1. Click Start > Run > Type gpedit.msc
2. Click User Configuration > Windows Setting > Internet Explorer Maintenance > Browser User Interface
3. Double click on Browser Title
4. Click on Customize Title Bars
5. type in whatever you want
6. Click OK
Now you changed the title of your browser and you sure see what you wrote when you
open a New Widow.
Monday, September 29, 2008
Sunday, September 28, 2008
Hacking the Start button
This works on XP Pro Build 2600 (The final verison),
and it should work on all other versions as well.
ALWAYS BACKUP EVERYTHING YOU EDIT OR DELETE.
I'M NOT RESPONSIBLE IF YOU MESS YOUR COMPUTER
UP BY DOING THIS HACK. DO IT AT YOUR OWN RISK.
First off, you need to download a program called
Resource Hacker. It's kinda like a hex editor,
it allows you to change bitmaps, text, ect.
in program files.
Windows XP has a feature called Windows File Protection.
This feature stops you from changing important system files,
that could leave your operating system, non-fuctional.
The file that we need to edit, Explorer.exe,
is protected by Windows File Protection. What we need to do,
is make Explorer.exe not part of Windows File Protection.
Once we do that, we will be able to edit
Explorer.exe when we want, and as much as we want.
Click on your start button -> then Run and type in
"%systemroot%system32Restore" without the quotes.
Now you should see the file filelist.xml.
What? You don't see it? We can fix that.
In windows explorer click Tools->Folder Options->
View and scroll down where it says Hide protected
operating system files (recommend) and un-check it.
Also click where it says Show hidden files and folders,
and uncheck Hide extensions for unknown file types. Lastly, hit Ok.
Now, you should see filelist.xml listed. Right click on filelist.xml
and click properties. Uncheck where it says Read Only and then click OK.
Good, now we can edit filelist.xml. Right click filelist.xml again,
and click Open with then on Notepad.
The file should now be opened in notepad.
This is where Windows File Protection looks to see if it needs to
protect a file or not. Where it says:
%windir%system.ini
add this a line above it:
%sytemroot%explorer.exe
Now, click file -> Save. (NOT Save as)
Next click on your start menu-> run and type in
"%systemroot%system32dllcache" without the quotes.
In this DIR, find and delete Explorer.exe.
This is a backup copy of Explorer.exe and windows might
try and replace this copy with your hacked copy if it isn't deleted.
After you delete it, windows will popup a message, just hit cancel then yes.
We should now be able to edit Explorer.exe as we wish. Run Resource Hacker
(The file you downloaded earlier). In ResHacker click File->
Open and open Explorer.exe. Mine is located in C:winntexplorer.exe
yours maybe located in C:windowsexplorer.exe. Once you have it open you should see something like this:
To change the "Start" text on the start button go to:
String Table -> 37 -> 1033. To the right, you should see the words "start".
You can change this to anything you want. I changed mine to LinuXProX.
Next, hit the Compile Script button above.
Now, go to String Table -> 38 -> 1033. Again, to the right you should see "Start".
Change this to the same thing you changed the other one to, mine says LinuXProX. Next,
hit the Compile Script button above. Now, if you just wanted to change the start button text,
you can skip down to "Saving".
Don't you hate the little icon (image) on the start button? Well,
we change it, and it's very easy to do.
In ResHacker, go to Bitmap -> 143 -> 1033.
You should see the window that is on the start button to the right.
To change it, you Action -> Replace bitmap -> Open with new bitmap.
Now you can make your own image, If you want to make your own,
it has to be 25x20 and 16 million colors. Once you found the bitmap you want to use,
just click open then click Replace.
Lastly, to change the Start Menu border, go to Bitmap -> 167 -> 1033.
(This is Windows XP Pro. If you have Home Editon It's Bitmap->166->1033) Click Action ->
Replace bitmap -> and where it says Select bitmap to replace:
scroll down to 167 or 166 if you have XP Home Editon.
Now, click Open file with new bitmap and find the image you want to replace it with,
click open, then on Replace.
It's best to make your own image on this one,
I just edited the default bitmap since I'm not that great with graphics.
Maybe someone will make me a cool one, and send to me. *Hint* *Hint* :)
If you want to edit the default image, or use it as a template,
just right click on the Windows XP Pro/Home image and click copy.
Now, open up your favorite graphics program, I have Jasc Paint Shop Pro,
and hit CTRL-V. That should paste the image from your clipboard to your graphics program.
If you want to make your own, it has to be 21x233 16 million colors. Once your down editing,
just save it as a .bmp somewhere on your drive. I saved mine to C: est.bmp :).
Additional Comments:
-Saving
There are alot of bitmaps in Explorer.exe along with Text Strings, that you can change,
just hack around in it and see what you can find. If you try and save Explorer.exe it wont save.
Why? Because Explorer.exe is currently running on your computer and it can't save it
while the program is running. So how am I suppose to save it? Well, there are a few ways to do that.
One, you could save your hacked version to floppy, boot to dos and copy it.
Two, if you dual boot you could save it from within another operating system.
Or three, the easiest and fastest way, save it without rebooting, and here is how:
Hit CTRL-ALT-DEL and Windows Task Manager should popup.
Click on the processes tab and find Explorer.exe, and click it once.
Now, hit the end process button at the bottom (Make sure you don't have any other programs open).
Your taskbar at the bottom of the screen should disappear.
Hold ALT then click tab while holding ALT, then let off the ALT.
Keep doing this until Resource Hacker comes in to view.
We can now save Explorer.exe because it is not running. Click File-> Save as->
and find Explorer.exe again, mine is located in C:winnt.
It will ask you if you want to overwrite, just click yes.
Now, ALT-TAB back to Windows Task Manager and click on File -> New Task ->
in the black type in Explorer.exe, or type in the full path to explorer like:
C:winntexplorer.exe. If you did everything correctly,
you should see your new image and name on the start button, along with the start menu border.
and it should work on all other versions as well.
ALWAYS BACKUP EVERYTHING YOU EDIT OR DELETE.
I'M NOT RESPONSIBLE IF YOU MESS YOUR COMPUTER
UP BY DOING THIS HACK. DO IT AT YOUR OWN RISK.
First off, you need to download a program called
Resource Hacker. It's kinda like a hex editor,
it allows you to change bitmaps, text, ect.
in program files.
Windows XP has a feature called Windows File Protection.
This feature stops you from changing important system files,
that could leave your operating system, non-fuctional.
The file that we need to edit, Explorer.exe,
is protected by Windows File Protection. What we need to do,
is make Explorer.exe not part of Windows File Protection.
Once we do that, we will be able to edit
Explorer.exe when we want, and as much as we want.
Click on your start button -> then Run and type in
"%systemroot%system32Restore" without the quotes.
Now you should see the file filelist.xml.
What? You don't see it? We can fix that.
In windows explorer click Tools->Folder Options->
View and scroll down where it says Hide protected
operating system files (recommend) and un-check it.
Also click where it says Show hidden files and folders,
and uncheck Hide extensions for unknown file types. Lastly, hit Ok.
Now, you should see filelist.xml listed. Right click on filelist.xml
and click properties. Uncheck where it says Read Only and then click OK.
Good, now we can edit filelist.xml. Right click filelist.xml again,
and click Open with then on Notepad.
The file should now be opened in notepad.
This is where Windows File Protection looks to see if it needs to
protect a file or not. Where it says:
%windir%system.ini
add this a line above it:
%sytemroot%explorer.exe
Now, click file -> Save. (NOT Save as)
Next click on your start menu-> run and type in
"%systemroot%system32dllcache" without the quotes.
In this DIR, find and delete Explorer.exe.
This is a backup copy of Explorer.exe and windows might
try and replace this copy with your hacked copy if it isn't deleted.
After you delete it, windows will popup a message, just hit cancel then yes.
We should now be able to edit Explorer.exe as we wish. Run Resource Hacker
(The file you downloaded earlier). In ResHacker click File->
Open and open Explorer.exe. Mine is located in C:winntexplorer.exe
yours maybe located in C:windowsexplorer.exe. Once you have it open you should see something like this:
To change the "Start" text on the start button go to:
String Table -> 37 -> 1033. To the right, you should see the words "start".
You can change this to anything you want. I changed mine to LinuXProX.
Next, hit the Compile Script button above.
Now, go to String Table -> 38 -> 1033. Again, to the right you should see "Start".
Change this to the same thing you changed the other one to, mine says LinuXProX. Next,
hit the Compile Script button above. Now, if you just wanted to change the start button text,
you can skip down to "Saving".
Don't you hate the little icon (image) on the start button? Well,
we change it, and it's very easy to do.
In ResHacker, go to Bitmap -> 143 -> 1033.
You should see the window that is on the start button to the right.
To change it, you Action -> Replace bitmap -> Open with new bitmap.
Now you can make your own image, If you want to make your own,
it has to be 25x20 and 16 million colors. Once you found the bitmap you want to use,
just click open then click Replace.
Lastly, to change the Start Menu border, go to Bitmap -> 167 -> 1033.
(This is Windows XP Pro. If you have Home Editon It's Bitmap->166->1033) Click Action ->
Replace bitmap -> and where it says Select bitmap to replace:
scroll down to 167 or 166 if you have XP Home Editon.
Now, click Open file with new bitmap and find the image you want to replace it with,
click open, then on Replace.
It's best to make your own image on this one,
I just edited the default bitmap since I'm not that great with graphics.
Maybe someone will make me a cool one, and send to me. *Hint* *Hint* :)
If you want to edit the default image, or use it as a template,
just right click on the Windows XP Pro/Home image and click copy.
Now, open up your favorite graphics program, I have Jasc Paint Shop Pro,
and hit CTRL-V. That should paste the image from your clipboard to your graphics program.
If you want to make your own, it has to be 21x233 16 million colors. Once your down editing,
just save it as a .bmp somewhere on your drive. I saved mine to C: est.bmp :).
Additional Comments:
-Saving
There are alot of bitmaps in Explorer.exe along with Text Strings, that you can change,
just hack around in it and see what you can find. If you try and save Explorer.exe it wont save.
Why? Because Explorer.exe is currently running on your computer and it can't save it
while the program is running. So how am I suppose to save it? Well, there are a few ways to do that.
One, you could save your hacked version to floppy, boot to dos and copy it.
Two, if you dual boot you could save it from within another operating system.
Or three, the easiest and fastest way, save it without rebooting, and here is how:
Hit CTRL-ALT-DEL and Windows Task Manager should popup.
Click on the processes tab and find Explorer.exe, and click it once.
Now, hit the end process button at the bottom (Make sure you don't have any other programs open).
Your taskbar at the bottom of the screen should disappear.
Hold ALT then click tab while holding ALT, then let off the ALT.
Keep doing this until Resource Hacker comes in to view.
We can now save Explorer.exe because it is not running. Click File-> Save as->
and find Explorer.exe again, mine is located in C:winnt.
It will ask you if you want to overwrite, just click yes.
Now, ALT-TAB back to Windows Task Manager and click on File -> New Task ->
in the black type in Explorer.exe, or type in the full path to explorer like:
C:winntexplorer.exe. If you did everything correctly,
you should see your new image and name on the start button, along with the start menu border.
Saturday, September 27, 2008
Pump Up the Bandwidth!
Windows XP Professional has a feature built into it called QoS
(Quality of Service). This feature allows the operating system
to optimize bandwidth allocation for different services.
While books are filled with incomprehensible information on this subject,
what you need to know is that this feature actually throttles back your
available bandwidth. QoS reserves 20% of the available bandwidth on any
connection for itself. This means you can't use it for downloads
and LAN connections! You can cut the QoS brick tied to the back of your
network connection by performing the following steps:
Click Start and then click the Run command.
In the Run dialog box, type gpedit.msc in the Open text box.
Click OK.
In the Group Policy window,
expand Computer Configuration,
and then expand Administrative Templates.
Expand Network and click on QoS Packet Scheduler.
Double click on the Limit reservable bandwidth entry in the right pane.
Select the Enabled option and then type 0 in the Bandwidth limit (%) text box.
Click Apply and then click OK.
Close the Group Policy window and restart the computer
(not sure if you need to restart the computer, but do it anyhow).
QoS is enabled by default on all adapters. If you disabled it for some reason,
make sure it is enabled, or else it's possible that the 20% limitation
will be enforced anyhow. There's not too much documentation of this feature,
so if you find it improves your bandwidth, let us know!
(Quality of Service). This feature allows the operating system
to optimize bandwidth allocation for different services.
While books are filled with incomprehensible information on this subject,
what you need to know is that this feature actually throttles back your
available bandwidth. QoS reserves 20% of the available bandwidth on any
connection for itself. This means you can't use it for downloads
and LAN connections! You can cut the QoS brick tied to the back of your
network connection by performing the following steps:
Click Start and then click the Run command.
In the Run dialog box, type gpedit.msc in the Open text box.
Click OK.
In the Group Policy window,
expand Computer Configuration,
and then expand Administrative Templates.
Expand Network and click on QoS Packet Scheduler.
Double click on the Limit reservable bandwidth entry in the right pane.
Select the Enabled option and then type 0 in the Bandwidth limit (%) text box.
Click Apply and then click OK.
Close the Group Policy window and restart the computer
(not sure if you need to restart the computer, but do it anyhow).
QoS is enabled by default on all adapters. If you disabled it for some reason,
make sure it is enabled, or else it's possible that the 20% limitation
will be enforced anyhow. There's not too much documentation of this feature,
so if you find it improves your bandwidth, let us know!
Friday, September 26, 2008
Configure Notepad to use Word Wrap (All Windows)
This setting controls whether text is wrapped onto the next line when the screen in full in Notepad. Although it can be configured by using the Edit menu in Notepad, this tweak allows you to change the word-wrap feature through the registry.
Open your registry and find or create the key below.
Create a new DWORD value, or modify the existing value, called "fWrap" and set it according to the value data below.
Exit your registry; you may need to restart or log out of Windows for the change to take effect.
(Default) REG_SZ (value not set)
fWrap REG_DWORD 0x00000001 (1)
HKEY_CURRENT_USER\Software\Microsoft\Notepad
Registry Settings
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Notepad]
Value Name: fWrap
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = off, 1= on)
Regedit Command Line Options
Regedit has a number of command line options to help automate it's use in either batch files or from the command prompt. Listed below are some of the options, please note the some of the functions are operating system specific.
regedit.exe [options] [filename] [regpath]
[filename] Import .reg file into the registry
/s [filename] Silent import, i.e. hide confirmation box when importing files
/e [filename] [regpath] Export the registry to [filename] starting at [regpath]
e.g. regedit /e file.reg HKEY_USERS\.DEFAULT
/L:system Specify the location of the system.dat to use
/R:user Specify the location of the user.dat to use
/C [filename] Compress (Windows 98)
/D [regpath] Delete the specified key (Windows 98)
regedit.exe [options] [filename] [regpath]
[filename] Import .reg file into the registry
/s [filename] Silent import, i.e. hide confirmation box when importing files
/e [filename] [regpath] Export the registry to [filename] starting at [regpath]
e.g. regedit /e file.reg HKEY_USERS\.DEFAULT
/L:system Specify the location of the system.dat to use
/R:user Specify the location of the user.dat to use
/C [filename] Compress (Windows 98)
/D [regpath] Delete the specified key (Windows 98)
Deleting keys or values using a REG file
It is also possible to delete keys and values using REG files. To delete a key start by using the same format as the the REG file above, but place a "-" symbol in front of the key name you want to delete. For example to delete the [HKEY_LOCAL_MACHINE\SYSTEM\Setup] key the reg file would look like this:
REGEDIT4
[-HKEY_LOCAL_MACHINE\SYSTEM\Setup]
The format used to delete individual values is similar, but instead of a minus sign in front of the whole key, place it after the equal sign of the value. For example, to delete the value "SetupType" the file would look like:
REGEDIT4
[HKEY_LOCAL_MACHINE\SYSTEM\Setup]
"SetupType"=-
Use this feature with care, as deleting the wrong key or value could cause major problems within the registry, so remember to always make a backup first
REGEDIT4
[-HKEY_LOCAL_MACHINE\SYSTEM\Setup]
The format used to delete individual values is similar, but instead of a minus sign in front of the whole key, place it after the equal sign of the value. For example, to delete the value "SetupType" the file would look like:
REGEDIT4
[HKEY_LOCAL_MACHINE\SYSTEM\Setup]
"SetupType"=-
Use this feature with care, as deleting the wrong key or value could cause major problems within the registry, so remember to always make a backup first
Importing and Exporting Registry Settings
A great feature of the Registry Editor is it's ability to import and export registry settings to a text file, this text file, identified by the .REG extension, can then be saved or shared with other people to easily modify local registry settings. You can see the layout of these text files by simply exporting a key to a file and opening it in Notepad, to do this using the Registry Editor select a key, then from the "Registry" menu choose "Export Registry File...", choose a filename and save. If you open this file in notepad you will see a file similar to the example below:
REGEDIT4
[HKEY_LOCAL_MACHINE\SYSTEM\Setup]
"SetupType"=dword:00000000
"CmdLine"="setup -newsetup"
"SystemPrefix"=hex:c5,0b,00,00,00,40,36,02
The layout is quite simple, REGEDIT4 indicated the file type and version, [HKEY_LOCAL_MACHINE\SYSTEM\Setup] indicated the key the values are from, "SetupType"=dword:00000000 are the values themselves the portion after the "=" will vary depending on the type of value they are; DWORD, String or Binary.
So by simply editing this file to make the changes you want, it can then be easily distributed and all that need to be done is to double-click, or choose "Import" from the Registry menu, for the settings to be added to the system Registry.
REGEDIT4
[HKEY_LOCAL_MACHINE\SYSTEM\Setup]
"SetupType"=dword:00000000
"CmdLine"="setup -newsetup"
"SystemPrefix"=hex:c5,0b,00,00,00,40,36,02
The layout is quite simple, REGEDIT4 indicated the file type and version, [HKEY_LOCAL_MACHINE\SYSTEM\Setup] indicated the key the values are from, "SetupType"=dword:00000000 are the values themselves the portion after the "=" will vary depending on the type of value they are; DWORD, String or Binary.
So by simply editing this file to make the changes you want, it can then be easily distributed and all that need to be done is to double-click, or choose "Import" from the Registry menu, for the settings to be added to the system Registry.
Editing the Registry
The Registry Editor (REGEDIT.EXE) is included with most version of Windows (although you won't find it on the Start Menu) it enables you to view, search and edit the data within the Registry. There are several methods for starting the Registry Editor, the simplest is to click on the Start button, then select Run, and in the Open box type "regedit", and if the Registry Editor is installed it should now open
An alternative Registry Editor (REGEDT32.EXE) is available for use with Windows NT/2000, it includes some additional features not found in the standard version, including; the ability to view and modify security permissions, and being able to create and modify the extended string values REG_EXPAND_SZ & REG_MULTI_SZ.
Create a Shortcut to Regedit
This can be done by simply right-clicking on a blank area of your desktop, selecting New, then Shortcut, then in the Command line box enter "regedit.exe" and click Next, enter a friendly name (e.g. 'Registry Editor') then click Finish and now you can double click on the new icon to launch the Registry Editor.
Using Regedit to modify your Registry
Once you have started the Regedit you will notice that on the left side there is a tree with folders, and on the right the contents (values) of the currently selected folder.
Like Windows explorer, to expand a certain branch (see the structure of the registry section), click on the plus sign [+] to the left of any folder, or just double-click on the folder. To display the contents of a key (folder), just click the desired key, and look at the values listed on the right side. You can add a new key or value by selecting New from the Edit menu, or by right-clicking your mouse. And you can rename any value and almost any key with the same method used to rename files; right-click on an object and click rename, or click on it twice (slowly), or just press F2 on the keyboard. Lastly, you can delete a key or value by clicking on it, and pressing Delete on the keyboard, or by right-clicking on it, and choosing Delete.
Note: it is always a good idea to backup your registry before making any changes to it. It can be intimidating to a new user, and there is always the possibility of changing or deleting a critical setting causing you to have to reinstall the whole operating system. It's much better to be safe than sorry!
An alternative Registry Editor (REGEDT32.EXE) is available for use with Windows NT/2000, it includes some additional features not found in the standard version, including; the ability to view and modify security permissions, and being able to create and modify the extended string values REG_EXPAND_SZ & REG_MULTI_SZ.
Create a Shortcut to Regedit
This can be done by simply right-clicking on a blank area of your desktop, selecting New, then Shortcut, then in the Command line box enter "regedit.exe" and click Next, enter a friendly name (e.g. 'Registry Editor') then click Finish and now you can double click on the new icon to launch the Registry Editor.
Using Regedit to modify your Registry
Once you have started the Regedit you will notice that on the left side there is a tree with folders, and on the right the contents (values) of the currently selected folder.
Like Windows explorer, to expand a certain branch (see the structure of the registry section), click on the plus sign [+] to the left of any folder, or just double-click on the folder. To display the contents of a key (folder), just click the desired key, and look at the values listed on the right side. You can add a new key or value by selecting New from the Edit menu, or by right-clicking your mouse. And you can rename any value and almost any key with the same method used to rename files; right-click on an object and click rename, or click on it twice (slowly), or just press F2 on the keyboard. Lastly, you can delete a key or value by clicking on it, and pressing Delete on the keyboard, or by right-clicking on it, and choosing Delete.
Note: it is always a good idea to backup your registry before making any changes to it. It can be intimidating to a new user, and there is always the possibility of changing or deleting a critical setting causing you to have to reinstall the whole operating system. It's much better to be safe than sorry!
Friday, September 19, 2008
HACKING WINDOWS XP
To hack windows XP you must know two things first basic dos and then registry editing.i will start with registry editing .
The Structure of the Registry
The Registry has a hierarchal structure, although it looks complicated the structure is similar to the directory structure on your hard disk, with Regedit being similar to Windows Explorer.
[font_body]Each main branch (denoted by a folder icon in the Registry Editor, see left) is called a Hive, and Hives contains Keys. Each key can contain other keys (sometimes referred to as sub-keys), as well as Values. The values contain the actual information stored in the Registry. There are three types of values; String, Binary, and DWORD - the use of these depends upon the context.
There are six main branches, each containing a specific portion of the information stored in the Registry. They are as follows:
• HKEY_CLASSES_ROOT - This branch contains all of your file association mappings to support the drag-and-drop feature, OLE information, Windows shortcuts, and core aspects of the Windows user interface.
• HKEY_CURRENT_USER - This branch links to the section of HKEY_USERS appropriate for the user currently logged onto the PC and contains information such as logon names, desktop settings, and Start menu settings.
• HKEY_LOCAL_MACHINE - This branch contains computer specific information about the type of hardware, software, and other preferences on a given PC, this information is used for all users who log onto this computer.
• HKEY_USERS - This branch contains individual preferences for each user of the computer, each user is represented by a SID sub-key located under the main branch.
• HKEY_CURRENT_CONFIG - This branch links to the section of HKEY_LOCAL_MACHINE appropriate for the current hardware configuration.
• HKEY_DYN_DATA - This branch points to the part of HKEY_LOCAL_MACHINE, for use with the Plug-&-Play features of Windows, this section is dymanic and will change as devices are added and removed from the system.
Each registry value is stored as one of five main data types:
• REG_BINARY - This type stores the value as raw binary data. Most hardware component information is stored as binary data, and can be displayed in an editor in hexadecimal format.
• REG_DWORD - This type represents the data by a four byte number and is commonly used for boolean values, such as "0" is disabled and "1" is enabled. Additionally many parameters for device driver and services are this type, and can be displayed in REGEDT32 in binary, hexadecimal and decimal format, or in REGEDIT in hexadecimal and decimal format.
• REG_EXPAND_SZ - This type is an expandable data string that is string containing a variable to be replaced when called by an application. For example, for the following value, the string "%SystemRoot%" will replaced by the actual location of the directory containing the Windows NT system files. (This type is only available using an advanced registry editor such as REGEDT32)
• REG_MULTI_SZ - This type is a multiple string used to represent values that contain lists or multiple values, each entry is separated by a NULL character. (This type is only available using an advanced registry editor such as REGEDT32)
• REG_SZ - This type is a standard string, used to represent human readable text values.
Other data types not available through the standard registry editors include:
• REG_DWORD_LITTLE_ENDIAN - A 32-bit number in little-endian format.
• REG_DWORD_BIG_ENDIAN - A 32-bit number in big-endian format.
• REG_LINK - A Unicode symbolic link. Used internally; applications should not use this type.
• REG_NONE - No defined value type.
• REG_QWORD - A 64-bit number.
• REG_QWORD_LITTLE_ENDIAN - A 64-bit number in little-endian format.
• REG_RESOURCE_LIST - A device-driver resource list.
The Structure of the Registry
The Registry has a hierarchal structure, although it looks complicated the structure is similar to the directory structure on your hard disk, with Regedit being similar to Windows Explorer.
[font_body]Each main branch (denoted by a folder icon in the Registry Editor, see left) is called a Hive, and Hives contains Keys. Each key can contain other keys (sometimes referred to as sub-keys), as well as Values. The values contain the actual information stored in the Registry. There are three types of values; String, Binary, and DWORD - the use of these depends upon the context.
There are six main branches, each containing a specific portion of the information stored in the Registry. They are as follows:
• HKEY_CLASSES_ROOT - This branch contains all of your file association mappings to support the drag-and-drop feature, OLE information, Windows shortcuts, and core aspects of the Windows user interface.
• HKEY_CURRENT_USER - This branch links to the section of HKEY_USERS appropriate for the user currently logged onto the PC and contains information such as logon names, desktop settings, and Start menu settings.
• HKEY_LOCAL_MACHINE - This branch contains computer specific information about the type of hardware, software, and other preferences on a given PC, this information is used for all users who log onto this computer.
• HKEY_USERS - This branch contains individual preferences for each user of the computer, each user is represented by a SID sub-key located under the main branch.
• HKEY_CURRENT_CONFIG - This branch links to the section of HKEY_LOCAL_MACHINE appropriate for the current hardware configuration.
• HKEY_DYN_DATA - This branch points to the part of HKEY_LOCAL_MACHINE, for use with the Plug-&-Play features of Windows, this section is dymanic and will change as devices are added and removed from the system.
Each registry value is stored as one of five main data types:
• REG_BINARY - This type stores the value as raw binary data. Most hardware component information is stored as binary data, and can be displayed in an editor in hexadecimal format.
• REG_DWORD - This type represents the data by a four byte number and is commonly used for boolean values, such as "0" is disabled and "1" is enabled. Additionally many parameters for device driver and services are this type, and can be displayed in REGEDT32 in binary, hexadecimal and decimal format, or in REGEDIT in hexadecimal and decimal format.
• REG_EXPAND_SZ - This type is an expandable data string that is string containing a variable to be replaced when called by an application. For example, for the following value, the string "%SystemRoot%" will replaced by the actual location of the directory containing the Windows NT system files. (This type is only available using an advanced registry editor such as REGEDT32)
• REG_MULTI_SZ - This type is a multiple string used to represent values that contain lists or multiple values, each entry is separated by a NULL character. (This type is only available using an advanced registry editor such as REGEDT32)
• REG_SZ - This type is a standard string, used to represent human readable text values.
Other data types not available through the standard registry editors include:
• REG_DWORD_LITTLE_ENDIAN - A 32-bit number in little-endian format.
• REG_DWORD_BIG_ENDIAN - A 32-bit number in big-endian format.
• REG_LINK - A Unicode symbolic link. Used internally; applications should not use this type.
• REG_NONE - No defined value type.
• REG_QWORD - A 64-bit number.
• REG_QWORD_LITTLE_ENDIAN - A 64-bit number in little-endian format.
• REG_RESOURCE_LIST - A device-driver resource list.
Wednesday, September 17, 2008
INTRODUCTION
HEllo I am Abhishek here i will share my experience knowledge and everything about computers your expert comments and support is needed
Subscribe to:
Posts (Atom)