled command prompt by virus.It also helps in removing other restrictions which are also caused due to virus infectionlisted below.Disable Folder OptionsDisable Registry ToolsDisable Ctrl+Alt+DelDisable Show hidden files & folders come with hidden attribute set to true!Disable Run CommandOther than it also includes fixes for the removing 38 restrictions that are caused bydifferent types of viruses.Note: Make sure you boot in to Safe Mode to use Remove Restrictions Tool (RRT). Justclick on the buttons and it’ll do it’s job.The limited version is RRT tool is for FREE for personal use only. If you would like touse the application in a business environment you are required to license the application.We hope at least one of method given above will help to fix the trouble.
    • [ Download RRT ]We have been receiving lots of mails from our readers having problems with the registryediting on their system mostly because of virus activity.Whenever they open Run and type regedit and press enter a message prompt appearssaying “Registry editing has been disabled by your administrator“.Let’s see how can we fix it.Fix:There are two ways through which you can enable registry editing in windows XPMethod 1:You can use a simple UnHookExec.inf to enable registry editing.1. Download UnHookExec.inf2. Right click on the downloaded file and select install.Method 2:For enabling you can also use the remove restrictions tool by Sergiwa.com, if the method1 doesn’t work for you.we have already posted how you can remove the restrictions imposed by the virus withRRT1. First Download Remove Restrictions Tool2. Run and check the registry tools and click apply.Method 3:if the above two methods does not work for you , you can also try executing a smallvbscript which I found on major geeks.1. First Download EnableRegEdit.vbs
    • 2. Double click on the downloaded file to enable registry editing.We hope at least one of the above will help to fix the troubleWe have received mails from some readers of Trouble Fixers about task manager isdisabled on their system suddenly.Problem: It is due to some kind of virus/ trojan activity which normally disables the taskmanager.Now due to this problem when ever the user press alt+ctrl+del to launchwindows task manager it gives an error saying “Task Manager is being disabled by youradministrator”.Solution:To Enable the Disabled Task Manager on your system1. Press window key+r to show run prompt2. Follow the following stepsEnter gpedit.msc in the run prompt and click OKIn the Group Policy settings windowSelect User ConfigurationSelect Administrative TemplatesSelect SystemSelect Ctrl+Alt+Delete optionsSelect Remove Task ManagerDouble-click the Remove Task Manager option’.Set the property of this item as disabled.For Those who use Windows XP Home Edition can use the registry to enable TaskManager1. open start >> run and type regedit2. Navigate to the following path:Hive:HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem3. You will find a registry key with name DisableTaskMgr of type: REG_DWORD4. Double click the key with and set the Value to 0
    • 5. Exit the registry and restart to see the effect.If you still get problems in enabling the disabled task manager on your windows XPsystemWindows script host Problem--------------------------------------------------------------------------------1- your comp has a virus2- you can get rid of the message bystart > run > type "msconfig"> go to startup tab > uncheck all the stuff you dont wantloading at startup3- get a proper anti virus for your compSymptomWhen you try to open Task Manager, the following error may occur:Task Manager has been disabled by your administratorResolutionThis error is caused if the DisableTaskMgr restriction is enabled. To enable TaskManager, try one of these methods:IMPORTANT: If this restriction was enabled in your system without you doing anythingor without your knowledge, then its highly likely that a Virus has blocked the usage ofTask Manager in your system by enabling the DisableTaskMgr policy via the registry. Istrongly suggest that you perform a thorough checkup of your system immediately. Stepslisted in the Resolution section of this article helps you unblock the Task Manager, butthat does not remove the Virus (if any) from your system.Method 1Click Start, Run and type this command exactly as given below: (better - Copy and paste)Method 2Download and run this REG fix and double-click it.Method 3Click Start, Run and type Regedit.exeNavigate to the following branch:HKEY_CURRENT_USER Software Microsoft Windows CurrentVersion PoliciesSystem
    • In the right-pane, delete the value named DisableTaskMgrClose Regedit.exeMethod 4: Using Group Policy Editor - for Windows XP ProfessionalClick Start, Run, type gpedit.msc and click OK.Navigate to this branch:User Configuration / Administrative Templates / System / Ctrl+Alt+Delete Options /Remove Task ManagerDouble-click the Remove Task Manager option.Set the policy to Not Configured.How To Enable Folder Options in Windows ExplorerClick StartClick RunType REGEDITClick OKThe Registry Editor will now openBrowse to the following key:HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNote: HKCU stands for HKEY_CURRENT_USERIn the right pane, look for the value: NoFolderOptionsRight click NoFolderOptions and select Delete. (When prompted with "Are you sure youwant to delete this value", select Yes.Now browse to the following key:HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNote: HKLM stands for HKEY_LOCAL_MACHINEIn the right pane, look for the value: NoFolderOptionsRight click NoFolderOptions and select Delete. (When prompted with "Are you sure youwant to delete this value", select Yes.Close the Registry by choosing File | ExitYou should now be able to access the Folder Options menu. If not, reboot into Safe Modeand repeat the steps outlined above.Backup / Restore the RegistryTo Backup/Restore the Windows Registry: Windows 9x For XP 2000 click hereIf you are in MSDOS, at the C:Windows prompt typeAttrib -s -r -h C:WindowsSystem.dat (press Enter)Attrib -s -r -h C:WindowsUser.dat (press Enter)To make the backup copies type:copy C:WindowsSystem.dat C:WindowsSystem.000 (press Enter)copy C:WindowsUser.dat C:Windowsuser.000 (press Enter)To Restore the Registry
    • copy C:WindowsSystem.000 C:WindowsSystem.dat (press Enter)copy C:WindowsUser.000 C:Windowsuser.dat (press Enter)Add Open With to all filesYou can add "Open With..." to the Right click context menu of all files.This is great forwhen you have several programs you want to open the same file types with. I use threedifferent text editors so I added it to the ".txt" key.1. Open RegEdit2. Go to HKEY_CLASSES_ROOT*Shell3. Add a new Key named "OpenWith" by right clicking the "Shell" Key and selectingnew4. Set the (Default) to "Op&en With..."5. Add a new Key named "Command" by right clicking the "OpenWith" Key andselecting new6. Set the (Default) to "C:Windowsrundll32.exe shell32.dll,OpenAs_RunDLL %1", C:being your Windows drive. You must enter the "OpenAs_RunDLL %1" exactly this way.Customize the System TrayYou can add your name or anything you like that consists of 8 characters or less. This willreplace the AM or PM next to the system time. But you can corrupt some trial licenses ofsoftware that you may have downloaded.1. Open RegEdit2. Go to HKEY_CURRENT_USERControl PanelInternational3. Add two new String values, "s1159" and "s2359"4. Right click the new value name and modify. Enter anything you like up to 8 characters.If you enter two different values when modifying, you can have the system tray displaythe two different values in the AM and PM.Lock Out Unwanted UsersWant to keep people from accessing Windows, even as the default user? If you do nothave a domain do not attempt this.1. Open RegEdit2. Go to HKEY_LOCAL_MACHINENetworkLogon3. Create a dword value "MustBeValidated"4. Set the value to 1This forced logon can be bypassed in Safe Mode on Windows 9xDisable the Outlook Express Splash Screen
    • You can make OutLook Express load quicker by disabling the splash screen:1. Open RegEdit2. Go to HKEY_CURRENT_USERSoftwareMicrosoftOutLook Express3. Add a string value "NoSplash"4. Set the value data to 1 as a Dword valueMultiple Columns For the Start MenuTo make Windows use multiple Start Menu Columns instead of a single scrolling column,like Windows 9x had, Also if you are using Classic Mode in XP1. Open RegEdit2. Go to the keyHKEY_LOCAL_MACHINE Software Microsoft Windows CurrentVersion ExplorerAdvanced3. Create a string value "StartMenuScrollPrograms"4. Right click the new string value and select modify5. Set the value to "FALSE"Changing Windows IconsYou can change the Icons Windows uses for folders, the Start Menu, opened and closedfolder in the Explorer, and many more.1. Open RegEdit2. Go toHKEY_LOCAL_MACHINE Software Microsoft Windows CurrentVersion ExplorerShell Icons3. Add a string value for each Icon you wish to change.Example: "3" ="C:WindowsIconsMyIcon.ico,0" This will change the closed folders inthe Explorer to "MyIcon.ico". Here is a complete list for each value.0= Unknown file type1= MSN file types2= Applications Generic3= Closed Folder4= Open Folder5= 5.25" Drive6= 3.25" Drive7= Removable Drive8= Hard Drive9= NetWork Drive10= Network Drive Offline11= CD-ROM Drive12= RAM Drive
    • 13= Entire Network 14= Network Hub15= My Computer16= Printer17= Network Neighborhood18= Network Workgroup19= Start Menus Program Folders20= Start Menus Documents21= Start Menus Setting22= Start Menus Find23= Start Menus Help24= Start Menus Run25= Start Menus Suspend26= Start Menus PC Undock27= Start Menus Shutdown 28= Shared29= Shortcut Arrow30= (Unknown Overlay)31= Recycle Bin Empty32= Recycle Bin Full33= Dial-up Network34= DeskTop35= Control Panel36= Start Menus Programs37= Printer Folder38= Fonts Folder39= Taskbar Icon40= Audio CDYou need to reboot after making changes. You may need to delete the hidden fileShellIconCache if after rebooting the desired Icons are not displayed.Change Default Folder LocationsYou can change or delete the Windows mandatory locations of folder like MyDocuments:1. Open RegEdit2. Go to HKEY_CURRENT_USER Software Microsoft Windows CurrentVersionExplorer Shell Folders3. Change the desired folder location, My Documents is normally list as "Personal"4. Open the Explorer and rename or create the folder you wish.To change the desired location of the Program Files folder1. Go toHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersion2. Change the value of "ProgramFiles", or "ProgramFilesDir"
    • Now when you install a new program it will default to the new location you haveselected.Change the Registered Change the User InformationYou can change the Registered Owner or Registered Organization to anything you wanteven after Windows is installed.1) Open RegEdit2) Got toHKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows CurrentVersion.3) Change the value of "RegisteredOrganization" or "RegisteredOwner", to what ever youwantOpening a DOS Window to either the Drive or Directory in ExplorerAdd the following Registry Keys for a Directory:HKEY_CLASSES_ROOTDirectoryshellopennew@="Dos Prompt in that Directory"HKEY_CLASSES_ROOTDirectoryshellopennewcommand@="command.com /k cd %1"Add or Edit the following Registry Keys for a Drive:HKEY_CLASSES_ROOTDriveshellopennew@="Dos Prompt in that Drive"HKEY_CLASSES_ROOTDriveshellopennewcommand@="command.com /k cd %1"These will allow you to right click on either the drive or the directory and the option ofstarting the dos prompt will pop up.Changing Exchange/Outlook Mailbox LocationTo change the location of your mailbox for Exchange:1. Open RegEdit2. Go toHKEY_CURRENT_USERSoftware MicrosoftWindows Messaging SubsystemProfiles3. Go to the profile you want to change4. Go to the value name that has the file location for your mailbox (*.PST) file5. Make the change to file location or nameTo change the location of your mailbox for Outlook1. Open RegEdit
    • 2. Go to HKEY_CURRENT_USERSoftwareMicrosoftOutlook (or Outlook Express ifOutlook Express)3. Go to the section "Store Root"4. Make the change to file locationAdd/Remove Sound Events from Control PanelYou can Add and delete sounds events in the Control Panel. In order to do that:1. Open RegEdit2. Go to HKEY_CURRENT_USERAppEventsSchemesApps andHKEY_CURRENT_USERAppEventsSchemesEventlabels. If this key does not existyou can create it and add events.3. You can add/delete any items you want to or delete the ones you no longer want.Adding an Application to the Right Click on Every FolderHere is how to add any application to the Context Menu when you right click on anyFolder. This way you do not have to always go to the Start Menu. When you right clickon any folder, you can have access to that application, the same as using Sent To.1. Open RegEdit2. Go to HKEY_CLASSES_ROOTFoldershell3. Add a new Key to the "Shell" Key and name it anything you like.4. Give it a default value that will appear when you right click a folder, i.e. NewKey (usean "&" without the quotes, in front of any character and it will allow you to use thekeyboard)5. Click on the Key HKEY_CLASSES_ROOTFoldershellNewKey6. Add a New Key named Command7. Set the (Default) value of the application you want to run8. For example: c:program filesinternet exploreriexplore.exe (Include the full path andparameters if you need them)Adding Explore From Here to Every FolderWhen you want to right click on any folder and want to open up an Explorer window ofthat folder.1. Open RegEdit2. Go to HKEY_CLASSES_ROOTFoldershell3. Add a new Key "RootExplore " under the "Shell" Key4. Set the (Default) value to "E&xplore From Here "5. Right Click the "RootExplore " Key and add a new Key "Command"to theRootExplore6. Set the (Default) value of Explorer.exe /e,/root,/idlist,%i
    • Changing the Location of Windows Installation FilesIf you need to change the drive and or path where Windows looks for its installation files:1.Open RegEdit2.Go toHKEY_LOCAL_MACHINESOFTWARE Microsoft Windows CurrentVersion Setup3.Edit the value next to SourcePathCreating a Logon BannerIf you want to create a Logon Banner: A message box to appear below your logon on.1.Open RegEdit2.Go ToFor Windows 9x and ME -HKEY_LOCAL_MACHINESOFTWARE Microsoft Windows CurrentVersionWinlogonFor Windows 2000 XP 2003 Vista -HKEY_LOCAL_MACHINESOFTWARE Microsoft Windows CurrentVersionWinlogon3.Create a new String value"LegalNoticeCaption "4. Enter the Title of the window. What is displayed in the Title Bar.5. Create a new string value "LegalNoticeText"6. Enter the text for your message box that will appear even before the Logon window.Creating a Default File OpenerIf you have a un-registered file type and want to view it instead of having to select OpenWith. Use Explorers Right-click and add your program to the right-click options by:1. Open RegEdit2. Go to HKEY_CLASSES_ROOTUnknownShell3. Right click on "Shell" and create a New Key and name it "Open "4. Create a New Key under the "Open" key you just created and name it "Command"5. Set the (Default) value to the path and filename of the program you want to use to openthe file type6. For example: C:WindowsNOTEPAD.EXE %1You must use the "%1" for this to work.and a space between the exe and the %1Deleting Registry Keys from the Command LineThere are two ways to delete a key from the Registry from the Command line. At theWindows Command line:
    • RegEdit /l location of System.dat /R location of User.dat /D Registry key to deleteYou cannot be in Windows at the time you use this switch.Or you can create a reg file as such:REGEDIT4[-HKEY_LOCAL_MACHINEthe key you want to delete]Note the negative sign just behind the[Then at the Command line type:1. RegEdit C:Windows(name of the regfile).Change/Add Restrictions And FeaturesIf you want to make restrictions to what users can do or use on their computer withouthaving to run Poledit, you can edit the Registry. You can add and delete Windowsfeatures in this Key shown below.Zero is Off and the value 1 is On. Example: to Save Windows settings add or modify thevalue name NoSaveSettings to 0, if set to1 Windows will not save settings. AndNoDeletePrinter set to 1 will prevent the user from deleting a printer.The same key shows up at:HKEY_USERS(yourprofilename) Software Microsoft Windows CurrentVersionPolicies Explorer so change it there also if you are using different profiles.1.Open RegEdit2.Go toHKEY_CURRENT_USERSoftwareMicrosoft CurrentVersion Policies3.Go to the Explorer Key (Additional keys that can be created under Policies are System,Explorer, Network and WinOldApp )4.You can then add DWORD or binary values set to 1 in the appropriate keys for ON and0 for off.NoDeletePrinter - Disables Deletion of PrintersNoAddPrinter - Disables Addition of PrintersNoRun - Disables Run CommandNoSetFolders - Removes Folders from Settings on Start MenuNoSetTaskbar - Removes Taskbar from Settings on Start MenuNoFind - Removes the Find CommandNoDrives - Hides Drives in My ComputersNoNetHood - Hides the Network NeighborhoodNoDesktop - Hides all icons on the DesktopNoClose - Disables ShutdownNoSaveSettings - Dont save settings on exitDisableRegistryTools - Disable Registry Editing ToolsNoRecentDocsMenu - Hides the Documents shortcut at the Start buttonNoRecentDocsHistory- Clears history of Documents
    • NoFileMenu _ Hides the Files Menu in ExplorerNoActiveDesktop - No Active DesktopNoActiveDesktopChanges- No changes allowedNoInternetIcon - No Internet Explorer Icon on the DesktopNoFavoritesMenu - Hides the Favorites menuNoChangeStartMenu _ Disables changes to the Start MenuNoFolderOptions _ Hides the Folder Options in the ExplorerClearRecentDocsOnExit - Empty the recent Docs folder on rebootNoLogoff - Hides the Log Off .... in the Start MenuAnd here are a few more you can play withShowInfoTipNoTrayContextMenuNoStartMenuSubFoldersNoWindowsUpdateNoViewContextMenuEnforceShellExtensionSecurityLinkResolveIgnoreLinkInfoNoDriveTypeAutoRunNoStartBannerNoSetActiveDesktopEditLevelNoNetConnectDisconnectRestrictRun - Disables all exe programs except those listed in the RestrictRun subkeyThis key has many other available keys, there is one to even hide the taskbar, one to hidethe control panel and more. Im not telling you how, as someone may want to play a trickon you. The policies key has a great deal of control over how and what program can runand how one can access what feature.In the System key you can enter:NoDispCPL - Disable Display Control PanelNoDispBackgroundPage - Hide Background PageNoDispScrSavPage - Hide Screen Saver PageNoDispAppearancePage - Hide Appearance PageNoDispSettingsPage - Hide Settings PageNoSecCPL - Disable Password Control PanelNoPwdPage - Hide Password Change PageNoAdminPage - Hide Remote Administration PageNoProfilePage - Hide User Profiles PageNoDevMgrPage - Hide Device Manager PageNoConfigPage - Hide Hardware Profiles PageNoFileSysPage - Hide File System ButtonNoVirtMemPage - Hide Virtual Memory ButtonIn the Network key you can enter:NoNetSetup - Disable the Network Control Panel
    • NoNetSetupIDPage - Hide Identification PageNoNetSetupSecurityPage - Hide Access Control PageNoFileSharingControl - Disable File Sharing ControlsNoPrintSharing - Disable Print Sharing ControlsIn the WinOldApp key you can enter:Disabled - Disable MS-DOS PromptNoRealMode - Disables Single-Mode MS-DOSAutomatic Screen RefreshWhen you make changes to your file system and use Explorer, the changes are notusually displayed until you press the F5 keyTo refresh automatically:1. Open RegEdit2. Go toHKEY_LOCAL_MACHINESystemCurrentControlSetControlUpdate3. Set the value name "UpdateMode" to 1Disable Password CachingTo disable password caching, which allows for the single Network login and eliminatesthe secondary Windows logon screen. Either use the same password or:1. Open RegEdit2. Go to the keyHKEY_LOCAL_MACHINESOFTWARE Microsoft Windows CurrentVersionPolicies Network3. Add a Dword value "DisablePwdCaching" and set the value to 1Changing the MaxMTU for faster DownloadsThere are four Internet settings that can be configured, you can get greater throughput(faster Internet downloads) by modifying a few settings.They are the MaxMTU, MaxMSS and DefaultRcvWindow, and DefaultTTL1.Open RegEdit2.Go toHKEY_LOCAL_MACHINESystemCurrentControlset Services Class net 000x(where x is your particular network adapter binding.)3.Right click on the right panel4.Select NewString Value and create the value name IPMTU5.Double click on it and enter then the number you want. The usual change is to 5766.Similarly, you can add IPMSS and give it a value of 536
    • (Windows 9X)You can set DefaultRcvWindow, and DefaultTTL by adding these stringvalues to HKEY_LOCAL_MACHINE System CurrentControlset Services VXDMSTCPSet the DefaultRcvWindow to"5840"and the DefaultTTL to "128"Note: These settings will slow down your network access speed slightly, but you willprobably not even see the difference if you are using a network card. If you are usingDirect Cable you should see a sight difference.Adding Items to the Start ButtonTo add items when you right-click on the Start Button:1.Open RegEdit2.Go to HKEY_CLASSES_ROOTDirectoryShell3.Right-click on Shell and select New Key4.Type in the name of the key and press the Enter key5.In the Default name that shows in the right hand panel, you can add a title with a "&"character in front of the letter for a shortcut6.Right-click on the key you just created and create another key under it called command7.For the value of this command, enter the full path and program you want to execute8.Now when you right click on the Start Button, your new program will be there.9.For example, if you want Word to be added, you would add that as the first key, thedefault in the right panel would be &Word so when you right click on the Start Button,the W would be the Hot Key on your keyboard. The value of the key would beC:Program FilesOfficeWinwordWinword.exeRemove Open, Explore & Find from Start ButtonWhen you right click on the Start Button, you can select Open, Explore or Find.Open shows your Programs folder. Explore starts the Explorer and allows access to alldrives.Find allows you to search and then run programs. In certain situations you might want todisable this feature.To remove them:1.Open RegEdit2.Go to HKEY_CLASSES_ROOTDirectoryShellFind3.Delete Find4.Scroll down below Directory to Folder5.Expand this section under shell6.Delete Explore and OpenCaution: - When you remove Open, you cannot open any folders.Removing Items from NEW Context MenuWhen you right-click on the desktop and select New, or use the File Menu item in theExplore and select New a list of default templates you can open up are listed.
    • To remove items from that list:1. Open RegEdit2. Do a Search for the string ShellNew in the HKEY_CLASSES_ROOT Hive3. Delete the ShellNew command key for the items you want to remove.Changing Telnet WindowYou can view more data if you increase the line count of Telnet. By Default it has awindow size of 25 lines. To increase this so you can scroll back and look at a largernumber on lines:1. Open RegEdit2. Go to HKEY_CURRENT_USERSoftwareMicrosoftTelnet3. Modify the value data of "Rows"Changing the Tips of the DayYou can edit the Tips of the day in the Registry by going to:HKEY_LOCAL_MACHINESOFTWAREMicrosoft Windows CurrentVersionexplorer TipsDisabling Drives in My ComputerTo turn off the display of local or networked drives when you click on My Computer:1.Open RegEdit2.Go toHKEY_CURRENT_USERSoftware Microsoft Windows CurrentVersion PoliciesExplorer3.Add a New DWORD item and name it NoDrives4.Give it a value of 3FFFFFF5.Now when you click on My Computer, none of your drives will show.Changing the caption on the Title BarChange the Caption on the Title Bar for OutLook Express or the Internet Explorer:For Outlook Express:1. Open RegEdit2. Go toHKEY_CURRENT_USERSoftwareMicrosoftOutLook ExpressFor IE5 and up use:HKEY_CURRENT_USERIDENTITIES {9DDDACCO-38F2-11D6-93CA-812B1F3493B} SOFTWARE MICROSOFT OUTLOOK EXPRESS5.03. Add a string value "WindowTitle" (no space)4. Modify the value to what ever you like.For no splash screen, add a dword value "NoSplash" set to 1
    • The Key {9DDDACCO-38F2-11D6-93CA-812B1F3493B} can be any key you findhere. Each user has his own Key number.The Key 5.0 is whatever version of IE you haveFor Internet Explorer:1. Open RegEdit2. Go to HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerMain3. Add a string value "Window Title" (use a space)4. Modify the value to what ever you like.Disabling the Right-Click on the Start ButtonNormally, when you right button click on the Start button, it allows you to open yourprograms folder, the Explorer and run Find.In situations where you dont want to allow users to be able to do this in order to secureyour computer.1.Open RegEdit2.Search for Desktop3.This should bring you to HKEY_CLASSES_ROOTDirectory4.Expand this section5.Under Shell is Find6.Delete Find7.Move down a little in the Registry to Folder8.Expand this section and remove Explore and OpenNow when you right click on the Start button, nothing should happen.You can delete only those items that you need.Note: - On Microsoft keyboards, this also disables the Window-E (for Explorer) andWindow-F(for Find) keys.See the section on Installation in the RESKIT to see how to do this automatically duringan install.Disabling My ComputerIn areas where you are trying to restrict what users can do on the computer, it might bebeneficial to disable the ability to click on My Computer and have access to the drives,control panel etc.To disable this:1.Open RegEdit2.Search for 20D04FE0-3AEA-1069-A2D8-08002B30309D3.This should bring you to the HKEY_CLASSES_ROOTCLSID section4.Delete the entire section.Now when you click on My Computer, nothing will happen.You might want to export this section to a Registry file before deleting it just in case youwant to enable it again. Or you can rename it to 20D0HideMyComputer4FE0-3AEA-
    • 1069-A2D8-08002B30309D. You can also hide all the Desktop Icons, see Change/Addrestrictions.Opening Explorer from My ComputerBy default, when you click on the My Computer icon, you get a display of all yourdrives, the Control Panel etc. If you would like to have this open the Explorer:1. Open RegEdit2. Go toHKEY_CLASSES_ROOTCLSID {20D04FE0-3AEA-1069-A2D8-08002B30309D}Shell3 . Add a new Key named "Open" if it does not exists by right clicking "Shell" andselecting new.4. . Add a new Key named "Command" by right clicking "Open" and selecting new5. Set the (Default) value for the Command Key to "Explorer.exe" or"C:WindowsExplorer.exe"Recycle Bin EditsFooling with the recycle bin. Why not make the icon context menu act like other iconcontext menus.Add rename to the menu:HKEY_CLASSES_ROOTCLSID {645FF040-5081-101B-9F08-00AA002F954E}ShellFolder"Attributes"=hex:50,01,00,20Add delete to the menu:HKEY_CLASSES_ROOTCLSID {645FF040-5081-101B-9F08-00AA002F954E}ShellFolder"Attributes"=hex:60,01,00,20Add rename and delete to the menu:HKEY_CLASSES_ROOTCLSID {645FF040-5081-101B-9F08-00AA002F954E}ShellFolder"Attributes"=hex:70,01,00,20Restore the recycle bin to Windows defaults including un-deleting the icon after deletion:Restore the icon.HKEY_LOCAL_MACHINESOFTWARE Microsoft Windows CurrentVersionexplorerDesktopNameSpace{645FF040-5081-101B-9F08-00AA002F954E}@="Recycle Bin"Reset Windows defaults.HKEY_CLASSES_ROOTCLSID {645FF040-5081-101B-9F08-00AA002F954E}ShellFolder"Attributes"=hex:40,01,00,20Other edits to the recycle bin icon:HKEY_CLASSES_ROOTCLSID {645FF040-5081-101B-9F08-00AA002F954E}ShellFolder
    • "Attributes"=hex:40,01,01,20 ... standard shortcut arrow"Attributes"=hex:40,01,02,20 ... a different shortcut arrow"Attributes"=hex:40,01,04,20 ... and still another shortcut arrow"Attributes"=hex:40,01,08,20 ... make it look disabled (like its been cut)For Windows XP and 2000 also edit HKEY_CURRENT_USER Software MicrosoftWindows CurrentVersion Explorer CLSID {645FF040-5081-101B-9F08-00AA002F954E}For Windows ME also edit HKEY_CURRENT_USER Software Classes CLSID{645FF040-5081-101B-9F08-00AA002F954E}Setting the Minimum Password Length1.Open RegEdit2.Go toHKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows CurrentVersionPolicies Network3. Now, choose the Edit/New/Binary value command and call the new valueMinPwdLen. Press Enter twice and Assign it a value equal to your minimum passwordlength.Adddelete programs to run every time Windows startsYou can start or stop programs from executing at boot up by adding or deleting themto/from the run Keys in the Registry. Windows loads programs to start in the followingorder; Program listed in the Local Machine hive, then the Current User hive, thentheWin.ini Run= and Load = lines. then finally programs in your Start Up folder.To add or remove programs in the Registry1.Open RegEdit2.Go to the desired KeyHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows CurrentVersion RunHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows CurrentVersionRunServicesHKEY_CURRENT_USERSOFTWAREMicrosoftWindows CurrentVersion RunHKEY_CURRENT_USERSOFTWAREMicrosoftWindows CurrentVersionRunServices3. Add a new String Value and name it anything you like4. For the value data, enter the path and executable for the program you want to run.By adding the value to the HKEY_CURRENT_USER hive instead allows the program tostart only when that user is logged on.If you add the value to the RunOnce key the program will run once and be removed fromthe key by Windows.
    • Removing the Shortcut Icon Arrows1.Open RegEdit2.Open the Key HKEY_CLASSES_ROOT3.Open the Key LNKFILE4.Delete the value IsShortcut5.Open the next Key PIFFILE6.Delete the value IsShortcut7.Restart the WindowsTurn Off Window AnimationYou can shut off the animation displayed when you minimize and maximize Windows.1. Open RegEdit2. Go to HKEY_CURRENT_USERControl panel Desktop WindowMetrics3. Create a new string value "MinAnimate".4. Set the value data of 0 for Off or 1 for OnChanging your Modems Initialization String1.Open RegEdit2.Go toHKEY_LOCAL_MACHINESystemCurrentControlSet Services Class Modem 0000Init3.Change the settings to the new valuesIncreasing the Modem TimeoutIf your modem it is timing out during file transfers or loading Web Pages, you might tryincreasing the timeout period. To change the Time Out::1.Open RegEdit2.Go to HKEY_LOCAL_MACHINESystemCurrentControlSet Services ClassModem XXXX Settings Where XXXX is the number of your modem3. In the right panel and double click on Inactivity Timeout4.The number of minutes for a timeout should be entered between the brackets.5.For example, a setting could have S19=<10> to set it to 10 minutes.Removing Programs from Control Panels Add/Remove Programs SectionIf you uninstalled a program by deleting the files, it may still show up in the Add/Removeprograms list in the Control Panel.In order to remove it from the list.1.Open RegEdit2.Go to HKEY_LOCAL_MACHINE SOFTWARE Microsoft WindowsCurrentVersion Uninstall
    • 3.Delete any programs here.If you have a problem locating the desired program open each key and view theDisplayName valueThe Fix for Grayed Out BoxesThe File Types tab in Explorers View / Options menu lets you edit most of your filetypes, but certain settings cannot be changed. The default action for a batch file, forinstance, runs the batch file instead of opening it via Notepad or Wordpad. Thus, whenyou double-click on AUTOEXEC.BAT, a DOS window opens, and the file executes. Ifyou want to change this default action and edit a batch file when you double-click on it,however, the File Types tab does not let you do so; the Set Default button for the file typecalled MS-DOS Batch File is always grayed out.The button is grayed out because HKEY_CLASSES_ROOTs batfile key contains anEditFlag value entry. Such entries are used throughout the Registry to prevent noviceusers from altering certain system settings. The binary data in batfiles EditFlag reads d004 00 00. If you change this value to 00 00 00 00, you can then change any of the batchfile settings. Do not, however, indiscriminately zero out EditFlag; if you do so in asystem ProgID such as Drive or AudioCD, it completely disappears from the File Typeslist. For ProgIDs that are linked to extensions, set all EditFlags to 00 00 00 00. Forsystem ProgIDs, replace EditFlag data with 02 00 00 00.If you wish to have access to some buttons while leaving others grayed out, you mustknow the function of each EditFlag bit. The last two bytes of data are always zero, butmost bits within the first two bytes have a specific effect:Byte 1, bit 1: Removes the file type from the master list in the File Types tab (select View/ Options under Explorer) if it has an associated extension.Byte 1, bit 2: Adds the file type to the File Types tab if it does not have an associatedextension.Byte 1, bit 3: Identifies a type with no associated extension.Byte 1, bit 4: Grays out the Edit button in the File Types tab.Byte 1, bit 5: Grays out the Remove button in the File Types tab.Byte 1, bit 6: Grays out the New button in the Edit File Type dialog (select the Editbutton in the File Types tab).Byte 1, bit 7: Grays out the Edit button in the Edit File Type dialog.Byte 1, bit 8: Grays out the Remove button in the Edit File Type dialog.Byte 2, bit 1: Prevents you from editing a file types description in the Edit File Typedialog.Byte 2, bit 2: Grays out the Change Icon button in the Edit File Type dialog.Byte 2, bit 3: Grays out the SetDefault button in the Edit File Type dialog.Byte 2, bit 4: Prevents you from editing an actions description in the Edit Action dialog(select the Edit button in the Edit File Type dialog).Byte 2, bit 5: Prevents you from editing the command line in the Edit Action dialog.
    • Byte 2, bit 6: Prevents you from setting DDE (Dynamic Data Exchange) fields in the EditAction dialog.The EditFlags value for Drive, for instance, is d2 01 00 00 in Hex (1101 0010 0000 0001in binary). Bits 2, 5, 7, and 8 are on in byte 1, and bit 1 is on in byte 2. The EditFlag forbatfile is d0 04 00 00 in Hex or 1101 0000 0000 0100 in binary. In this case, bits 5, 7, and8 are on in byte 1, and bit 3 is on in byte 2.Bits 4, 5, and 6 of byte 2 apply only to actions that are protected. EditFlags with actionkeys (such as HKEY_CLASSES_ROOTbatfileshellopen) determine protection. If byte1, bit 1 of such an EditFlag is 0 (or if there is no EditFlag), then the action is protected. Ifbyte 1, bit 1 is 1, then the action is unprotected.Protection on system filesTo enable protection on system files such as the KnownDLLs list, add the followingvalue;1. Open RegEdit2. HKEY_LOCAL_MACHINESystemCurrentControlSet Control SessionManager3. Create the a Dword value and name it "ProtectionMode "4. Set the Value to1About Us | Privacy Policy | Contact Us | FAQ | Help Files | Humor |©2008 Easy DeskSoftwareRemoving Add/Remove Programs Entries From RegEditGenerally we use Add/Remove programs option in Control Panel to remove anyunwanted program from our computer. Normally this may be due to poorly designeduninstaller with this program. That is why some programs may not be removed properlyand a reference to this program remains in the computer registry. This reference inregistry may be creating problems to run your computer smoothly. Here you need todelete this reference to edit your computer registry using RegEdit editor.First go to Start button and open Run dialog box. Type here RegEdit and press Enter.Now in editor Navigate to the given pathHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall.Here locate the entry created by your program with its name and select that entry fromthe list on the left panel and delete its key.
    • Close the Registry Editor and restart your computer, the program will be removed fromyour computer permanently