#133715 - 2005-02-13 10:17 AM
Registry Easter Egg
|
NTDOC
Administrator
   
Registered: 2000-07-28
Posts: 11625
Loc: CA
|
This has been around for ever, but recently came across it again so thought I'd write a little script to show the entries for the Explorer\UserAssist\ keys in the Registry. Count Keys in the Windows Registry
Give the script a test run and see some of what Microsoft is recording about your system.
Break On Dim $SO,$Pause $SO=SetOption('Explicit','On') $SO=SetOption('NoVarsInStrings','On') $SO=SetOption('WrapAtEOL','On') Dim $K1,$K2,$Key,$KValue,$Value,$Index $K1='HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{5E6AB780-7743-11CF-A12B-00AA004AE837}\Count' $K2='HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count' ; Set the forground color to WHITE and the background color to LIGHT RED COLOR 'w+/r+' ? '********************' ? '* [ EASTER EGG 1 ] *' ? '********************' COLOR 'y+/n' $KValue=ArrayEnumValue($K1+'\'+$Key) $Index=0 For Each $Value In $KValue ? 'Easter Egg: '+$Index + ' ' + Rot13($Value) $Index = $Index + 1 Next ; Set the forground color to WHITE and the background color to DARK BLUE COLOR 'w+/b' ? ? '********************' ? '* [ EASTER EGG 2 ] *' ? '********************' COLOR 'y+/n' $KValue=ArrayEnumValue($K2+'\'+$Key) $Index=0 For Each $Value In $KValue ? 'Easter Egg: '+$Index + ' ' + Rot13($Value) $Index = $Index + 1 Next COLOR 'w+/r+' ?? 'Press a key to continue...' Get $Pause Function ArrayEnumValue($RegSubKey) Dim $RetCode, $ValueCounter, $CurrentValue, $ValueArray If Not KeyExist($RegSubKey) Exit 87 EndIf $ValueCounter=0 Do $currentvalue=enumvalue($regsubkey,$valuecounter) If Not @ERROR ReDim PreServe $ValueArray[$ValueCounter] $ValueArray[$ValueCounter]=$CurrentValue $ValueCounter=$ValueCounter+1 EndIf Until @ERROR $ArrayEnumValue=$ValueArray Exit 0 EndFunction Function Rot13($s) DIM $i,$c, $o,$u $o=SetOption("CaseSensitivity","Off") $u = (Ubound($s) >=0) If $u $s=Join($s,@CRLF) EndIf For $i = 1 To Len($s) $c = Substr($s,$i,1) Select Case $c >= 'a' And $c <= 'm' $c = Chr(Asc($c)+13) Case $c >= 'n' And $c <= 'z' $c = Chr(Asc($c)-13) EndSelect $Rot13 = $Rot13+$c Next If $u $Rot13 = Split($Rot13,@CRLF) EndIf $o=SetOption("CaseSensitivity",$o) EndFunction
|
|
Top
|
|
|
|
#133724 - 2006-01-19 08:39 AM
Re: Registry Easter Egg
|
NTDOC
Administrator
   
Registered: 2000-07-28
Posts: 11625
Loc: CA
|
Been a while, but I re-ran this script on my box again and found that it also stores the registration information of a couple of my programs. One of them was QuickTime 7
Supposedly this will disable the logging Code:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\Settings] "Instrument"=dword:00000001 "NoEncrypt"=dword:00000001 "NoLog"=dword:00000001
However I'm not positive if it will or not, but using a policy on XP will.
Code:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoInstrumentation"=dword:00000001
You will still have to delete the values or keys if you don't want the old history. But then new stuff should not be created.
|
Top
|
|
|
|
#133726 - 2006-02-16 09:42 PM
Re: Registry Easter Egg
|
NTDOC
Administrator
   
Registered: 2000-07-28
Posts: 11625
Loc: CA
|
Recently found this KB that explains some of the Start Menu policies fo XP that can be used.
Policy Settings for the Start Menu in Windows XP http://support.microsoft.com/kb/292504
SUMMARY This article provides descriptions of the registry entries for policies that you can apply to the Start menu in Windows XP. MORE INFORMATION WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
You can use the Group Policy editor (Gpedit.msc) under the following location to configure Start menu features: User Configuration \ Administrative Templates \ Start Menu and Taskbar Note: Except when noted, all of these registry settings are under the following registry key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer The registry entries are DWORD values. A value of 1 is enabled, and a value of 0 is disabled.
|
Top
|
|
|
|
Moderator: Glenn Barnas, NTDOC, Arend_, Jochen, Radimus, Allen, ShaneEP, Ruud van Velsen, Mart
|
0 registered
and 367 anonymous users online.
|
|
|