注册表的隐藏主键以及键值
以下是一些注册表的隐藏主键以及键值(有不少可是“独门武器”喔) ,在下面的简介中“Key”表示主
键、“Value Name”表示键值名、“Data Type”表示键值类型、“Reg_SZ”表示字符串值、“REG_BINARY”
表示二进制值、“REG_DWORD”表示DWORD值、“Data”表示键值。
用BMP文件内容作为其图标:
Key: [HKEY_CLASSES_ROOT\Paint.Picture\DefaultIcon]
Value Name: (Default)
Data Type: REG_SZ
Data: %1
为特殊文件夹改名:
Key: [HKEY_CLASSES_ROOT\CLSID]
拨号网络:.{992CFFA0-F557-101A-88EC-00DD010CCC48}
打印机:.{2227A280-3AEA-1069-A2DE-08002B30309D}
控制面板:.{21EC2020-3AEA-1069-A2DD-08002B30309D}
我的电脑:.{20D04FE0-3AEA-1069-A2D8-08002B30309D}
网络邻居:.{208D2C60-3AEA-1069-A2D7-08002B30309D}
收件箱:.{00020D75-0000-0000-C000-000000000046}
回收站:.{645FF040-5081-101B-9F08-00AA002F954E}
在以上主键下ShellFolder中对“Attributes”二进制值进行修改:
(70 01 00 20=enable, 40 01 00 20=default)
在文件菜单中增加“快速查看”选项:
Key: [HKEY_CLASSES_ROOT\*\QuickView]
Value Name: (Default)
Data Type: REG_SZ
Data: *
改变“回收站”图标:
Key: [HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon]
Value Name: (Default), Empty, Full
Data Type: REG_SZ
Data: Path to Icon File
增加右键对“资源管理器”的支持:
Key: [HKEY_CLASSES_ROOT\Directory\shell\Explore]
Data Type: REG_SZ
给默认字符串值赋值为:explorer.exe /e,/root,/idlist,%
调节弹出菜单延缓时间
[HKEY_CURRENT_USER\Control Panel\Desktop]
Value Name: MenuShowDelay
Data Type: REG_SZ
Data: 0-999 (milliseconds)
禁用WINDOWS下DOS模式:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp]
Value Name: Disabled
Data Type: REG_DWORD
Data: (0 = disable, 1 = enable)
禁用独立DOS模式:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp]
Value Name: NoRealMode
Data Type: REG_DWORD
Data: (0 = disable, 1 = enable)
IE密码:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ratings]
隐藏显示面板中背景面板:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
Value Name: NoDispBackgroundPage
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
隐藏屏幕保护程序面板:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
Value Name: NoDispScrSavPage
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁用显示“设置”面板:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
Value Name: NoDispSettingsPage
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁用整个显示属性面板:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
Value Name: NoDispCPL
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁用“控制面板”中网络设置中的共享文件及打印机选项:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network]
Value Name: NoFileSharingControl
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁用网络中“标识”面板:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network]
Value Name: NoNetSetupIDPage
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁用网络配置面板:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network]
Value Name: NoNetSetupSecurityPage
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁用“控制面板”中的整个“网络”面板:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network]
Value Name: NoNetSetup
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
隐藏控制面板中更改密码面板:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
Value Name: NoPwdPage
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁用“密码”功能:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
Value Name: NoSecCPL
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁用“用户配置面板”:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
Value Name: NoProfilePage
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁用远程配置功能:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
Value Name: NoAdminPage
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁止用户添加打印机:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoAddPrinter
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁止用户删除打印机:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoDeletePrinter
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁用“打印机”控制面板:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoPrinterTabs
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
在“控制面板”中隐藏“打印机”图标:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoPrinters
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁用系统选项中“硬件配置文件”面板:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
Value Name: NoConfigPage
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁用系统选项中“设备管理器”面板:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
Value Name: NoDevMgrPage
ata Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁用系统选项中、性能面板中的文件系统选项:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
Value Name: NoFileSysPage
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁用系统设置选项中的虚拟内存选项:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
Value Name: NoVirtMemPage
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁用“开始”菜单中“关闭系统”:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoClose
Data Type: REG_DWORD
Data: (0 = shutdown enabled, 1 = shutdown disabled)
隐藏“开始”菜单中“程序”:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoCommonGroups
Data Type: REG_DWORD
ata: (0 = disabled, 1 = enabled)
隐藏桌面上所有图标:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoDesktop
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
隐藏“我的电脑”中的驱动器图标:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoDrives
Data Type: REG_DWORD
A: 1, B: 2, C: 4, D: 8, E: 16, F: 32, G: 64, H: 128, I: 256, J: 512, K: 1024, L: 2048,
M: 4096, N: 8192, O: 16384, P: 32768, Q: 65536, R: 131072, S: 262144, T: 524288,
U: 1048576, V: 2097152, W: 4194304, X: 8388608, Y: 16777216, Z: 33554432, ALL: 67108863
隐藏“开始”菜单中的“收藏夹”图标:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoFavoritesMenu
Data Type: REG_DWORD
Data: (0=disable, 1=enable)
禁用“开始”菜单中的“查找”:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoFind
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
隐藏“网络邻居”图标:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoNetHood
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
隐藏“开始”菜单中的“文档”:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoRecentDocsMenu
Data Type: REG_DWORD
Data: (0=disable, 1=enable)
禁用“开始”菜单中的“运行”命令:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoRun
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
退出系统不保存设置:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoSaveSettings
Data Type: REG_BINARY
Data: (00 00 00 00=disable, 01 00 00 00=enable)
禁用“开始”菜单中的“文件夹选项”:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoSetFolders
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
隐藏“开始”菜单“设置”下的任务栏选项:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoSetTaskbar
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
对用户进行一些安全相关的限制(主要限制用户进行拨号和运行注册表编辑器Regedit.exe):
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: RestrictRun
DATA:(0=DISABLE,1=ENABLE)
禁用注册表编辑器:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
Value Name: DisableRegistryTools
Data Type: REG_DWORD
Data: (0 = disabled, 1 = enabled)
禁止某光驱自动运行:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoDriveTypeAutoRun
Data Type: REG_DWORD
DATA:A: 1, B: 2, C: 4, D: 8, E: 16, F: 32, G: 64, H: 128, I: 256, J: 512, K: 1024, L: 2048,
M: 4096, N: 8192, O: 16384, P: 32768, Q: 65536, R: 131072, S: 262144, T: 524288,
U: 1048576, V: 2097152, W: 4194304, X: 8388608, Y: 16777216, Z: 33554432, ALL: 67108863
改变系统文件夹位置:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
改变安装应用程序时自动载入的公司及用户名:
Key: [HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info]
清除历史“运行”列表:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU]
删除相应项
隐藏“设置”“任务栏和开始菜单”中的开始菜单面板:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoStartBanner
Data Type: REG_BINARY
Data: (00 00 00 00 = disabled, 01 00 00 00 = enabled)
隐藏桌面上的IE图标:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoInternetIcon
Data Type: REG_DWORD
ata: (0 = disabled, 1 = enabled)
在IE工具栏上添加背景:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar]
Value Name: BackBitmap
Data Type: REG_SZ
指明.BMP位图文件的路径
给OutLook指定新的邮件、新闻存放路径:
Key: [HKEY_CURRENT_USER\Software\Microsoft\Outlook Express]
Value Name: Store Root
Data Type: REG_SZ
指明新路径
PC-SPEAKER的报错功能:
Key: [HKEY_CURRENT_USER\Control Panel\Sound]
Value Name: Beep
Data Type: REG_SZ
Data: 'Yes' or 'No'
在没有Plus!支持下使用高彩图标:
Key: [HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics]
Value Name: Shell Icon BPP
Data Type: REG_SZ
Data: 16
16表示16真位,24则表示24位真彩
调整鼠标双击时间间隔:
Key: [HKEY_CURRENT_USER\Control Panel\Desktop]
Value Name: DoubleClickHeight, DoubleClickWidth
Data Type: REG_SZ
Data: Size in Pixels
调整下拉菜单左\右对齐:
Key: [HKEY_CURRENT_USER\Control Panel\Desktop]
Value Name: MenuDropAlignment
Data Type: REG_SZ
Data: (0 = Left, 1 = Right)
改变桌面图标大小:
Key: [HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics]
Value Name: Shell Icon Size
Data Type: REG_SZ
Data: Size in Pixels (Default = 32)
调整桌面墙纸的大小:
Key: [HKEY_CURRENT_USER\Control Panel\Desktop]
Value Name: Wallpaperoriginx, Wallpaperoriginy
Data Type: REG_SZ
Data: Distance in Pixels
Wallpaperoriginx,Wallpaperoriginy为水平像素值,垂直像素值
禁止匿名用户登录系统,(既禁止按ESC键跳过输入密码):
KEY:[HKEY_LOCAL_MACHINE\NetWork\Logon]
Value Name:MustBeValidated
DATA TYPE:REG_DWORD
DATA:1=ENABLE;0=DISABLE
改变Windows9x默认安装路径:
Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup]
Value Name: SourcePath
Data Type: REG_SZ
Data: D:\WIN95
不用注册使用Windows Update:
Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion]
Value Name: RegDone
Data Type: REG_SZ
Data: (0 = disabled, 1 = enabled)
重新指定“程序”菜单中程序的指向:
Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths]
Value Name: (Default)
Data Type: REG_SZ
Data: Fully Qualified File Name (e.g. c:\windows\notepad.exe)
拨号窗口上保存口令选项的唤醒:
Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Network\Real Mode Net]
Data Type: REG_DWORD
DATANAME:autologon
DATA:00000000=DISABLE,01000000=ENABLE
关于CD-ROM的自动运行:
Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDRom]
Value Name: Autorun
Data Type: REG_DWORD
Data: (0=disable, 1=enable)
添加或删除应用程序安装(卸载)信息列表:
Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
添加(删除)相应信息
长文件名与8.3制文件命名模式之间的转换:
Key: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem]
Value Name: Win31FileSystem
Data Type: REG_DWORD
Data: (0 = long file names, 1 = 8.3 filenames)
取消采用长文件名:
Key: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem]
Value Name: PreserveLongNames
Data Type: REG_BINARY
Data: (00 00 00 00 = disabled, ff ff ff ff = enabled)
实施32位IO保护模式:
Key: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem]
Value Name: ForceRMIO
Data Type: REG_BINARY
Data: (00 00 00 00 = protected mode, 01 00 00 00 = real mode)
取消采用cach写数据的可靠性:
Key: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem]
Value Name: DriveWriteBehind
Data Type: REG_BINARY
Data: (00 00 00 00 = protected mode, 01 00 00 00 = real mode)
设置同、异步缓存,增强系统运行可靠性:
Key: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem]
Value Name: AsyncFileCommit
Data Type: REG_DWORD
Data: (0 = 同步, 1 = 异步)
改变WINDOWS9X的版本及注册信息:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion]
RegisteredOwner表示注册用户名;
RegisteredOrganization表示所属单位、组织;
Version、VersionNumber表示版本信息;
ProductID表示产品ID号
清除快捷方式上的小箭头:
Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Icons]
Value Name: 29
Data Type: REG_SZ
删除桌面“顽固不化”的图标:
Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace]
删除相应的主键
改变启动时自动载入的程序:
Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Data Type: REG_SZ
系统启动时显示对话窗口:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Winlogon
Value Name:LegalNoticeCaption
data:新窗体的标题
Value Name:LegalNoticeText
Data:新窗口内的文字内容
IE密码:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ratings]
Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
优化拨号属性配置器,提高上网速度以及稳定性:
Key: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Class\NetTrans]
Value Name: MaxMTU, MaxMSS
Data Type: REG_SZ
DATA:576、536
调节MTU以及MSS值,优化上网连接速度:
Key: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\MSTCP]
Data Type: REG_SZ
Value Name: DefaultRcvWindow, DefaultTTL
DATA:4288、128
优化文件空间分配:
Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem]
Value Name: ContigFileAllocSize
Data Type: REG_DWORD
Data: 200 (hex) or 512 (decimal)
改变启动时所用墙纸:
Key: [HKEY_USERS\.DEFAULT\Control Panel\Desktop]
Value Name: Wallpaper
Data Type: REG_SZ
指明墙纸的路径及名称