RegdatXP 3.1
RegdatXP 3.1 reads non active WinNT/2K/XP/2K3 registry files like Ntuser.dat and usrClass.dat and compares them to the current Registry. It has also (binary) Search and Replace functions for the Registry.
The full version can directly repair corrupt registry files in some cases. The Registry as displayed by Regedit or Regedt32 is composed of the following root keys:
HKLM security HKEY_LOCAL_MACHINE
This contains all the details in the current security SOFTWARE, SYSTEM, SAM, and SECURITY files of the System32Config folder.
HKU security HKEY_USERS
This key contains the safety.Default and other PC user keys and a repetition of the HKEY_CURRENT_USER key.
HKCU security HKEY_CURRENT_USER
This contains all the details stored in the Ntuser.dat and usrClass.dat of the current PC user.
HKCR security HKEY_CLASSES_ROOT
This is a repeat of the HKLMSoftwareClasses key and contains the details pertaining to the file associations and the OLE references that produce the shell.
HKCC security HKEY_CURRENT_CONFIG
This is a repeat of HKLMSystemCurrentControlSet keys currently in use.
In general, non active registry files are obtained from Registry Backups, or simply as file copies from a dual boot system. On WinXP, Registry backups are regularly generated through the System Restore function (activated by default) and can be found in the System Volume Details directories.
RegdatXP can also create kind of snapshot files which can be compared to later Registry states. In contrary to Back-up files, however, the snapshot files cannot be used to replace original registry files.
There may be situations where one wants to view, or export, keys from a WinNT/2K/XP registry file while being on a Win9x/Me platform. Consequently this solution also runs on Win9x/Me, but it will not handle registry files from these systems.
Related posts
Posted in software