IPB

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> Editing The Registry Of The System Not The Cd
pvr02
post Oct 15 2004, 01:02 AM
Post #1


Silver Member
***

Group: Members
Posts: 104
Joined: 8-July 04
Member No.: 6,588



I am tryng to make a cd that I can use for virus scanning and fixing. However, alot of things I need to do require editing the registry. Anyone know how to do this?
Go to the top of the page
 
+Quote Post
Former_SmackLee_post
post Oct 15 2004, 02:50 AM
Post #2





Guests






If your looking to do some manual editing RegEditPE works pretty good. It loads the remote registry hives as subkeys so you can edit them.
you can also try Load Hive to manualy edit remote keys. There is a plugin for it:

loadhive.inf
CODE
; loadhive.inf
; PE Builder v3 plug-in INF file for Remote Registry Loader (LoadHive)
; Plugin Created by Erwin Veermans (http://www.veder.com/nwdskpe/)

[Version]
Signature= "$Windows NT$"

[PEBuilder]
Name="Remote Registry Loader (LoadHive)"
Enable=1
Help="loadhive.htm"
Version=1.0.1

[SourceDisksFiles]
loadhive.exe=2,,1

[Software.Addreg]
0x2,"Sherpya\XPEinit\Programs","System Tools\Load Registry Hive","%SystemDrive%\i386\system32\loadhive.exe"

[Append]
nu2menu.xml, loadhive_nu2menu.xml


Loadhive_nu2menu.xml
CODE
<!-- Nu2Menu entry for Remote Registry Loader -->
<NU2MENU>
<MENU ID="System">      
<MITEM TYPE="ITEM" DISABLED="@Not(@FileExists(@GetWinDir()\System32\Loadhive.exe))" CMD="RUN" FUNC="@GetWinDir()\System32\Loadhive.exe">LoadHive (Remote RegEdit)</MITEM>
</MENU>
</NU2MENU>


loadhive.htm
CODE
<html>
<head></head>
<body>
<i>PE Builder v3 plugin</i>
<hr>
<h1>LoadHive: Remote Registry Loader 1.0.1</h1>
LoadHive is a little utility to load a registry-hive as a subkey under HKEY_LOCAL_MACHINE
for editing a remote registry.<br>
<br>
<b>Usage:</b><br>
<ul>
<li>Run LoadHive.exe
<li>Navigate on the target machine to dir:
<ul>
<li><i>"%SystemRoot%\System32\Config"</i> (NT/XP/2000/2003: local system)
<li><i>"Documents and Settings\%UserName%"</i> (XP/2000/2003: ntuser.dat)
<li><i>"%SystemRoot%\Profiles\%UserName%"</i> (NT: ntuser.dat)
<li><i>"%WinDir%"</i> (W9x: system.dat, user.dat)
</ul>
<li>Select the hive you would like to load as a subkey
<li>Run regedit.exe and edit the subkey
<li>Press "OK" on LoadHive's Close-Box to unload the subkey and save your changes
</ul>
LoadHive is a utility from MatCode. It is allready included with this plugin but you are encouraged
to visit MatCode's <a target="_blank" href="http://www.matcode.com/codes.htm">Code&nbsp;Examples</a>
page to download the source code and/or investigate their other utilities.<br>
<br>
<i>LoadHive v3 plugin by Erwin Veermans (see
<a href="http://www.veder.com/nwdskpe/#download" target="_blank">NwDskPe</a>)</i><br>
<hr>
<i>PE Builder
Copyright (c) 2002-2004 Bart Lagerweij. All rights reserved.</i><br>
</body>
</html>
Go to the top of the page
 
+Quote Post
jaclaz
post Oct 15 2004, 06:10 AM
Post #3


Platinum Member
*****

Group: Moderator
Posts: 4,582
Joined: 25-July 04
From: Italy
Member No.: 6,779



What about RegdatXP by H.Ulbrich?
It needs no install and can edit registry files that are not in use.
http://people.freenet.de/h.ulbrich/
Can't say if it worxs on PE, but can't see why it shouldn't.

jaclaz


--------------------
- Fighting against bloatware since 2004, and proud of it. -
Go to the top of the page
 
+Quote Post
d4vr0s
post Oct 15 2004, 06:40 AM
Post #4


911cd's Boyscout
*****

Group: Members
Posts: 3,107
Joined: 18-November 03
From: Skaro
Member No.: 2,631



RegDatXP works in PE, however it does not allow you to delete keys. RegEditPE is your best bet.
smile.gif


--------------------
A common mistake that people make when trying to design something completely foolproof is to underestimate the ingenuity of complete fools. Douglas Adams

Problems? Check the Troubleshooting FAQ
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



Lo-Fi Version Time is now: 9th February 2010 - 09:44 AM