Windows Registry Editor Version 5.00 ; vo hieu hoa cac chuong trinh khoi dong cung win [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\policies\Explorer] "DisableLocalMachineRunOnce"=dword:00000001 "DisableLocalMachineRun"=dword:00000001 "DisableCurrentUserRunOnce"=dword:00000001 "DisableCurrentUserRun"=dword:00000001 ; an o dia ; A1 B2 C4 D8 E16_22 E32_50 F64_100 G128_296 H256_598 I512_1298 ; all_67108863_1729136739 "NoDrives"=dword:00000000 ; an SharedDocuments "NoSharedDocuments"=dword:00000000 ; xoa history "NoRecentDocsHistory"=dword:00000001 ;tat tinh nang Autorun "NoDriveTypeAutoRun"=dword:000000ff ; an thung rac [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\policies\NonEnum] "{645FF040-5081-101B-9F08-00AA002F954E}"=dword:00000001 ; thong bao logon [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "LegalNoticeCaption"="Thông Báo" "LegalNoticeText"="Chào mừng các bạn ghé thăm pc của mình chúc vui vẻ" ; khoa task manager [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System] "DisableTaskMgr"=dword:00000000 ; khoa regedit [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System] "DisableRegistryTools"=dword:00000000 ;Cach mo lai Registry Editor ;Start –> Run -> gpedit.msc -> OK . ;Trong Group Policy -> User Configuration -> Administrative Templates ;Nhin sang ben phai -> System -> Prevent access to registry editing tools -> Disable ;(+NotConfigured (Ko doi cau hinh) / +Enabled (cho phep) / +Disable (không cho phép)) ; in danh sach thu muc [HKEY_CLASSES_ROOT\Folder\shell\thumuc\command] @="command.com /c tree /F /A > c:\\list.txt %1" ; an chu shortcut o cac bieu tuong [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer] "link"=hex:00,00,00,00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer] "link"=hex:00,00,00,00 ;tang toc may tinh [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Dfrg\BootOpt imizeFunction] "Enable"="N" [HKEY_CURRENT_USER\Control Panel\Desktop] "AutoEndTasks"="1" "HungAppTimeout"="200" "MenuShowDelay"="0" "WaitToKillAppTimeout"="200" "WaitToKillServiceTimeout"="200" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l] "WaitToKillServiceTimeout"="200" ;tat tour gioi thieu cua window [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Applets\Tour] "RunCount"=dword:00000000 ;tat tinh nang Autorun [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer] "NoDriveTypeAutoRun"=dword:000000ff ; Tat nhung dich vu (Service) khong can thiet tren Windows XP ; Ngoai ra ban co the thay doi cac gia tri sau : ; 00000002 = Automatic ; 00000003 = Manual ; 00000004 = Disabled ;Alerter (svchost.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Alerter] "Start"=dword:00000002 ;Application Layer Gateway [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\ALG] "Start"=dword:00000004 ;Application Management [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\AppMgmt] "Start"=dword:00000004 ;Automatic Updates [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\wuauserv] "Start"=dword:00000004 ;Background Intelligent Transfer Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\BITS] "Start"=dword:00000004 ;ClipBook (clipsrv.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\ClipSrv] "Start"=dword:00000004 ;Computer Browser (svchost.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Browser] "Start"=dword:00000003 ;Distributed Link Tracking Client (svchost.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\TrkWks] "Start"=dword:00000004 ;Fast User Switching Compatibility [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\FastUserSwitchingCompatibility] "Start"=dword:00000004 ;Help and Support [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\helpsvc] "Start"=dword:00000004 ;Indexing Service(cisvc.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\cisvc] "Start"=dword:00000003 ;IMAPI CD-Burning COM Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\ImapiService] "Start"=dword:00000004 ;Messenger [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Messenger] "Start"=dword:00000004 ;Net Logon (lsass.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Netlogon] "Start"=dword:00000004 ;NetMeeting Remote Desktop Sharing (mnmsrvc.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\mnmsrvc] "Start"=dword:00000004 ;Print Spooler [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Spooler] "Start"=dword:00000004 ;Remote Desktop Help Session Manager (sessmgr.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\RDSessMgr] "Start"=dword:00000004 ;Remote Registry (svchost.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\RemoteRegistry] "Start"=dword:00000004 ;Security Center (svchost.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\wscsvc] "Start"=dword:00000002 ;Task Scheduler (svchost.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Schedule] "Start"=dword:00000004 ;Secondary Log-on (svchost.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\seclogon] "Start"=dword:00000004 ;Telnet (tlntsvr.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\TlntSvr] "Start"=dword:00000004 ;Terminal Services (svchost.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\TermService] "Start"=dword:00000002 ;UPS (ups.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\UPS] "Start"=dword:00000004 ;WMI Performance Adapter (wmiapsrv.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\WmiApSrv] "Start"=dword:00000004 ;Wireless Zero Configuration Service (svchost.exe) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\WZCSVC] "Start"=dword:00000004 ; doi bieu tuong o dia [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\DriveIcons\C\DefaultIcon] @="C:\\WINDOWS\\system32\\1.ico" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\DriveIcons\C\DefaultLabel] @="SYSTEM" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\DriveIcons\D\DefaultIcon] @="C:\\WINDOWS\\system32\\1.ico" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\DriveIcons\D\DefaultLabel] @="save" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\DriveIcons\E\DefaultIcon] @="C:\\WINDOWS\\system32\\1.ico" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\DriveIcons\E\DefaultLabel] @="save" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\DriveIcons\F\DefaultIcon] @="C:\\WINDOWS\\system32\\1.ico" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\DriveIcons\F\DefaultLabel] @="save" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\DriveIcons\G\DefaultIcon] @="C:\\WINDOWS\\system32\\1.ico" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\DriveIcons\G\DefaultLabel] @="save" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\DriveIcons\H\DefaultIcon] @="C:\\WINDOWS\\system32\\1.ico" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\DriveIcons\H\DefaultLabel] @="save" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\DriveIcons\I\DefaultIcon] @="C:\\WINDOWS\\system32\\1.ico" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\DriveIcons\I\DefaultLabel] @="save" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\DriveIcons\K\DefaultIcon] @="C:\\WINDOWS\\system32\\1.ico" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\DriveIcons\K\DefaultLabel] @="save" ;ten user computer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion] "RegisteredOrganization"="Bui van Dung - DH Chu Van An" "RegisteredOwner"="Bui van Dung" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "AltDefaultDomainName"="DUNGPC" "DefaultDomainName"="DUNGPC" . [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurre ntVersionPoliciesSystem] "DisableRegistryTools"=dword:00000000 ;Cach mo lai Registry Editor ;Start –> Run -> gpedit.msc ->. "Start"=dword:00000004 ;Remote Registry (svchost.exe) [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServic esRemoteRegistry] "Start"=dword:00000004