Jump to content

converting regshot logs to commands


 Share

Recommended Posts

  • 8 months later...

I'm also looking for a way to do this

I have the following keys by regshot and I'd like to put the following in my regtweaks file:

----------------------------------
Keys added:3
----------------------------------
HKU\S-1-5-21-1606980848-1078145449-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\c
HKU\S-1-5-21-1606980848-1078145449-1417001333-1003\Software\Symantec\Norton Utilities\Norton UnErase
HKU\S-1-5-21-1606980848-1078145449-1417001333-1003\Software\Symantec\Norton Utilities\Norton UnErase\StateIcons

----------------------------------
Values added:2
----------------------------------
HKU\S-1-5-21-1606980848-1078145449-1417001333-1003\Software\Symantec\Norton Utilities\Norton UnErase\StateIcons\NPShield: 00 00 00 00
HKU\S-1-5-21-1606980848-1078145449-1417001333-1003\Software\Symantec\Norton Utilities\Norton UnErase\UserInfo: 00 02 F3 03 00 00 00 00 00 00 01 00 00 00

----------------------------------
Values modified:7
----------------------------------
HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\: "Norton Protected Recycle Bin"
HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\: "Recycle Bin"
HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\LocalizedString: "Norton Protected Recycle Bin"
HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\LocalizedString: "Recycle Bin"
HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell\: "UnEraseWizard"
HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell\: ""
HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell\UnEraseWizard\Command\: "c:\Program Files\Norton SystemWorks\Norton Utilities\UE32.EXE /A"
HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell\UnEraseWizard\Command\: "c:\Program Files\Norton SystemWorks\Norton Utilities\ue32.exe"
HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed: DF 98 A8 CD 38 4F 2C B8 A9 E1 D0 AF B3 8E DA 79 FA B7 8E 7A D5 DE AA 2B 48 52 E0 24 31 4C B6 A8 C7 EF 59 5F 5C D2 BE E2 97 75 1A 33 2D AD D0 2E ED D0 B2 CE 9F 3D 15 4A 30 9C FF D6 73 C5 B9 CD 43 C8 55 CD AC 45 06 60 C0 D6 F3 6A C2 21 68 1E
HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed: B7 FD FF 3D 6F 7F E1 E9 D6 38 86 BC 10 4E 96 28 5B 1C AF F8 C9 C9 48 C9 7B 66 21 90 88 0B 5A BF 0C 8A A2 BA 1D B0 6A 31 7E B1 EB FE E1 12 F3 66 5A E0 06 47 43 9B 74 14 F9 DE EA C2 F8 7B 88 A8 A4 10 9C C9 22 69 13 64 B0 B2 D9 5A E6 16 CE AB
HKLM\SOFTWARE\Symantec\Norton Utilities\Norton Protection\Drive C:\Switches\Enabled: 01
HKLM\SOFTWARE\Symantec\Norton Utilities\Norton Protection\Drive C:\Switches\Enabled: 00
HKLM\SOFTWARE\Symantec\Norton Utilities\Norton Protection\Drive C:\Switches\DirKBSize: 0x00002800
HKLM\SOFTWARE\Symantec\Norton Utilities\Norton Protection\Drive C:\Switches\DirKBSize: 0x0000339D

it is supposed to rename the recycle bin after an unattended Norton System Works installation, turn off the recycle bin protection and not sure about the last one

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.


×
×
  • Create New...