Manipulasi Registry Windows Manipulasi Registry Windows

Berbeda dengan OS Linux yang tidak menggunakan Registry, Widows menggunakan Registry sebagai “Pusatnya” Windows. Manipulasi Registry Windows, harus dikenal dahulu letak Registry pada Windows. Registry Windows terletak di C:\Windows\system32\reg.r dan windows mempunyai tool untuk mengeditnya yang bernama regedit di directory. Delphi mempunyai Unit Registry yang dapat digunakan untuk menulis, mengganti, menghapus registry-registry Windows, dengan delphi dan sedikit pengetahuan tentang

registry kita bisa melakukannya. Misalnya: *Mendisable TaskManager* {tambahkan Registry pada klause uses}
Procedure TForm1.Form.Create(Sender:TObject);
var
reg:Registry;
Begin
reg:=TRegistry.Create;
Try
reg.RootKey:=HKEY_CURRENT_USER;
reg.OpenKey(‘\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System’,true);
reg.WriteInteger(‘DisableTaskMgr’,1);
reg1.CloseKey;
Finally
reg.free;
end;
end;
Agar Aplikasi jalan saat window pertama aktif
User_key:[HKEY_LOCAL_MACHINE\Software\Microsoft\Wind ows\CurrentVersion\Run
Name: String nama applikasi{seperti contoh make virus with delphi
Type: REG_SZ(String_Value)
Value:
Disable TaskManager
User Key : [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
Name : DisableTaskMgr
Type : REG_DWORD (DWORD Value)
Value : (0 = default, 1 = disable Task Manager)
Jika typenya DWORD maka reg.writenya integer. Diatas adalah Value / nilai untuk mendisable TaskManger,anda juga bisa memanipulasi value-value yang lain dengan melihatnya di Regedit tool yang penting adalah parameter-parameternya.
Mendisable regedit
User Key: [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\
System]
Name: DisableRegistryTools
Type: REG_DWORD (DWORD Value)
Value: (0 = allow regedit, 1 = disable regedit)
Menghilangkan “RUN” dari Start Menu
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Name: NoRun
Type: REG_DWORD (DWORD Value)
Value: (0 = disabled, 1 = enabled)
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
Name: IgnoreShiftOveride
Type: REG_DWORD (DWORD Value)
Value: (0 = default, 1 = ignore shift)
Disable Taskbar Context Menu
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Name: NoTrayContextMenu
Type: REG_DWORD (DWORD Value)
Value: (0 = disabled, 1 = enabled)
Menyembunyikan subfolder Start Menu
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Name: NoStartMenuSubFolders
Type: REG_DWORD (DWORD Value)
Value: (0 = default, 1 = enable restriction)
Menghilangkan tombol All Program dari start menu
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Name: NoStartMenuMorePrograms
Type: REG_DWORD (DWORD Value)
Value: (0 = default, 1 = disable button)
Disable kemampuan klik kanan di Desktop
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Name: NoViewContextMenu
Type: REG_DWORD (DWORD Value)
Value: (0 = disabled, 1 = enabled)
Disable Task Scheduler
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
Name: SchedulingAgent
Type: REG_SZ (String Value)
Value: mstask.exe
Disablemen MS-DOS Command Prompt
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
WinOldApp]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
WinOldApp]
Name: Disabled
Type: REG_DWORD (DWORD Value)
Value: (0 = disable, 1 = enable)
Disable Command Prompt dan Batch Files
User Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System]
Name: DisableCMD
Type: REG_DWORD (DWORD Value)
Value: (0 = default, 1 = disabled, 2 = disabled but allow batch)
Run Start up di CMD(Command Prompt)
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Command Processor]
Name: AutoRun
Type: REG_SZ (String Value)
Value: Command to Execute
ex:AutoRun REG_SZ “c:\batch\environ.bat”
Menspesifikasi exe file saat winlogon
System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Name: System
Type: REG_SZ (String Value)
Value: (default = lsass.exe)
Disable Menu Bars dan Start Button
ubah nama key dengan mengganti “-” di atas GUID (i.e. {-5b4dae26-b807-11d0-9815-00c04fd91972}).
System Key: [HKEY_CLASSES_ROOT\CLSID\{5b4dae26-b807-11d0-9815-00c04fd91972}]
Hide or Display Administrative Tools Menu
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced]
Name: StartMenuAdminTools
Type: REG_SZ (String Value)
Value: Yes or No
Menghilangkan kemampuan klik kanan di start menu Button (All Windows) Nilai manipulasi ini akan kelihatan ketika user menekan klik kanan pada tombol start untuk memilih Explore atau Find.
key [HKEY_CLASSES_ROOT\Directory\shell] kemudian nilai ’shell’ ganti menjadi ’shell.old’.
Lakukan juga pada
key [HKEY_CLASSES_ROOT\Folder\shell] dan ganti nilainya menjadi [...\shell.old].
Menghilangkan Control Panel, Printer dan Network Settings
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Name: NoSetFolders
Type: REG_DWORD (DWORD Value)
Value: (0 = disabled, 1 = enabled)
Menghilangkan setting taskbar di start menu
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Name: NoSetTaskbar
Type: REG_DWORD (DWORD Value)
Value: (0 = disabled, 1 = enabled)
Menghilangkan tombol logoff di start menu
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Name: NoLogOff
Type: REG_DWORD (DWORD Value)
Value: (1 = no log off, 0 = show log off)
Disable Drag-dan-Drop di Start Menu
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Name: NoChangeStartMenu
Type: REG_DWORD (DWORD Value)
Value: (0 = disable restriction, 1 = enable restriction)
Menghilangkan Run dari Start Menu
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Name: NoRun
Type: REG_DWORD (DWORD Value)
Value: (0 = disabled, 1 = enabled)
Menghilangkan “Search” dari Start Menu
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Name: NoFind
Type: REG_DWORD (DWORD Value)
Value: (0 = disabled, 1 = enabled)
Menghilangkan Tray Items dari Taskbar
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Name: NoTrayItemsDisplay
Type: REG_DWORD (DWORD Value)
Value: (0 = default, 1 = enable restriction
Disable Folder Options Menu
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Name: NoFolderOptions
Type: REG_DWORD (DWORD Value)
Value: (0 = show options, 1 = hide options)
Remove Properties fromMy Computer
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Name: NoPropertiesMyComputer
Type: REG_DWORD (DWORD Value)
Value: (0 = Properties, 1 = No Properties)
Menghilangkan semua Items di the Desktop
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Name: NoDesktop
Type: REG_DWORD (DWORD Value)
Value: (0 = disable restriction, 1 = enabled restriction)
Disable Hotkeys Windows
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Name: NoWinKeys
Type: REG_DWORD (DWORD Value)
Value: (0 = disable restriction, 1 = enable restriction)
Peringatan HardDisk penuh
System Key: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\
Parameters]
Name: DiskSpaceThreshold
Type: REG_DWORD (DWORD Value)
Value: 0 – 99 percent (Default is 10)