To Access Registry

[stanley]

To Access registry ----->

1.Could anyone provide me a template how to access the registry in masm32.
2.I need to know about  how to delete or modify the "value data" section  in registry
3.how to handle(modify the values in "value data" section) the critical process like Userinit.exe,winlogon in the registry
please help me to find a solution  :wink

[hutch--]

Pretty straight forward stuff, make sure you have "Administrator" access then use the registry Windows API functions to perform the changes you require.

[stanley]

How can the malware files create entries in the registry when it runs as a "guest"

[dedndave]

you want to modify userinit ??????    :naughty:

[stanley]

I just want to write a tool to delete malware entries  from the registry and delete the files hooked by the userinit.exe