Jump to content

Hive edit with reg.exe


Recommended Posts

Hi,

New to the forum and also new to hive editing. I want to add a default screen saver to the default user and I am trying to accomplish this with reg.exe. I think I am doing something wrong because when I login as a new user to that machine the default screensaver is not set. Any help for this poor soul?

I have tried the following

reg load "HKU\software" "c:\documents and settings\default user\NTUSER.DAT"

reg import "c:\screensaver.reg"

reg unload "HKU\software"

The reg file is as follows:

Windows Registry Editor Version 5.00

[HKEY_USER\Software\Microsoft\Screensavers]

[HKEY_USER\Software\Microsoft\Screensavers\Text3D]

"AllScreensSame"=dword:00000000

"SurfaceType"=dword:00000001

"Specular"=dword:00000001

"SurfaceColor"=dword:00777777

"CustomTexture"=""

"CustomEnvironment"=""

"UseCustomColor"=dword:00000000

"UseCustomTexture"=dword:00000000

"UseCustomEnvironment"=dword:00000000

"MeshQuality"=dword:000001f4

"Size"=dword:00000004

"RotationSpeed"=dword:0000000f

"RotationStyle"=dword:00000003

"DisplayString"="Burnett"

"DisplayTime"=dword:00000000

"FontWeight"=dword:00000000

"FontHeight"=dword:00000060

"FontItalic"=dword:01000000

"FontCharSet"=dword:00000001

"FontPitchFamily"=dword:61005400

"FontFace"="Tahoma"

[HKEY_USER\Software\Microsoft\Screensavers\Text3D\Screen 1]

"Leave Black"=dword:00000000

"Disable Hardware"=dword:00000000

"Width"=dword:00000000

"Height"=dword:00000000

"Format"=dword:00000000

"Adapter ID"=hex:66,8e,b7,d7,d2,6a,cf,11,8c,60,02,08,a3,c2,cb,35

Link to comment
Share on other sites


create an empty key forexample [HKEY_LOCAL_MACHINE\SOFTWARE\test].

reg load "HKEY_LOCAL_MACHINE\SOFTWARE\test" "c:\documents and settings\default user\NTUSER.DAT"

reg import "c:\screensaver.reg"

reg unload "HKEY_LOCAL_MACHINE\SOFTWARE\test"

also when you load the hive to test. your reg file should be like


Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\test\Software\Microsoft\Screensavers]

[HKEY_LOCAL_MACHINE\SOFTWARE\test\Software\Microsoft\Screensavers\Text3D]
"AllScreensSame"=dword:00000000
"SurfaceType"=dword:00000001
"Specular"=dword:00000001
"SurfaceColor"=dword:00777777
"CustomTexture"=""
"CustomEnvironment"=""
"UseCustomColor"=dword:00000000
"UseCustomTexture"=dword:00000000
"UseCustomEnvironment"=dword:00000000
"MeshQuality"=dword:000001f4
"Size"=dword:00000004
"RotationSpeed"=dword:0000000f
"RotationStyle"=dword:00000003
"DisplayString"="Burnett"
"DisplayTime"=dword:00000000
"FontWeight"=dword:00000000
"FontHeight"=dword:00000060
"FontItalic"=dword:01000000
"FontCharSet"=dword:00000001
"FontPitchFamily"=dword:61005400
"FontFace"="Tahoma"

[HKEY_LOCAL_MACHINE\SOFTWARE\test\Software\Microsoft\Screensavers\Text3D\Screen 1]
"Leave Black"=dword:00000000
"Disable Hardware"=dword:00000000
"Width"=dword:00000000
"Height"=dword:00000000
"Format"=dword:00000000
"Adapter ID"=hex:66,8e,b7,d7,d2,6a,cf,11,8c,60,02,08,a3,c2,cb,35

if not works. try to import windows\system32\config\default.

Edited by Kullenen_Ask
Link to comment
Share on other sites

Thanks for the reply and I will try it out in the morning and report back. I do have a question.... The key "should" end up in hkey_current_user\software\microsoft\screensavers\text3d\ so why the reference to the local machine and what happens to the test key? The reg file that I have included is a export of the key currently in the registry except that I changed the hkey_current_user to hkey_user.

Like I said I am new to hive editing and would like to know all of the mechanics of what I am trying to do. Thanks again.

d

Edited by roontoon
Link to comment
Share on other sites

There should be an empty value to load a hiv. HKU\Software is not an empty value. There are lot's of keys and values under it. It will not let you load hiv to there, or if it let, it need to delete user registry keys in there. When it loads you can use regedit and investigate the hiv. you can add values and keys with regedit. You will see that there is a complate hiv under [HKEY_LOCAL_MACHINE\SOFTWARE\test] and be sure to change reg file with new paths [HKEY_LOCAL_MACHINE\SOFTWARE\test\Software\Microsoft\Screensavers]

Link to comment
Share on other sites

The reg file is as follows:

Windows Registry Editor Version 5.00

[HKEY_USER\Software\Microsoft\Screensavers]

[HKEY_USER\Software\Microsoft\Screensavers\Text3D]

"AllScreensSame"=dword:00000000

"SurfaceType"=dword:00000001

<snip>

[HKEY_USER\Software\Microsoft\Screensavers\Text3D\Screen 1]

"Leave Black"=dword:00000000

<snip>

Your error is here: [HKEY_USERS\Software\Microsoft\Screensavers]

You missed an S

Also I tested it on my system and when I set the 3D text screensaver these keys where also changed....

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Control Panel\Desktop]
"ScreenSaveActive"="1"
"SCRNSAVE.EXE"="C:\\Windows\\system32\\sstext3d.scr"

HKU\Software is not an empty value. There are lot's of keys and values under it. It will not let you load hiv to there, or if it let, it need to delete user registry keys in there.

@Kullenen_Ask, I thought so to at first glance but then I ran his command and it indeed loads the hive properly under HKEY_USERS\Software. You are thinking of HKEY_USERS\.DEFAULT\Software.

windowclipping.png

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...