Jump to content











Photo
- - - - -

Restoring Win7 Registry Keys


  • Please log in to reply
2 replies to this topic

#1 sambul61

sambul61

    Gold Member

  • Advanced user
  • 1568 posts
  •  
    American Samoa

Posted 30 January 2011 - 08:16 PM

Anyone has an idea how to regenerate a particular Win7 Registry Key?

Recent IE9 upgrade erased all system restore points (unbelievable). Another program (a clustering file system arbiter), while striving to take control over local disks access, erased content of Windows EventLog Key, which content among other things reflects locally installed soft activity logging. This sounds like an urgent security hazard. Due to this Win Scheduler also stopped running, since it depends on the EventLog Service. So the task is to regenerate the last Windows EventLog Key. Is that possible? I wonder, if regenerating EventLog Key would result in Win Scheduler reflecting exact same set of data as before?

Another thing is that in Acronis .tib archive of the system drive there is no CurrentControlSet key that includes Windows EventLog Key, but there are ControlSet001 and 002, which may be time stamped backups of CurrentControlKey, but not quite. How they're different?

OK, it sounds better: "CurrentControlSet is an alternating symbolic link to either ControlSet001 or ControlSet002. The other key is kept as a backup for the Load Last Known Good Configuration boot option."

#2 sambul61

sambul61

    Gold Member

  • Advanced user
  • 1568 posts
  •  
    American Samoa

Posted 31 January 2011 - 12:13 AM

Its kind of funny, only Registry Workshop gives a better grip to mod Win7 System Registry without reboot, with other tools changing keys ownership doesn't seem to allow any mods or even loading a hive. And to open .tib file hive and compare hives, Registrar Manager is the best, just don't forget to delete Temp Hive it creates in online Registry, otherwise it may be integrated into it on reboot. Never heard of opening Registry from a System account (not Admin) - is that ever needed or possible?

#3 sambul61

sambul61

    Gold Member

  • Advanced user
  • 1568 posts
  •  
    American Samoa

Posted 31 January 2011 - 03:45 PM

I still wonder if there're tools capable of identifying and regenerating missing Registry keys? Possibly sifting through app install logs, emulating programs and system components install, comparing the list of install system components to expected Registry content, and such.

There are quite good tools for analyzing and cleaning the Registry (delete obsolete keys) among other tasks, like Wipe Registry Cleaner, Driver Cleaner, Total Uninstall and similar. But the opposite task seems to be limited to Restore from Backup rather than Repair by Analysis (add missing, fix broken). Its interesting, if Win7 Repair feature actually regenerates the Registry based on what programs & OS components it finds on HD?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users