RE: How hidden the registry key?

NTFSD
1
  1. wrong list. this would be bset asked on ntdev.
  2. we don’t believe you… mr bad man :stuck_out_tongue:

Rob Linegar
Software Engineer
Data Encryption Systems Limited
www.des.co.uk | www.deslock.com

From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of jackzdk
Sent: 03 December 2004 15:30
To: Windows File Systems Devs Interest List
Subject: [ntfsd] How hidden the registry key?

hi all
First,I am not cracker,I am not bad man.
I want to hide some the registry keys.
Using ZwQueryKey() and ZwEnumerateValueKey() is not good mathod,someone said.
How can I hidden the registry key?

·1.5G 全国最大空间——网易126免费邮箱 http://www.126.com 火热抢注中>>> http:
体验30兆超大附件发送，享受100％卡巴斯基专业杀毒……更多超G感受等您来体验！ http:

http: — Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17 You are currently subscribed to $subst(‘List.Name’) as: $subst(‘Recip.EmailAddr’) To unsubscribe send a blank email to $subst(‘Email.UnSub’)</http:></http:></http:>

2

There are a couple things you can do here, first you can use the technique
by Sysinternals
http://www.sysinternals.com/ntw2k/info/tips.shtml#registryhidden that puts
a null in the name so that ASCII commands can’t see it. Second consider
putting the key under a key that you put strong security on so that without
being the system you cannot access the key.

–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Remove StopSpam from the email to reply

“jackzdk” wrote in message news:xxxxx@ntfsd…
hi all
First,I am not cracker,I am not bad man.
I want to hide some the registry keys.
Using ZwQueryKey() and ZwEnumerateValueKey() is not good mathod,someone
said.
How can I hidden the registry key?

¡¤1.5G È«¹ú×î´ó¿Õ¼ä¡ª¡ªÍøÒ×126Ãâ·ÑÓÊÏä http://www.126.com »ðÈÈÇÀ×¢ÖÐ>>>
ÌåÑé30Õ׳¬´ó¸½¼þ·¢ËÍ£¬ÏíÊÜ100£¥¿¨°Í˹»ùרҵɱ¶¾¡­¡­¸ü¶à³¬G¸ÐÊܵÈÄúÀ´ÌåÑ飡