红叶提供的防黑注册表键值

sansa520 · 发表于 2006-9-20 11:16:26

; 启用系统文件保护
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SfcDisable"=hex(7):30,00,78,00,46,00,46,00,46,00,46,00,46,00,46,00,39,00,44,\
00,00,00,00,00
;
; 保护系统初始化程序
"%SystemRoot%\\system32\\userinit.exe,"
;
; 保护系统外壳
"VmApplet"="rundll32 shell32,Control_RunDLL \"sysdm.cpl\""
"Shell"="%SystemRoot%\\Explorer.exe"
;
; 防范恶意程序彻底隐藏文件（开启显示隐藏文件也不行！）
"Checkedvalue"=-
"valueName"=-
"Defaultvalue"=-
"HKeyRoot"=-
;
;防范命令行自动运行参数被添加附加程序
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor]
"AutoRun"=""
;
;防范以登录或注销脚本形式自动加载恶意程序
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group
Policy\State\Machine\Scripts]
;
;修正和防范启动组位置重定向
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Startup"="%USERPROFILE%\\「开始」菜单\\程序\\启动"
;
;防范通过 load 或 run 自动运行恶意程序和更改可执行文件类型
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
"load"=-
"run"=-
;
; 防止恶意 DLL 与 Explorer 链接加载
[HKEY_CLASSES_ROOT\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}]
@="%SystemRoot%\\system32\\webcheck.dll"

sansa520 · 发表于 2006-9-20 11:18:40

屏蔽3721,CNNIC,baidu,POPO

;3721网络实名
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{B83FC273-3522-4CC6-92EC-75CC86678DA4}]
"Compatibility Flags"=dword:00000400

;3721网络实名
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{4522DBFE-14CD-4A59-AC2A-54BADFDD6D53}]
"Compatibility Flags"=dword:00000400

;3721上网助手
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{1B0E7716-898E-48CC-9690-4E338E8DE1D3}]
"Compatibility Flags"=dword:00000400

;3721上网助手
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{7CA83CF1-3AEA-42D0-A4E3-1594FC6E48B2}]
"Compatibility Flags"=dword:00000400

;3721中文邮
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{4EDBBAEA-F509-49F6-94D1-ECEC4BE5B686}]
"Compatibility Flags"=dword:00000400

;百度搜霸
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{9BBC1154-218D-453C-97F6-A06582224D81}]
"Compatibility Flags"=dword:00000400

;百度搜索伴侣
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{BC207F7D-3E63-4ACA-99B5-FB5F8428200C}]
"Compatibility Flags"=dword:00000400

;CNNIC通用域名
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{9A578C98-3C2F-4630-890B-FC04196EF420}]
"Compatibility Flags"=dword:00000400

;网易泡泡
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{CF051549-EDE1-40F5-B440-BCD646CF2C25}]
"Compatibility Flags"=dword:00000400

;新浪点点通
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{15DDE989-CD45-4561-BF99-D22C0D5C2B74}]
"Compatibility Flags"=dword:00000400

;新浪IE通
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{98FA5667-513F-4F15-8A15-C171477B8847}]
"Compatibility Flags"=dword:00000400

;搜狐视频播放器
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{2D0C7226-747E-11D6-83F0-00E04C4A2F90}]
"Compatibility Flags"=dword:00000400

;搜狐搜索工具
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{CE7C3CF0-4B15-11D1-ABED-709549C10000}]
"Compatibility Flags"=dword:00000400

;XXXToolbar
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{018B7EC3-EECA-11D3-8E71-0000E82C6C0D}]
"Compatibility Flags"=dword:00000400

;Mtree Dialers
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{E8EDB60C-951E-4130-93DC-FAF1AD25F8E7}]
"Compatibility Flags"=dword:00000400

;Mtree Dialers
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{FC87A650-207D-4392-A6A1-82ADBC56FA64}]
"Compatibility Flags"=dword:00000400

;Fix BUG
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{2933BF90-7B36-11D2-B20E-00C04F983E60}]
"Compatibility Flags"=dword:00000400

;Alexa Toolbar
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{69A72A8A-84ED-4a75-8CE7-263DBEF3E5D3}]
"Compatibility Flags"=dword:00000400

;SearchIt Toolbar
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{3717DF57-0396-463d-98B7-647C7DC6898A}]
"Compatibility Flags"=dword:00000400

;Sexxx拨号程序
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{7EB2A76C-97AE-4cf3-9C6A-EA0F61F137E1}]
"Compatibility Flags"=dword:00000400

;WeatherCAST
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{FC327B3F-377B-4CB7-8B61-27CD69816BC3}]
"Compatibility Flags"=dword:00000400

;　PortalSearchingToolbar
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{D6862A22-1DD6-11D3-BB7C-444553540000}]
"Compatibility Flags"=dword:00000400

;Ahmm Dialers
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
Compatibility\{8522F9B3-38C5-4aa4-AE40-7401F1BBC851}]
"Compatibility Flags"=dword:00000400

[ 本帖最后由 sansa520 于 2006-9-20 11:25 AM 编辑 ]

sansa520 · 发表于 2006-9-20 11:23:20

IE默认值恢复

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"=""
"Window Title"=-
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\TypedUrls]
[-HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer]

恶意网页木马免疫

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000566-0000-0010-8000-00AA006D2EA4}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0D43FE01-F093-11CF-8940-00A0C9054228}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{88D969C5-F192-11D4-A65F-0040963251E5}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{88D969EA-F192-11D4-A65F-0040963251E5}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}]

清除历史记录

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs]
[-HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\RecentFileList]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Doc Find Spec MRU]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

恢复系统默认值

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Winlogon]

[-HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
[-HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\System]

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

修正被更改的文件关联

;保持pif文件的打开方式
[HKEY_CLASSES_ROOT\piffile\shell\open\command]
@="\"%1\" %*"
;
;保持inf文件的打开方式
[HKEY_CLASSES_ROOT\inffile\shell\open\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,4e,00,4f,00,\
  54,00,45,00,50,00,41,00,44,00,2e,00,45,00,58,00,45,00,20,00,25,00,31,00,00,\
  00
;
;保持hlp文件的打开方式
[HKEY_CLASSES_ROOT\hlpfile\shell\open\command]
@="%SystemRoot%\\System32\\winhlp32.exe %1"
;
;保持cmd批处理文件的打开方式
[HKEY_CLASSES_ROOT\cmdfile\shell\open\command]
@="\"%1\" %*"
;
;保持com文件加载方式
[HKEY_CLASSES_ROOT\comfile\shell\open\command]
@="\"%1\" %*"
;
;保持exe文件加载方式
[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

XP系统忧化

;打开启动优化功能
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Dfrg\BootOptimizeFunction]
"Enable"="Y"

;关闭Dr_Warson
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug]
"Auto"="0"

;关闭共享
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters]
"AutoShareServer"=dword:00000000
"AutoSharewks"=dword:00000000

;关机时自动关闭停止响应的程序
[HKEY_CURRENT_USER\Control Panel\Desktop]
"AutoEndTasks"=dword:00000001

;加快XP响应死锁程序速度
[HKEY_CURRENT_USER\Control Panel\Desktop]
"HungAppTimeout"="200"
"WaitToKillAppTimeout"="1000"

;缩短开关机响应时间
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control]
"WaitToKillServiceTimeout"="500"

;加快菜单显示速度
[HKEY_CURRENT_USER\Control Panel\Desktop]
"MenuShowDelay"="40"

;加快程序运行速度
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem]
"ConfigFileAllocSize"=dword:000001f4

;加快局域网访问速度
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace\{2227A280-3AEA-
1069-A2DE-08002B30309D}]
@="Printers"

;加快搜索网上邻居的速度
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace\{D6277990-4C6A
-11CF-8D87-00AA0060F5BF}]

;加快预读能力改善开机速度
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters]
"EnablePrefetcher"=dword:00000004

;加快自动更新率
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Update]
"UpdateMode"=dword:00000000

;禁用系统还原
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000001

;禁止远程修改注册表
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg]
"RemoteRegAccess"=dword:00000001

;开启IE的下载功能
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]
"1803"=dword:00000000

;IE以9线程下载
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MaxConnectionsPer1_0Server"=dword:00000009
"MaxConnectionsPerServer"=dword:00000009

;开启硬件优化
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Vxd\BIOS]
"CPUPriority"=dword:00000001
"PCIConcur"=dword:00000001
"FastDRAM"=dword:00000001
"AGPConcur"=dword:00000001

;停止磁盘空间不足警告
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoLowDiskSpaceChecks"=dword:00000001

;修改FlashGet的30个线程和50下载任务
[HKEY_CURRENT_USER\Software\JetCar\JetCar\General]
"MaxParallelNum"=dword:00000030
"MaxSimJobs"=dword:0000050

;自动清除内存中多余的dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer]
"AlwaysUnloadDLL"=dword:00000001

rock269 · 发表于 2006-9-21 21:12:03

收下，好东东，确实了得

xiangsui · 发表于 2006-9-30 13:52:16

呵呵```这个偶也早提取收藏了``

流年转换 · 发表于 2006-10-5 09:10:18

;修改FlashGet的30个线程和50下载任务
[HKEY_CURRENT_USER\Software\JetCar\JetCar\General]
"MaxParallelNum"=dword:00000030
"MaxSimJobs"=dword:0000050

在1.72中如果不把"MaxParallelNum"=dword:00000030改成"Max Parallel Num"=dword:00000030,三十线程死活不出现

zxr098 · 发表于 2006-10-5 09:58:35

高，好东西。不知道是否用得着，收起来再说。

fish007yu · 发表于 2006-10-5 20:09:07

不错，收藏中

iamclq · 发表于 2006-10-13 17:30:54

感谢提供！:)

sy651012 · 发表于 2006-10-13 18:01:44

收下，好东东，

13987260859 · 发表于 2006-10-13 22:03:02

收下，好东东

avige75 · 发表于 2006-10-14 05:53:55

收下，好东东，确实了得

lfdjssz · 发表于 2006-10-14 06:14:13

感谢提供！

jiaju8 · 发表于 2006-10-14 08:57:14

能看明白的不需要也可以了

swg1970 · 发表于 2006-10-14 13:26:07

学习中。谢谢！

cobol · 发表于 2006-10-15 10:55:28

应该很实用，谢谢。我顶！

feng117 · 发表于 2006-11-5 08:17:57

怎么用啊？不懂，汗

wenjia · 发表于 2006-11-5 10:45:35

有点模糊，不过也支持一下

wxl7759 · 发表于 2006-11-6 01:15:15

有用啊收啊狂收呵呵

WTX274321 · 发表于 2006-11-6 05:48:24

收藏进行中，谢谢

星辰怒 · 发表于 2006-11-6 10:58:22

收藏啊~~~~谢谢~

xzuiyu · 发表于 2006-11-6 11:06:42

极品啊，收藏了，不怕黑了

世界第一等 · 发表于 2006-11-6 16:49:39

谢谢分享

翠竹一片 · 发表于 2006-11-6 23:52:43

收下几个,不错,备用,谢谢了.

wwwk · 发表于 2006-11-8 06:34:40

好东西收藏了

巫山云 · 发表于 2006-11-8 13:30:38

收下，谢了

everack · 发表于 2006-11-8 16:41:47

直接用红叶的盘设置就行

hao207 · 发表于 2006-11-8 16:49:47

不错,了得

mcdragon · 发表于 2006-11-8 18:47:51

楼主,好东西啊,谢谢共享.

aki-net · 发表于 2006-11-8 18:50:39

感谢楼主，提供！~

		自动登录	找回密码
密码			注册

红叶提供的防黑注册表键值

浏览过的版块