Posted On January 16, 2020

PowerShell: How To Make A System App Do Nothing

kimconnect 0 comments
blog.KimConnect.com >> Codes , Windows >> PowerShell: How To Make A System App Do Nothing
# How-To-Make-Existing-System-App-Do-Nothing.ps1

# Provide variables
$hive="REGISTRY::HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\WORDPAD.EXE"
$key="(default)"
$value="C:\Windows\dummy.exe"
$defaultValue="C:\Program Files\Windows NT\Accessories\WORDPAD.EXE"

# Dummy-File-Creator.ps1
$dummyFile="C:\Windows\dummy.exe"
$output = new-object byte[] 1; (new-object Random).NextBytes($output);
[IO.File]::WriteAllBytes($dummyFile, $output);
if ($output -ne $null) {
Write-Host ("$dummyFile has been successfully created");
}else{
"Failed to create $dummyFile";
}

# Set registry key
Set-Itemproperty -path $hive -Name $key -value $value

# Verify result
$command="(get-itemproperty '$hive').'$key'"
Invoke-Expression $command;
Invoke-Expression $value; # It should now do nothing
# Change it back
Set-Itemproperty -path $hive -Name $key -value $defaultValue

Leave a Reply

Your email address will not be published. Required fields are marked *

Related Post

PowerShell: Stop Any Service on Windows!

Problem: some system protected services cannot be stopped. PS C:\Users\KingKong> stop-service msmpsvcStop-Service : Service 'Microsoft…

Microsoft IIS: How to Forward from HTTP to HTTPS

1. Apply the URL Rewrite module as required:- https://www.iis.net/downloads/microsoft/url-rewrite- Extract and install it 2. Run…

Listing SMB Shares on a Windows Machine

Option 1: PS C:\Windows\system32> get-WmiObject -class Win32_Share Name Path Description ---- ---- ----------- ADMIN$ C:\Windows…