taskmanger and registry editing is disable by admninstrator solution
Enable registry editor (regedit)
First Method:
Click Start -> Run -> gpedit.msc -> User Configuration -> Administrative Templates -> System -> Prevent access to registry editing tools -> Right Click Properties -> Set it to Not Configured.
Second Method:
Click Start -> Run. Type this command in Run box and press Ok.
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0
Then a prompt will come up with this question: Value DisableRegistryTools exists, overwrite (Y/N)? Type yes and hit Enter.
After u did that also type this command in the run box and hit enter.
REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0
Then it will also come up with the question: Value DisableRegistryTools exists, overwrite (Y/N)? Type yes and hit Enter.
Third Method:
STEP1. Disable as much as you can from your startup. Remove programs from your startup folder and such, so as not to lag down the bootup process.
STEP2.Create a new shortcut on your desktop, point it to "C:\Windows\regedit.exe"
STEP3.Log off, then log back on.
STEP4.As soon as you see your desktop, double click on the shortcut. The system does not check for policies until a few seconds after it booted up. If you click on the icon fast enough, it should let you get in.
After you close it though, it will not open unless you redo step 3 and 4.
Fourth Method:
Getting into the registry editor by making a vbs script in notepad:
Open Notepad and copy this script into it. And save it as regtool.vbs on your desktop.
VBS SCRIPT(select everything and copy into notepad and save as regtool.vbs):
'Enable/Disable Registry Editing
'By Harish Lodhi
'I have written this script to enable\disable 'regedit' in case a virus or trojan disables it.
Option Explicit
Dim WSHShell, read1, read2, lol, prash1, prash2, header, flag, fuck, regtype, WshSysEnv, path, flag2, shit
On Error Resume Next
Set WSHShell = WScript.CreateObject("WScript.Shell")
Set WshSysEnv = WshShell.Environment("PROCESS")
path = WshSysEnv("WINDIR") & "\REGEDIT.EXE"
flag2 = ReportFileStatus(path)
prash1 = "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools"
prash2 = "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools"
regtype = "REG_DWORD"
fuck = "Registry Editor (regedit) is now "
header = "RegSwitch by Prashanth Pai"
If (flag2=0) Then shit = MsgBox("Are you kidding me ?" & vbCr & path & " file is missing or does not exist." & vbCr & "This script will now quit without making any changes.",48,header) : WshShell.LogEvent 1, header & " couldn't find the file " & path : Wscript.Quit
read1 = WSHShell.RegRead (prash1)
read2 = WSHShell.RegRead (prash2)
flag=1
If (read1=1 or read2=1) Then flag=0
If flag = 1 Then
WSHShell.RegWrite prash1, 1, regtype
WSHShell.RegWrite prash2, 1, regtype
lol = MsgBox(fuck & "DISABLED", 64, header)
WshShell.LogEvent 0, header & " has successfully DISABLED regedit.exe access."
Else
WSHShell.RegDelete prash1
WSHShell.RegDelete prash2
lol = MsgBox(fuck & "ENABLED.", 64, header)
WshShell.LogEvent 0, header & " has successfully ENABLED regedit.exe access."
End If
Function ReportFileStatus(filespec)
Dim fso, msg, flag2
Set fso = CreateObject("Scripting.FileSystemObject")
If (fso.FileExists(filespec)) Then
flag2 = 1
Else
flag2 = 0
End If
ReportFileStatus = flag2
End Function
Wscript.Quit
'
Getting into the Task Manager by making a vbs script in notepad:
Open Notepad and copy this script into it. And save it as taskmgr.vbs on your desktop.
VBS SCRIPT(select everything and copy into notepad and save as regtool.vbs):
'Enable/Disable Task Manager
'By Harish Lodhi
'I have written this script to enable\disable 'taskmgr' in case a virus or trojan disables it.
Option Explicit
Dim WSHShell, read1, read2, lol, prash1, prash2, header, flag, fuck, regtype, WshSysEnv, path, flag2, shit
On Error Resume Next
Set WSHShell = WScript.CreateObject("WScript.Shell")
Set WshSysEnv = WshShell.Environment("PROCESS")
path = WshSysEnv("WINDIR") & "\SYSTEM32\TASKMGR.EXE"
flag2 = ReportFileStatus(path)
prash1 = "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr"
prash2 = "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr"
regtype = "REG_DWORD"
fuck = "Task Manager (taskmgr) is now "
header = "TaskmgrSwitch by Prashanth Pai"
If (flag2=0) Then shit = MsgBox("Are you kidding me ?" & vbCr & path & " file is missing or does not exist." & vbCr & "This script will now quit without making any changes.",48,header) : WshShell.LogEvent 1, header & " couldn't find the file " & path : Wscript.Quit
read1 = WSHShell.RegRead (prash1)
read2 = WSHShell.RegRead (prash2)
flag=1
If (read1=1 or read2=1) Then flag=0
If flag = 1 Then
WSHShell.RegWrite prash1, 1, regtype
WSHShell.RegWrite prash2, 1, regtype
lol = MsgBox(fuck & "DISABLED", 64, header)
WshShell.LogEvent 0, header & " has successfully DISABLED taskmgr.exe access."
Else
WSHShell.RegDelete prash1
WSHShell.RegDelete prash2
lol = MsgBox(fuck & "ENABLED.", 64, header)
WshShell.LogEvent 0, header & " has successfully ENABLED taskmgr.exe access."
End If
Function ReportFileStatus(filespec)
Dim fso, msg, flag2
Set fso = CreateObject("Scripting.FileSystemObject")
If (fso.FileExists(filespec)) Then
flag2 = 1
Else
flag2 = 0
End If
ReportFileStatus = flag2
End Function
Wscript.Quit
'
0 comments:
Post a Comment