HKCU UserAssist\Settings

[Squeeto]

Hey all,

I notice with FDV's fileset he sets:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\Settings

NoEncrypt = 1

What do you think of changing it to NoLog instead?

Do we need the Count key logging?

[Bilou_Gateux]

Change both.

if you don't use FDV's fileset, you can run a script

:// http://www.niiconsulting.com/checkmate/2006/07/userassist-revisited/
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\Settings" /v NoEncrypt /t REG_DWORD /d 1 /f 
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\Settings" /v NoLog /t REG_DWORD /d 1 /f

[Tomcat76]

Or like this if you don't feel like including reg.exe:

[Version]
Signature="$WINDOWS NT$"

[DefaultInstall]
AddReg=AddReg

[AddReg]
HKCU,%UAS%,"NoEncrypt",0x10001,1
HKCU,%UAS%,"NoLog",0x10001,1

[Strings]
UAS="Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\Settings"