Monday 16 January 2012

All About Windows Registry And Registry Editing


What is Registry?


Registry is a database where Windows stores all types of settings and option related information, in other word, it consists of all information regarding hardware, software, users etc. Now, in place of Win 95 or 98, registry was build up with two hidden files - USER.DAT & SYSTEM.DAT, but now it consists with another file. Named CLASSES.DAT


The Structure of Registry-


Registry is a Hierarchical Structure, just like our disk’s directory tree or Windows explorer. Now if we run the registry editor (Start -> Run -> Regedit), then we will find six main braches, called HIVE. Each hives contains some keys, now every key contains some subkey or value. This value stores all the information in the Registry!
All The Six Hives Of Registry.

1. HKEY_CLASSES_ROOT – It contains all the information related to File Association, OLE and Windows Shorten.
2. HKEY_CURRENT_USER – It consists of all the information for a particular active user who is in log on condition, e.g, logon names, desktop settings or start up menu etc.
3. HKEY_LOCAL_MACHINE – This hive contains all hardware and software related information.
4. HKEY_USERS – It contains all information related to users. For every user, there exists a SID subkey.
5. HKEY_CURRENT_CONFIG – It stores hardware configuration setting related information of current user related to HKEY_LOCAL_MACHINE.
6. HKEY_DYN_DATA – It stores all information about plug-n-play devices.

Every registry value contains 5 ata types –
REG_BINARY – Here data gathered in Raw binary format, basically it contains binary data related to Hardware component.
REG_DWORD – Here data stored in as byte number. It consists boolesn values e.g, ‘0’ or Disable and ‘1’ or Enable.
REG_MULTI_SZ – Here data stores as multiple string and null character separates each other data.
REG_SZ – Here data stored as simple readable text in standard string form.


Editing the Registry- 


If you open the registry editor you will find a simple ecplorer type window. Which consists of two parts, left side is called Navigation Pane, here we can find all the hives with + and – signs. If we click + sign, the hive will expand and all the key and subkeys will be displayed. And at the right side we will find the values of the key.
To change any value of any key, just double click on it and if you want to delete it, simple right click on it and select delete.

Windows 7 Registry Screenshot


Some Important Registry Editing!
1. How to know System BIOS information?
Find the key
HKEY_LOCAL_MACHINE/HARDWARE/DESCRIPTION/System
Now, at the right side you’ll see some keys, among them, view specified keys-
SystemBiosDate, SystemBiosVersion, etc.

2. How to know full information of your processor?
Find the key
HKEY_LOCAL_MACHINE/HARDWARE/DESCRIPTION/System/Central/Processor/O
Under this hive, you will see many keys, check all these keys to know your processor information! But do not modify it! Some times you’ll find values in Hexadecimal system, in that case, simply switch to decimal mode!

3. How to disable Autorun feature on Windows?
Find the key
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\policies\Explorer\NoDriveTypeAutorun
Please follow the codes

Code:
        
         Values                                                                 Meaning

       0x1 or 0x80                                            Disables AutoRun on drives of unknown type
          0x4                                                   Disables AutoRun on removable drives
          0x8                                                   Disables AutoRun on fixed drives
          0x10                                                 Disables AutoRun on network drives
          0x20                                                 Disables AutoRun on CD-ROM drives
          0x40                                                 Disables AutoRun on RAM disks
          0Xff                                                  Disables AutoRun on all kinds of drives 

Default Values:

         Values                                                            Meaning

            0x91                                          Windows Server 2008 and Windows Vista
            0x95                                          Windows Server 2003
            0x91                                          Windows XP
            0x95                                          Windows 2000


That’s All About Registry And Registry Editing!While editing the registry, don’t forget to make restore point, because wrong editing of registry may crash your Windows!
Be Careful and Enjoy!


**********************************************************************

No comments:

Post a Comment