Click here to Skip to main content
Click here to Skip to main content

Hide String value from Regedit by Hooking the RegEnumValueW API

, 5 Dec 2001
Rate this:
Please Sign up or sign in to vote.
This Article shows how to hide a string value from Regedit
<!-- Download Links --> <!-- Add the rest of your HTML here -->

Introduction

This Article Explains how to hide a registry string from regedit by hooking the RegEnumValueW API, In this article there is a Function that hooks APIs called HookAPICalls. I am not the author of that function - I got it from some website whose name I forget. Thanks to the author of that function. The function that replaces the RegEnumValueW is given below .

LONG MyRegEnumValue(HKEY hKey,           
                    DWORD dwIndex,       
                    LPWSTR lpValueName,  
                    LPDWORD lpcValueName,
                    LPDWORD lpReserved,  
                    LPDWORD lpType,      
                    LPBYTE lpData,       
                    LPDWORD lpcbData)
{
   LONG ret;

   RegEnumValueWtype oldfn=(RegEnumValueWtype)RegDLL_Hooks.Functions [0].OrigFn;

   char ss[10];
   ret=oldfn(hKey,dwIndex,lpValueName,lpcValueName,lpReserved,lpType,lpData,lpcbData);
   WideCharToMultiByte(CP_ACP, 0,lpValueName,
                            -1,
                            ss,
                            10,
                            NULL, NULL);
   if (strstr(ss,"hirosh")!=NULL)
      return 1;
   else
      return ret;
}

This function simply checks the string "hirosh" from the lpValueName and if found it will return a 1. That means the the function has not completed successfully, so regedit will not display any string that contains the word "hirosh". 

API hooking is a powerful tool. To use this we can also hide files, processed from OS. However, I don't know which APIs must be hooked to achieve this. If anybody knows this please help me. 

I check this program on Windows XP. regedit is OK but when I take msconfig it displays an error. I don't know what is the problem so if anybody knows this please help me. I am not experienced in API hooking so I am just experiment with this.

License

This article has no explicit license attached to it but may contain usage terms in the article text or the download files themselves. If in doubt please contact the author via the discussion board below.

A list of licenses authors might use can be found here

Share

About the Author

H. Joseph

United States United States
No Biography provided

Comments and Discussions

 
Questionregedit not work Pinmembersoftware.m13-Aug-13 22:05 
GeneralI need help please Pinmemberrabih_saleh24-Apr-07 3:47 
Generalihelp Pinmembercgf9927-Mar-06 3:06 
GeneralRe: ihelp Pinmembercgf9927-Mar-06 3:14 
GeneralWindows 2003 Platform Pinmembertocsjung14-Jul-05 0:08 
Generalcalling callbacks PinmemberK-ballo22-Aug-04 16:57 
Questionhow to add new functions to be hooked PinsussAnonymous28-Apr-04 13:51 
GeneralI have a question. Pinmembertocsjung22-Dec-03 19:05 
GeneralRe: I have a question. Pinmembercgf9927-Mar-06 3:09 
GeneralOnly with dll Pinmemberxxcyberguruxx1-Oct-03 8:20 
GeneralRe: Only with dll PinmemberDr. Fred10-Nov-03 7:45 
The other apps can only access the
hooked funktion if it is inside of a dll.
GeneralFreeing this dll PinmemberRohit Divas23-Sep-03 0:53 
GeneralSolution to the msconfig problem PinmemberTim Kosse8-Dec-01 10:30 
GeneralRe: Solution to the msconfig problem Pinmemberhirosh9-Dec-01 5:25 
GeneralRe: Solution to the msconfig problem Pinmemberhirosh24-Dec-01 16:04 
GeneralRe: Solution to the msconfig problem PinsussAnonymous29-May-03 0:03 
GeneralRe: Security issue Pinmemberbla10-Dec-01 22:07 
GeneralRe: Security issue PinmemberTim Kosse10-Dec-01 22:26 
GeneralRe: Security issue Pinmemberbla11-Dec-01 22:27 
GeneralRe: Security issue Pinmemberyyt_hac24-Dec-01 4:50 
GeneralRe: Security issue Pinmemberhir24-Dec-01 15:58 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.

| Advertise | Privacy | Terms of Use | Mobile
Web03 | 2.8.1411023.1 | Last Updated 6 Dec 2001
Article Copyright 2001 by H. Joseph
Everything else Copyright © CodeProject, 1999-2014
Layout: fixed | fluid