Method and device for operating registry

Abstract

The invention discloses a method and device for operating a registry. The method comprises the steps of starting up a registry editor, obtaining a window handle of the registry editor and operating the registry editor by calling interface functions according to the window handle. Due to the facts that the registry editor is started up by calling the interface functions, and the registry is operated by calling the interface functions, the functional legitimacy of operating the registry can be achieved, security operation performed on the registry can be guaranteed, and meanwhile system security is ensured.

Description

technical field [0001] The present invention relates to the field of computers, in particular to a method and device for operating a registry. Background technique [0002] The registry plays a very critical role in the configuration and control of the Windows system. It is a storage repository for system global settings and user settings, and it is also a window for various in-memory data structures maintained by the Windows executive and the kernel. All software information and hardware information are managed through the registry. If the registry is damaged for some reason, the light one will make the Windows startup process abnormal, and the heavy one may lead to the complete paralysis of the entire Windows system. In order to protect the registry, Windows provides two conventional operation methods: one is the registry editor Regedit.exe, which is operated through the user interface; the other is to provide a large number of APIs for users to access and modify the data...

AI Technical Summary

Problems solved by technology

The operation mode of the third-party software is to actively call the system API function to perform registry operations, but in most cases, this method will touch the protection strategy of the security software, causing the third-party software to be directly intercepted and executed, which cannot be realized Automated programs to simulate some real test environments for effective testing

[0010] 1) Low portability

[0011] 2) Low execution effectiveness

[0012] 3) The operating environment is limited

[0013] 4) In the environment where protection software exists, there are various risks of being falsely reported

[0014] In the existing technology, there are also behaviors of hooking APIs or performing offensive and defensive operations on anti-virus software through technical means, but the process is relatively cumbersome and does not have universality and legality.

Images