Tag Archive for 'registry dword value'

registry dword

registry dword

Help "Task Manager has been disabled by your administrator" and "Registry editing has been disabled by the administrator "

First, I discovered that my task manager does not get an error message "Task Manager has been disabled by your administrator". I use a laptop Win XP Home SP2 and I am the administrator. I search the "Help and Support Center," said running Regedit. I did, but I msg error "Registry editing has been disabled by your administrator" I am looking for web … even run the "regedit" @ Start> Run, heard a noise error and I saw something flash on the screen. Even running this command: "REG add HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System / v DisableRegistryTools / t REG_DWORD / d 0 / f … nothing happens. then downloaded Spybot Search & Destroy … If malicious software detected and removed, still can not run Regedit to fix the tskmgr. I miss anything? Please help me! I do not want to reformat my computer ..

Heres http://www.dougknox.com/xp/utils/xp_emerutils.htm a backup copy of them. This problem is generally caused by a virus and must ensure http://www.superantispyware.com/superantispywarefreevspro.html Download SUPERAntiSpyware immediately get rid of things Also check your hard drive system using http://info.prevx.com/downloadcsi.asp Prevx is a virus scanner can not hide it


The script below shows the write, read and delete each value type in the Windows registry.

The registry value types are:

  • String (REG_SZ): A string fixed length text.
  • Binary (REG_BINARY) binary data. Most information on the hardware components are stored as binary data and is displayed in Registry Editor in hexadecimal format.
  • DWORD (REG_DWORD): Data represented by a number of 4 bytes (an unsigned 32-bit). Many parameters for device drivers and services are this type and are displayed in Registry Editor in binary, hexadecimal or decimal.
  • Multiple Channel (REG_MULTI_SZ): A string multiple character. Values that contain lists or multiple values in a way that we can usually read this kind. Entries are separated by spaces, commas or other marks.
  • Expandable string (REG_EXPAND_SZ): A variable length data string. This data type includes variables that are resolved when a program or service uses the data.


Option Explicit

Const HKEY_CLASSES_ROOT = & H80000000

Const HKEY_CURRENT_USER = & H80000001

Const HKEY_LOCAL_MACHINE = & H80000002

Const HKEY_USERS = & H80000003

Const = & H80000005 HKEY_CURRENT_CONFIG

Sun strComputer

Sun objRegistry

Sun strKeyPath

Sun strValueName

Sun strValue

ArrValues Sun

Sun intValue

strComputer = "."

Set objRegistry = GetObject ( "winmgmts: (impersonationLevel = impersonate)!" & StrComputer & "rootdefault: StdRegProv)

'Create a number

StrKeyPath = "Registry Test"

ObjRegistry.CreateKey HKEY_CURRENT_USER, strKeyPath

'Set the value chain

StrKeyPath = "Registry Test"

strValueName = "Test String"

strValue = "123"

ObjRegistry.SetStringValue HKEY_CURRENT_USER, strKeyPath, strValueName, strValue

"Get String Value

StrKeyPath = "Registry Test"

strValueName = "string test"

ObjRegistry.GetStringValue HKEY_CURRENT_USER, strKeyPath, strValueName, strValue

StrValueName Wscript.Echo & "=" & strValue

'String Value Delete

StrKeyPath = "Registry Test"

strValueName = "string test"

objRegistry.DeleteValue HKEY_CURRENT_USER, strKeyPath, strValueName

'Value of all binary

strKeyPath = "Registry Test"

strValueName = "Test binary"

arrValues = Array (1,2,3,4,5,6,7,8,9,10)

ObjRegistry.SetBinaryValue HKEY_CURRENT_USER, strKeyPath, strValueName, arrValues

'Get Binary Value

StrKeyPath = "Registry Test"

strValueName = "Test binary"

ObjRegistry.GetBinaryValue HKEY_CURRENT_USER, strKeyPath, strValueName, arrValues

Each strValue In arrValues

StrValueName Wscript.Echo & "=" & strValue

Next

'Binary Value Delete

StrKeyPath = "Registry Test"

strValueName = "Test binary"

ObjRegistry.DeleteValue HKEY_CURRENT_USER, strKeyPath, strValueName

'Set the DWORD value

StrKeyPath = "Registry Test "

StrValueName = "DWORD Test"

intValue = 123

ObjRegistry.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, strValueName, intValue

'Get DWORD

strKeyPath = "Record Review"

StrValueName = "DWORD Test"

ObjRegistry.GetDWORDValue HKEY_CURRENT_USER, strKeyPath, strValueName, intValue

StrValueName Wscript.Echo & "=" & intValue

"Delete the DWORD

strKeyPath = "Registry Test"

StrValueName = "DWORD Test"

objRegistry.DeleteValue HKEY_CURRENT_USER, strKeyPath, strValueName

'Set Multi-String Value

StrKeyPath = "Registry Test"

= StrValueName "Multi-String Test"

arrValues = Array ( "Test1", "Test2", "Test 3")

ObjRegistry.SetMultiStringValue HKEY_CURRENT_USER, strKeyPath, strValueName, arrValues

'Get value chains

StrKeyPath = "Registry Test"

StrValueName = "Multi-String Test"

ObjRegistry.GetMultiStringValue HKEY_CURRENT_USER, strKeyPath, strValueName, arrValues

For Each strValue In arrValues

Wscript.Echo strValueName & "=" & strValue

Next

"Delete Multi-String Value

strKeyPath = "Registry Test"

StrValueName = "Multi-String Test"

ObjRegistry.DeleteValue HKEY_CURRENT_USER, strKeyPath, strValueName

'Set Expandable String Value

StrKeyPath = "Registry Test"

StrValueName = Test Expandable String "

strValue = "123"

objRegistry.SetExpandedStringValue HKEY_CURRENT_USER, strKeyPath, strValueName, strValue

'Get value chain stretch

StrKeyPath = "Registry Test"

StrValueName = "Test string Stretch "

ObjRegistry.GetExpandedStringValue HKEY_CURRENT_USER, strKeyPath, strValueName, strValue

StrValueName Wscript.Echo & "=" & StrValue

"Remove Expandable String Value

StrKeyPath = "Registry Test"

StrValueName = Test Expandable String "

ObjRegistry.DeleteValue HKEY_CURRENT_USER, strKeyPath, strValueName

"Remove Item

StrKeyPath = "Registry Test"

ObjRegistry.DeleteKey HKEY_CURRENT_USER, strKeyPath

ObjRegistry = Nothing Set

Note if please:

The above script to write, read and delete values in the HKLM hive but can be easily modified to write to all sections of the registry.

The delete function is the same regardless of what kind of value is being deleted