Professional Documents
Culture Documents
()
Windows 3.x INI HKEY_CLASSES_ROOT
HKEY_LOCAL_MACHINE
Windows 9x
?
HKEY_LOCAL_MACHINE
HKEY_USER
HKEY_LOCAL_MACHINE
RegCleaner 1.4
ABC
Registry Optimizer2.0
Norton
Windows 98
MS-DOS
Windows 2000
Win 2000 Win 95/98
Win 2000
Win 2000
Win2K
Win 2000
ABC
2001 04 29 03:28
Windows 9x
Config.sysAutoexec.batSystem.iniWin.ini Protocol.ini
c
:
:System.dat User.dat
;
C Windows
System.da0 User.da0(.da)
C Windows Windows 98
C:\Windows\Bak
Regedit"( 1)
!"
1
" ScanRegistry
Scanreg.exe
cab C:\Windows\sysbckup rb00x.cab
()
" "
HKEY":
";
():
(1)HKEY_CLASSES_ROOT:
(2)HKEY_CURRENT_USER:
HKEY_USERS\.Default
(3)HKEY_LOCAL_MACHINE:()
(4)HKEY_USERS:
HKEY_CURRENT_USER
(5)HKEY_CURRENT_CONFIG:
HKEY_LOCAL_MACHINE\Config
(6)HKEYDYN4DATA:
DWORD ( 2)
2
Windows System.dat
User.dat
2001 04 29 03:28
Windows 95 (Registry)
(System.dat)(User.dat)
INI Windows 95
Windows 95
Windows 95
\Admin Regedit. exe()
(.reg)
REGEDIT
regedit
\\\......=
HKEY_CLASSES_ROOT
.reg
()
user. dat system.dat ( DOS )
Windows 95 CD ROM 9
Cfgback.exe Cfgback.exe CDROM \Other\Msic\Cfgback
c:\Windows Cfgb ack.hlp c:\Windows\help
Cfgbck.exe
2000 07 07 14:35
Windows 98
(
)
5
DOS
Windows 98
()(
)
Scanregw
Windows 98
DOS
Windows 98
Windows 98
Windows
DOS DOS
DOS
Windows 98 MSDOS ( DOS DOS 7.1
Windows 98 32 DOS )
Windows 98 Command
Scanreg DOS
Start
DOS
RegCleaner 1.4
2000 07 07 14:35
RegCleaner Windows
()
RegCleaner Windows
Remove selectde
Windows
Registry Optimizer2.0
2000 07 07 14:35
Win 95/98
Registry
Optimizerftp://www.tensing.com.cn/personal/newhua/regop_e.zip
Regclean
1 C share\system\regop_e
2 Win 98MSDOS DOS Win
98MSDOS
MSDOS MSDOS
MSDOS
2000 07 07 14:35
Next"
" ?Nuts Bolts Registry
Wizard
1
( )
(
)RegOpt ( 2) Windows 9x
?
RegClean
!
2
Windows
"
?
()
:
Windows 9x ?
WinBoost 2000 Gold Windows
9x Magic Set()( 3)
?"!
3
Regedit
Norton Registry Editor( 4)
Resplendent Registrar( Registrar ) Regedit
!
4
Regedit
"!
1 Windows
HkeyLocalMachine\Software\Microsoft\Windows\CurrentVersion\Winlogon
:LegalNoticeCaption!";
:LegalNoticeText=!"( 5)
"
2
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
DWORD
NoFavoritesMenuNoRecentDocsMenuNoSetFoldersNoFindNoRunNoLogoffNoCloseN
oStartBanner 1 0 Windows )
HKEY_CURRENT_USER HKEY_USERS
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
NoDrives:01 00 00 00 A 02 00 00 00 B 04
00 00 00 C 05 00 00 00 D FF FF FF FF DWORD 1
NoSetTaskbar"
4
Regedit( )
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer DWORD
1NoSaveSettings"NoChangeStartMenu"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies System"
DWORD 1DisableRegistryTools" regedit
5 CD AUTORUN() CD
HKEY_LOCAL_MACHINE\Enum\SCSI\LITEON__CDROM_LTN403L__F(
)\MFCHILD0000PCIVEN_1106DEV_0571SUBSYS_00000000REV_06BUS_00
DEV_07 FUNC_01 AutoInserNotification"
00.
HKEY_CLASSES_ROOT\AudioCD\shell play"
Autorun( )
CD
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
NoDriveTypeAutoRun bd 00 00 00
6
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion Run
( 6) Run
()
RunServies Run Windows
Runservies Run !
6
7
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
!
8
BMP
HKEY_CLASSES_ROOT\ ShellShell
"Command
Rundll32.exe Shell32.dllOpenAs_RunDLL 1 BMP
2001 04 29 03:28
NoTrayContextMenu=01 00 00 00
[ ] [ ] [ ] [HKEY CURRENT
USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
NoSetFolders=01 00 00 00
[ ] [ ] [HKEY CURRENT
USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
NoChangeStartMenu=01 00 00 00NoSetTaskbar=01 00 00 00
[ ] [ ...] [HKEY CURRENT
USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
NoFolderOptions=01 00 00 00
[ ] [ ] [HKEY CURRENT
USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
NoSetActiveDesktop=01 00 00 00
[ ] [Windows Update] [HKEY CURRENT
USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
NoWindowsUpdate=01 00 00 00
[HKEY CURRENT
USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
NoRecentDocsHistory=01 00 00 00
[HKEY CURRENT
USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
ClearRecentDocsOnExit= 01 00 00 00
[HKEY CURRENT
USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
NoDriveTypeAutoRun=00 00 00 00
CD [HKEYCLASSESROOT\AudioCD\shell]
@=
[HKEYCURRENT
USER\Software\Microsoft\Windows\CurrentVersion\Explorer] Link=00 00 00 00
MS DOS [HKEY CURRENT
USER\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp]
Disabled=01 00 00 00
()[HKEYCURRENTUSER\Control
Panel\desktop] WaitToKillAppTimeOut=10000
()[HKEYCURRENTUSER\Control
Panel\desktop] HungAppTimeout=10000
2001 04 29 04:27
Win 9x Win 98
Scanreg.exe(Scanregw)
Win 98 Scanreg
System.datUser.datSystem.iniWin.ini Cab
rb00.Cab Sysbckup 5
Scanreg
Scanreg[/]
/Backup
/Restore
/Fix
/Comment=<> CAB
/Autoscan()
/Scanonly:
/opt 500KB
/Fix
Windows
Win 98
Win 98 MB Cab 5
23MB
1
Win 98
2 Win 98 Scanregw
rb000.cab
3
1 rb001 rb002
2
Win 98 rb000 rb001 rb002
DOS scanreg/restore
CAB
DOS ( MSDOS )
C:\WINDOWS
attrib s h r .dat
extract/e/y sysbckup\rb00x.cab .dat
system.ini win.ini .dat .
attrib s h r .
extract/e/y sysbckup\rb00x.cab .
( rb00x x )
exit CtrlAltDel Win 98
2001 04 29 03:28
198 Scanreg()
Windows 98 Scanreg.exe
DOS
DOS Scanreg/Backup
Scanreg/Restore(
) Scanreg/Opt(/Opt
exit")
Scanreg C:\Windows\command.
98 !
2
Regedit"""
"
3
1
Sysbackup Rb00x.cab Sysbackup
Attrib Win 98
DOS Extract.exe C:\Windows\sysbackup\
rb00x.cab C:\Windows\
rb00x.cab 5
:A:\>extract/e/l dir C:\Windows C:\Windows\sysbackup\rb004.cab ..
C:\Windows\Command\ Extract
Win 98 rb00x.cab
rb00x.cab () C:\Windows\
WinZip CAB "
( 2)!
4
Windows 98
2001 04 29 03:50
Windows 98 Regedit.exe
1 Windows 98
Win Windows 98 Windows 98
MY Windows HKEY_LOCAL
MACHINE/SOFTWARE/Microsoft/Windows/Current Version Version
Windows 98
2
HKEY_CLASS_ROOT/CLSID/{20D04FE0 3AEA 1069 A2D8
08002B30309D}/shell shell 1Open
Open Command Command
explorer /e c:\(c:\c:\
explorer /e c:\Regedit
3 Windows 98
HKEYLOCALMACHINE\Software\Microsoft\Windows\CurrentVersion\Setup
SourcePath
4
Windows 98
HKEYLOCALMACHINE\Software\Classes\lnkfile
HKEYLOCALMACHINE\Software\Classes\piffile
IsShortCut
5.
/
HKEY_USERS/Default/Software/Microsoft/Windows/Current
Version/Explorer/Runmru
HKEY_USERS/Default/Software/Microsoft/Windows/CurrnetVersion/Explorer/DOC Find Spec
MRU Windows
6.
HKEY
CLASSESROOT/CLSID/{645FF0405081101B9F0800AA002F954E}
HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Explorer/Desktop
/Namespace/{645FF0405081101B9F0800AA002F954E}
NameSpace
{645FF0405081101B9F0800AA002F954E}
7.
HKEY
CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer
/Dwordnew Value 1 Nodesktop 1
0 Nodesktop Nosavesettings
1 Noclose
1
8.
HKEYCURRENTUSER/ontrol Panel/desktop
MenuShowDelay 1101 Win 98
9. Windows
Windows 98
HKEY LOCAL MACHINE\Software\Microsoft\Windows\Current
Version\WinlogonDefault Password
HKEYLOCALMACHINE\etwork\Logon
10.
HkeyCurrentUser\AppEvents\Schems\Apps Apps.Default
Apps
Open
appgpfault
default
maximize
menucommand
menupopup
minimize
restoredown
restoreup
open/close /
systemexclamation
systemquestion
11.
HKEY LOCAL MACHINE\Config\0001\Display\Settings
Fixedfon.fon ( Vgafix.fon) TTF
Fon
Windows 98 System.datUser.dat
System.da0User.da0 Windows 95
Win 98
1.
System.datUser.dat
Win 98
DOS ( ^_^)
2.
Windows 98
Win 98 :
Regedit /
3.Win 98
Win 98 .cab(Cabinet)
Win 98
System.datUser.datSystem.iniWin.ini rb00.cab
Windows\Sysbackup 04 5
5
Windows Extract.exe ( Windows\command )
Extract /E \Windows\Sysbakcup\rb001.cab . rb001.cab
WinZip 7.0
2001 04 29 03:50
!
Win 95
Win 95
Win 95
FontPackageRoman=
FontPackageSwiss=
FontPackageModern=
FontPackageScript=
FontPackageDecorative=
Associated CharSet //
ANSI(00)=yes
OEM(FF)=yes
GB2312(86)=yes
SYMBOL(02)=no
()
HKEY_LOCAL_MAC
HINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Win 95 8.3
8 (
) 8 8
Win 95
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem FileSystem
Binary ValueNameNumericTail 0Win
95 (DOS )
/
()()
/?
HKEY_LOCAL_MACHINE\SOFTWARE\ Microsoft\Windows\CurrentVersion\Uninstall ;
(
) ;() Uninstall
()
(
)
Win 95 1M 4M
Win 95
()
www.reg
2001 04 29 03:50
HKEYCLASSESROOT\CLSID\
{645FF0405081101B9F0800AA002F954E}
( ) Win 95
Win 95 ,,
, HKEY LOCAL
MACHINE\SOFTWARE\Classes\CLSID,\,
, DefaultIcon , Full(DeafultEmpty),
,(
),
Win 95
(Win 95
) HKEYLOCAL
MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion Version
(Win 95 )(29 )
// Windows 95
HKEYCLASSESROOT\ \shellex
\ContextMenuHandlers ContextMenuHandlers
\New Key 1{645FF0405081101B
9 F0800AA002F954E}
Windows 95 /
HKEY
USER\.Default\Software\Microsoft\Windows\CurrentVersion\Exploer\RunMRU
HKEYCIURRENTUSER\ControlP anel\desktop
Menu Show Dlay
1101 Windows 95
HKEYLOCAL
MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace
()()
Win 95
1. c:\windows\Regedit.exe ()
2. HKEYCURRENTUSER\AppEvents\Schemes\Apps
3. Apps
4.(K)
5.New Value 1
6.
7.(K)
8.New Value 1
Close Open
G.P.Fault RestoreDown
Maximize RestoreUp
MenuCommand
SystemAsterisk
MenuPopup
SystemExclamation
Minimize SystemQuestion
9.
Word
Word /
HKEYCLASSESROOT\Euation 3.0
Microsoft Equation 3.0 3.0
Word
Win 95
HKEYLOCAL
MACHINE\SOFTWARE\Microsoft\Deveoper\Setup
Win 95
HKEY
CURRENTUSER\Control Panel\Desktop\WindowsMetrics
(New)\(String Value) Minanimate
Minanimate
(Modify)(Value Data) 0
Win 95
IP
IP
IP
HKEYLOCAL
MACHINE\System\CurrentControlSet\Services\Class\NetTrans
0000 0001 0002
DriverDesc TCP/IP IPAddress IPMask IPAddress
IP IPMask IPAddress
202.10.1.10202.10.1.25IPMask 255.255.255.0255.255.255.0
IP 202.10.1.10 202.10.1.25
MS-DOS
jinqq2001 11 30 17:16
/L:system system.dat
/R:user user.dat
/E:
Regpath
C:\Windows\System.dat
C:\Windows\Profiles\User.dat HKEY_CLASSER_ROOT file.reg
/L:system system.dat
/R:user user.dat
.reg
/E/C
file1.reg C:\Windows\System.dat
C:\Windows\Profiles\User.dat Regedit /L:C:\Windows\ /R:C:\Windows\Profile\
file1.reg
3
.reg System.dat User.dat
/L:system system.dat
/R:user user.dat
/C:.reg
/C
file1.reg C:\Windows\System.dat
C:\Windows\Profiles\User.dat
Regedit /L:C:\Windows\ /R:C:\Windows\Profiles\ /C file1.reg
4
/L:system system.dat
/R:user user.dat
/C: REGPATH
/C
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrenVersion\Run
Regedit /L:C:\Windows\ /R:C:\Windows\Profiles\ /D
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrenVersion\Run
5
MS_DOS Scanreg.exe
/backup
/restore
/comment /restore
/fix
.CAB CAB Started
NotStartedStarted WindowsNotStarted
Windows
Windows 2000
Win 2000 Win 95/98
Win 2000
2001 09 06 09:08
COM+.bkf
.bkf
Regedit Win 2000
Regedit 2
OK .reg
.reg
:Start .reg
Win 2000
NTBackup
%Systemroot
%\Repair
Win 2000
2001 09 05 14:06
Windows 3.x INI Windows Windows Win
2000 INI
Win 2000 Win 2000
Win 2000 Win 2000
Win 2000
1.
Win 2000
Win 2000 Regedit.exe Regedt32.exe
Win 2000 9X 32
INI Active Directory
Active Directory
Windows 3.X Win 2000
3.
Win 2000 PC 32
PC
1024768 800600
Win 2000
Win 2000 PC
1.
Win 2000 Win 2000
2.
Win 2000
PC Interrupts PC Win 2000
3. Win 2000
Win 2000 Win 2000 :
Win 2000 Win 2000 PC
4.
Win 2000
Win 2000 PC
5. Win 2000
Win 2000
User Profiles
6.
Win 2000 Microsoft Component Object ModelCOM
7.
PC
/ PC
Win 2000
1. Win 2000
Win 2000 Regedit Regedt32
2.
3.
4.
Local Group Policy
5.
Win2K
xia xiang2001 07 11 17:34
Microsoft
Windows 3.1 OLE OLE Win95/98NT 2K
Win2K
""
""
RegEdit
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
""
regedt32
HEKY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
LocalizedString @C:\winnt\system32\shell32.dll, -9216@1033,
LocalizedString REG_EXPAND_SZ
"""%username% on %computername%"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon
DontDisplayLastUserName 11 True0
FalseOK
400 100
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom AutoRun 0
Ctrl+Alt+Del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\WinLogon
LegalNoticeText ""
LeagalNoticeCaption ""
Win 2000
2001 07 10 09:44
Windows 2000
BMP
Regedit
HKEY_USERS\.DEFAULT\Control Panel\desktopWallpaper
BMP TileWallpaper
012
HKEY_
USERS\.DEFAULT\Control Panel\ColorsBackground
58 110 165 RGB
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\
Winlogon LegalNoticeCaptionLegalNoticeText
Ctrl+Alt+Delete
Windows
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\
WinlogonLogonPrompt
Windows
Windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
ShowLogonOptions1
Windows 2000
Windows 2000
ABC
Ctrl+Alt+Delete Windows
Ctrl+Shift ABC
ABC
HKEY_USERS\.DEFAULT\Keyboard Layout\Preload
Windows 2000
Windows 2000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
DefaultUserNameAdministrator
DefaultPassword DefaultUserName
AutoAdminLogon1
Windows 2000
2001 12 18 15:20
1 HKEY_CLASSES_ROOT\Directory\shell CloseClose
&&
1
2CloseCommand
RUNDLL32.EXE USER.EXE,EXITWINDOWS
3
1
1 HKEY_LOCAL_MACHINE\software \Microsoft\Windows\CurrentVersion\winlogon,
LegalNoticeCaption,
LegalNoticeText,
2
Windows 2313
1 HKEY_CURRENT_USER\ControlPanel\International
sTimeFormathh mm
2 hh mm
1 HKEY_CURRENT_USER\Software\ Microsoft\Windows\CurrentVersion\Policies
ActiveDesktop WORD
NoChangingWallPaper1
2 HTML
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Policies\Explorer NoSaveSettings
0 1
HKEY_CURRENT_USER\Software\Microsoft\Winodws\
CurrentVersion\Policies\ Explorer,NoDesktop",1
HKEY_CLASSES_ROOT\CLSID\{645FF040_ 5081_101B_9F08_00AA002F954E}
Win 2K Win 98
HKEY_CLASSES_ROOT\Paint.Picture\DefaultIcon,1
%1,
HKEY_CLASSES_ROOT\shellex\ContextMenuHandlers
645FF040_5081_101B_9F08_00AA002F954E
Windows
HKEY_CURRENT_USER\ControlPanel\Desktop MenuShowDelay,
0_100000 20 400
Windows
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Explorer\Advanced showInfoTip
1
Windows
HKEY_CLASSES_ROOT\lnkfile,IsShortcutwindows
HKEY_CLASSES_ROOT\piffile,IsShortcut"DOS
2001 12 18 15:20
Windows
HKEY_CURRENT_USER\Controlpanel\desktop,AutoEndTasks 1
CDROM
CDROM
HKEY_LOCAL_MACHINE\SYSTEM\Current ControlSet\Services\Cdrom
Autorun 0 1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\shutdown
FastReboot, 1
/
/
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Uninstall
HKEY_USER\.Default\Software\Microsoft \Windows\Currentversion\Exploer\RunMru
.dll
System .dll
.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\SharedDlls
.dll 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\
Currentversion\Policies\Explorer
NoDrives A
1C 4,D 8 16 ABC
07000000
Windows
HKEY_USER\.DEFAULT\Software\Microsoft \Windows\CurrentVersion\Explorer\Advanced,
HideFileExt 1 0
HKEY_CURRENT_USER\Control Panel\Appearance\Schemes
2001 12 18 15:20
Windows
HKEY_LOCAL_MACHINE\SYSTEM\Current ControlSet\Control\NetworkProvider
Restore Connection 1
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\MSTCP
DefaultTTL 128 HKEY_LOCAL_MACHINE\System\
CurrentControlSet\Services\Class\NetTrans MaxMTU MaxMSS 576 536
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVesion\Internet Settings
NoNetAutodial, 01000000
Win 98
Win 98
Win 98
1Microsoft
Microsoft
Windows
BO
BO
BO .EXE
DOS
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
.exe BO windows\system .exe
windll.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run