Summary Home Activity Forums Surveys News

RE: Windows Live Messenger

Monitor Forum | Start New Thread Start New Thread

RE: Windows Live Messenger
By: Viet To on 2010-06-28 13:32
[forum:7950]


After I went to bed, I figured how to get around the registry deleting thing.

The previous batch code will still be used and listed in the wiki, labeled "Simple". The new method will be called "Advanced/Paranoid" because it calls on a few registry files to add and delete, making it appear that the computer was never touched.

NOTE: When exporting the registry file, make sure you are using HKEY_CURRENT_USER\ and not HKEY_USERS

First, copy reg.reg to 2 files. Let's call it portable.reg and relative.reg. Portable.reg will be used by the add and save commands like I had attempted earlier (and then commented and uncommented to regnew.reg). It will be your registry settings, but portable. So as it gets changed, those changes are saved, rather than discarded like the Simple method. Edit relative.reg so that it only has the specific keys to messagelogpath:

---
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\MSNMessenger\PerPassportSettings\xxx]
"MessageLogPath"="My Documents\\My Received Files\\xxx\\History"

[HKEY_CURRENT_USER\Software\Microsoft\MSNMessenger\PerPassportSettings\xxx]
"MessageLogPath"="My Documents\\My Received Files\\xxx\\History"
---

In the above example, the xxx values are different in each line due to having 2 accounts

Make a file called delete.reg, with the contents:
[-HKEY_CURRENT_USER\Software\Microsoft\MSNMessenger\PerPassportSettings]
That batch file will be modified so that:

1.Saves the local [HKEY_CURRENT_USER\Software\Microsoft\MSNMessenger\PerPassportSettings] to local.reg

2. Runs delete.reg to delete the tree.

3. Runs portable.reg to import the settings

4. Runs relative.reg to change portable.reg's absolute paths to relative

5. Runs msnmsgr.exe

6. On exit, saves [HKEY_CURRENT_USER\Software\Microsoft\MSNMessenger\PerPassportSettings] to ortable.reg

7. Runs delete.reg to remove evidence

8. Runs local.reg to restore previous computer settings, as if you never touched it.

Thread View

Thread Author Date
Windows Live MessengerViet To2010-06-28 00:41
      RE: Windows Live MessengerViet To2010-06-28 00:44
            RE: Windows Live MessengerViet To2010-06-28 00:53
                  RE: Windows Live MessengerViet To2010-06-28 01:13
                        RE: Windows Live MessengerViet To2010-06-28 02:40
                              RE: Windows Live MessengerViet To2010-06-28 02:42
                                    RE: Windows Live MessengerViet To2010-06-28 03:02
                                          RE: Windows Live MessengerViet To2010-06-28 03:07
                                                RE: Windows Live MessengerViet To2010-06-28 03:41
                                                      RE: Windows Live MessengerViet To2010-06-28 13:32
                                                            RE: Windows Live MessengerViet To2010-06-28 13:52
                                                                  RE: Windows Live MessengerViet To2010-06-28 13:56

Post a comment to this message

Subject * :

Message * : Notepad


Attachments
Use the “Browse” button to find the file you want to attach
File to upload:

You are posting anonymously because you are not logged in