cholla Posted February 23, 2006 CID Share Posted February 23, 2006 I have Windows ME & the scanreg /restore at the command prompt gives me a choice of about 5 previous registries to select. Does XP have a way to do this? Like in its scannow ? The reason I ask is a question about some spyware that was staying in a system. Could spyware hide in the saved registries ? If it could I would think deleting these would be something necessary like disabling system restore. Quote Link to comment Share on other sites More sharing options...
dlewis23 Posted February 23, 2006 CID Share Posted February 23, 2006 I have Windows ME & the scanreg /restore at the command prompt gives me a choice of about 5 previous registries to select. Does XP have a way to do this? Like in its scannow ? The reason I ask is a question about some spyware that was staying in a system. Could spyware hide in the saved registries ? If it could I would think deleting these would be something necessary like disabling system restore. yes spyware can have entries in a saved registry. deleting them can help because if the registry crashes, and windows restories it, then your system will be infected with spyware again. Quote Link to comment Share on other sites More sharing options...
jared Posted February 23, 2006 CID Share Posted February 23, 2006 can't you download a program that will restore defaults? Quote Link to comment Share on other sites More sharing options...
dlewis23 Posted February 23, 2006 CID Share Posted February 23, 2006 can't you download a program that will restore defaults? yes but it can only go back so far, and if there is spyware entries in the registry then why would you go back. Quote Link to comment Share on other sites More sharing options...
peepnklown Posted February 24, 2006 CID Share Posted February 24, 2006 Windows XP; you can back up, edit, and restore the registry (of course you would have had to back up a clean registry). HERE You also could use System Restore (you Quote Link to comment Share on other sites More sharing options...
ROM-DOS Posted February 24, 2006 CID Share Posted February 24, 2006 Windows XP organizes the registry in hives. For each hive file, XP creates additional supporting files that contain backup copies of each hive's data. These backups allow the OS to repair the hive during the installation and boot processes if something goes terribly wrong. Hives are only in two root keys: HKLM (HKEY_LOCAL_MACHINE) and HKU (HKEY_USERS) ~ all other root keys are links to keys within those two ~ HKLM and HKU are the only root keys that Windows XP actually stores on disk. [The hive and supporting files for all hives other than those in HKU are in %SYSTEMROOT%System32config. Hive files for HKU are in the user's profile folders.] This is how it works; XP creates the registry on boot-up in two phases; text-mode and graphics-mode. Xp copies each hive file to a SAV file at the end of the text-mode phase so that it can recover if the graphics-mode phase fails. If graphics-mode phase does fail, XP repeats that phase after restoring the hive file from the SAV file. So, (almost) no matter how much you might think you screwed the registry, there's a backup SAV file that it can use to recreate the last working registry configuration on boot-up (w/ a safe-mode option, if necessary). Besides System Restore, there's a Performace Option (in XP SP2) in System Properties called Data Execution Prevention for essential Windows programs and services, that monitors System memory locations for any changes and/or executions from malicious attacks, either by you or some unseen virus! Quote Link to comment Share on other sites More sharing options...
cholla Posted February 24, 2006 Author CID Share Posted February 24, 2006 HI ROM-DOS :Do all or part of these work if system restore is disabled? peepnklown: Thanks pretty detailed MS articles on repairing registry . Quote Link to comment Share on other sites More sharing options...
ROM-DOS Posted February 24, 2006 CID Share Posted February 24, 2006 HI ROM-DOS :Do all or part of these work if system restore is disabled? peepnklown: Thanks pretty detailed MS articles on repairing registry . lol ~ . . .as much as I have tweaked and deleated my registry files (1000's), I haven't had any problems. . .I've never used System Restore. . .but hacking into system files can be a pain in the @ss . . .sometimes, even months later, after a hack ~ the system restores (somehow) the 'ol windows way ~ . ..how, I don't know? . . .but it keeps me busy ~ lol [i personally think Windows keeps about five back-ups!! ~ XP's a tight system ~ ] Quote Link to comment Share on other sites More sharing options...
FGOKURULES Posted February 24, 2006 CID Share Posted February 24, 2006 Dude as much crap I've deleted out of my registry without even backing it up. is outrageous. I've never had a Fatalistic Server Meltdown!!! ahahah lol Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.