+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: [Tut]Enable the Disabled[/Tut] (/showthread.php?tid=1237984)
[Tut]Enable the Disabled[/Tut] - .Astro - Apr 23, 2011
Just in case if you get infected with a virus that blocks you out of the primary tools for your computer. These will come in handy, trust me.
Enabling Registry -
--
I got this from Answers.com so don't call me a leecher, cause I didn't say I made it okay?
I just got the registry one from Answers, the rest were Google, but it doesn't make such a big difference.
--
Open up Notepad, and copy and paste the following into it -
Code
Option Explicit
'Declare variables
Dim WSHShell, rr, rr2, MyBox, val, val2, ttl, toggle
Dim jobfunc, itemtype
On Error Resume Next
Set WSHShell = WScript.CreateObject("WScript.Shell")
val = "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools"
val2 = "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools"
itemtype = "REG_DWORD"
jobfunc = "Registry Editing Tools are now "
ttl = "Result"
'reads the registry key value.
rr = WSHShell.RegRead (val)
rr2 = WSHShell.RegRead (val2)
toggle=1
If (rr=1 or rr2=1) Then toggle=0
If toggle = 1 Then
WSHShell.RegWrite val, 1, itemtype
WSHShell.RegWrite val2, 1, itemtype
Mybox = MsgBox(jobfunc & "disabled.", 4096, ttl)
Else
WSHShell.RegDelete val
WSHShell.RegDelete val2
Mybox = MsgBox(jobfunc & "enabled.", 4096, ttl)
End IfOnce you have Copied and Pasted that, go to File > Save As ...
Type in regtool.vbs, and make sure that the file type is on All Files. you can change it to this by clicking the drop down menu underneath the File name box. Then save it, and run it. Then, go to Run > regedit | Or C:/WINDOWS/registry.exe To see if you can open it up.
Enabling Task Manager -
--
Go to Run > regedit
Once the program has opened go to -
HKEY_CURRENT_USER/Software/Microsoft/CurrentVersion/Policies/System
Look for "DisableTaskMgr" in there without the quotations.
Right click > Modify and set the Value Data to 0
Enabling CMD -
--
Go to Run > and type in regedit
Navigate to HKEY_CURRENT_USER/Software/Policies/Microsoft/Windows/System
Right click DisableCMD > Modify > and set the Value Data to 0
How to Unblock Sites -
--
Go to C:/WINDOWS/system32/drivers/etc
Open notepad, don't add anything in it.
Save the file as hosts.
Be sure to take off the .txt file type and change it to All Files
If it saves as a text document, just go to rename, and remove the .txt extension.
How to Enable System Restore -
--
Open up the registry. (Run > regedit)
Go to HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Windows
Then where it says DisableSR, right click it, Modify, and change the Value Data to 0.
Conclusion -
--
Hope this tutorial helped you, and feel free to ask any questions. Pretty much all of these methods use the Registry, so if you don't have that enabled, you might want to.
* - The Stig - Apr 23, 2011
Nice guide man :) This will for sure help users :D
* - .Astro - Apr 23, 2011
It better lmao.~
I'll make a vbscript or a VB.NET program that can enable/disable all of these at once.
* - Anarchy - Apr 23, 2011
Good job, this will help a lot of people.
* - colorless - Apr 23, 2011
If either of these were disabled your best off reformating to avoid further backdoors
* - The Stig - Apr 23, 2011
(Apr 23, 2011 12:58 PM)colorless Wrote: If either of these were disabled your best off reformatting to avoid further backdoors
I recommend NEVER ever doing that! Reformatting is the last step to do! When infected
* - HACKUNIT - Apr 23, 2011
Enabling regedit doesnt work for me
* - .Astro - Apr 24, 2011
Have you saved it as a .vbs wit All Files instead of Text Document?