Remote registry access tool

Create a personalised ads profile. Select personalised ads. Apply market research to generate audience insights. Measure content performance. Develop and improve products. List of Partners vendors. By Tim Fisher. Tim Fisher. Tim Fisher has more than 30 years' of professional technology experience.

He's been writing about tech for more than two decades and serves as the VP and General Manager of Lifewire. Tweet Share Email. What to Know Open Registry Editor. In the empty space, type the host name of the computer you want to connect to. Enter your access credentials if prompted to do so. Choose OK to complete the connection.

Was this page helpful? Thanks for letting us know! Email Address Sign up There was an error. Remember the registry editor is a very powerful tool. The best way to avoid this is to edit carefully and make sure you constantly back up your data. SolarWinds uses cookies on its websites to make your online experience easier and better. By using our website, you consent to our use of cookies.

For more information on cookies, see our Cookie Policy. Toggle navigation. Product Comparison. Dameware Remote Everywhere. Service Desk. Dameware Remote Support. Looking for more small business tools?

Dameware Mini Remote Control. View All Features. They are often included in pirated software through patches, as a form of cracked game or E-mail attachments. After the infection, it may perform unauthorized operations and hide their presence in the infected system.

An attacker can remotely control the system by gaining the key logs, webcam feeds, audio footage, screen captures, etc. RATs normally obfuscate their presence by changing the name, size, and often their behavior or encryption methods. Excluding the remote access capabilities, some RATs also behave as a backdoor to the system by infecting it with viruses, worms, spyware, adware, etc. Thus, the infected machines can also be used as a bot or zombie to carry out a chain of attacks to other machines including DDOS.

RATs can be avoided by verifying each piece of software before installation by using authorized program signatures. This programs signature may be available from the vendors of the products; however, it may become difficult to correlate this procedure in an organizational level.

In addition, the RATs are using varied level of obfuscation methods to hide their characteristics from detection system. RAT normally injects to legitimate pieces of software or even distributed as patches or other updates, which make them difficult to be captured. Various host and network based detection methodologies can be correlated to the proper detection of the RATs.

In host-based detection, the unique characteristics of the RAT can be stores in a database level that contains the file name, size, checksum and other unique characteristics.

This RAT database can be scanned with the new programs and if matching patterns are found, then can be recognized as RAT. The startup files, registries, auto start and configuration scripts can be monitored and if any distinguished behavior is detected can be detected as a RAT. In network based detection method, the network communication protocols can be monitored to check whether if any deviation is there in the behavior of network usage.

Ports can be monitored for exceptional behavior, and can analyze protocol headers of packet among the systems. The network traffic can be analyzed and the RAT behavior patterns can distinguished among other legitimate traffic.

After its installation, BO2K gathers information, performs system commands, reconfigures machines, and redirects network traffic to unauthorized services. This RAT should be installed by the end user, and then it will perform its function unknowingly to the user.

The B02K installation involves two separate operation, including the client and server. The server part should is an executable one and normally comes in the bo2k.

If you disable this service, any services that explicitly depend on the service cannot start, but registry operations on your local computer are not affected. However, other computers or devices cannot connect to your local computer's registry. When the Remote Registry service is started in its default configuration, it logs on by using the Local Service account.

Skip to main content.