io.kent Posted January 5, 2013 Report Posted January 5, 2013 dindoungagosOn idea to get if regedit is launched.If is launched, i delete the key.When regedit is close, i put the same key.We can to do it with cmd, taskmanager etc.....Simple but effectivedownload: https://www.box.com/s/oeq2tazqgjznyxqelx47 Quote
Nytro Posted January 5, 2013 Report Posted January 5, 2013 Si daca de exemplu folosesc autoruns? Sau alte 20 de utilitare? Quote
io.kent Posted January 5, 2013 Author Report Posted January 5, 2013 Depinde acum Nytro,dar cu o buna idee, ar fi mai presus de toate! Quote
zorro59 Posted January 6, 2013 Report Posted January 6, 2013 Si daca eu inchid windows-ul cu regedit de exemplu pornit? Daca este o cheie de run de exemplu, atunci e game over pentru ca nu stii sigur in ce ordine inchide windows programele, si nici nu primesti vreo notificare daca programul tau este inchis fortat => pierzi cheia. Quote
backdoor Posted January 14, 2013 Report Posted January 14, 2013 (edited) io.kent - De ce ai ascunde o cheie in registry ? 1. de ex pt /HKEy_LOCAL_MACHINE/USER/Curent.../run exista msconfig pe care il stie toata lumea.2. exista programe de monitorizare pt registry.3. daca ai ceva de stocat poti sa o faci in ini file in directorul in care e instalat / rulezi programul. Daca informatia respectiva este sensibila poti sa o encriptezi cu base64_encode(AES_encode($info,$key));daca iti place tie Visual Basic si vrei sa faci un exercitiu . OK Oricum pt programelul tau ai nevoie de VB runtime instalat , incearca sa il rulezi pe un XP clean (pe care nu ai pus VB). Edited January 14, 2013 by backdoor Quote