Manual of Windows registry

Here is the full detailed manual of Microsoft Windows Operating system Registry.

Note: This manual is intended to be used by advanced users. Modification of any part, without thorough knowledge may make your Window 7 totally non functioning.

After running the Windows Registry Editor you will find the following groups:

HKEY_CLASSES_ROOT: This records all extensions, file types.

HKEY_CURRENT_USER: Listing of the current user settings.

HKEY_LOCAL_MACHINE: Settings that exist in our PC-PC-PC and where is our software and where the drivers are installed.

HKEY_USERS: All configurations of the users of the PC-PC-PC (www. visited, applications, etc …).

HKEY_CURRENT_CONFIG: An example of LOCAL_MACHINE, with more details of the current configuration.

HKEY_DYNAMIC_DATA: The dynamic information, which is derived by turning on the PC-PC-PC and vanishes during shutdown.

On clicking on any of these branches, they will expand with full of valuable information.

DESCRIPTION OF BRANCHES:

HKEY_CLASSES_ROOT (HKCR)

In the graphic user interface GUI Windows every thing (each file, directory, disk, etc..) is regarded as an object, each object has associated properties, this branch (Key) the record contains a list of objects and their properties eg *. mid, we all know are sound files, as opening and Subkey HKCR. free would see the following:

Name: Data: (default) midfile””

Content Type”audio / mid”Well, we have an object with properties”””midfile audio / mid”, i.e. that is associated midfile audio / mid. The main functions of these keys are:

1. The extension of a file to an object type.
2. Associate an icon to an object type.
3. Associating a series of actions to the command line to an object type.
4. Match the contextual menu options (down) to a type of object.
5. Define what will appear in the properties window (right-click properties) for each type of object.

Within HKCR Subkeys there are distinguished three types:

1.  File extensions, the extensions associated with the type of object. These Subkeys deal to tell which windows does with each type of file (files that are associated with certain actions), which displays menus when you right-click on it and the properties displayed by accessing this menu. Subkeys are such as. Arj,. Com,. Cab, etc.

2 .  Type of object, an object defined according to their menus, their properties, icon and links CLSID (discussed below).

3.  CLSID, gives us information OLE (object linking and enbedding, an application is automatically called by another for editing data) and DDE (dynamic data exchange, data exchange between two applications) on object types, can also contain information on contextual menus, and icon properties.

Opening the branch HKRC record, we find that among the many other Subkeys Subkeys there such as:

Shell: Active measures such as opening, printing, copying, etc, for example a Subkey determines that such media player opens our *. mid files. The branch to open and run these files would be:

[HKEY_CLASSES_ROOT\midfileshell]

@ =”Play”

[HKEY_CLASSES_ROOT\midfileshell\open]

@ =”Open”

[HKEY_CLASSES_ROOT\midfileshell\open\command]

@ =”C:\WINDOWS\undll32.exe C:\WINDOWS\SYSTEM\amovie.ocx, Rundll / open% 1”

[HKEY_CLASSES_ROOT\midfileshell\play]

@ =”Play”

[HKEY_CLASSES_ROOT\midfileshell\play\command]

@ =”C:\WINDOWS\undll32.exe C:\WINDOWS\SYSTEM\amovie.ocx, Rundll / play / close% 1”

Shellex: Contains Subkeys determining OLE and DDE functions for each object type are numeric strings pointing to the dll eg running an operation and define the properties of their context menus.

Shellnew: Contains the value chain of command or order number that determines the opening of a new object. A very sencillito is key as *. BMP ShellNew indicates the program that will edit a new image of this type.

Default Icon: Contains the value of the numeric string that indicates the default icon for each type of object, usually point to the shell32.dll, pifmgrd.dll (in windowssystem) or moricons.dll (in windows) so that the first icon List assigned 0 to the next one and so on as follows: Windowsmoricons.dll, 0

HKEY_CURRENT_USER (HKCU)

The Key Subkeys this contain the settings for the current user, if a machine with a single user this key is almost identical to. DEFAULT HKEY_USERS. What is it we have all the preferences at any time since we added to all the default settings. Contains all information about the system that has no HKEY_LOCAL_MACHINE, that is, software configurations and user preferences. It is a part of the record we can change little risk of causing a disaster, almost all of the statements in this key are modified from a heavyweight Windows, such as control panel, taskbar, any properties menu etc.

Within this Key and with an eye on the key: there are serial numbers until we make it impossible to register the application.

In this Key we find:

1.  AppEvents: We define the sounds (MasterCad-d-19 ugly, P) with which windows always stuns us to execute a program.

EventLabels gives us the name of the operation SchemesApps the location of operations and Schemes as the theme name.

2.  Control Panel: Contains Subkeys we define the appearance of our windown (the window color, size, etc..) Accessibility options as SoundSentry or StickyKeys, cursors, desktop (background, size icons, etc..). These options are fully configurable from the control panel.

3. InstallLocationsMRU: These Subkeys contain the location of installed software, for example contains all locations of installed programs with””Wizards as InstallShield, etc. À MRU Most-recently-used, self explanatory.

4 . Keyboard Layout: As you probably gather I guess it contains the definition of your keyboard, depending on country and so on.

5 – Network: Contains your previous network connections divided into two classes:

Persistent: Define the devices and define the units leave the option to reconnect to disconnected””(pun intended …) the key information such as your browser, your user name, etc.. These keys are displayed as icons in My Computer.

Recent: The latest network connections you have made without the option of reconnecting checked appear in drop down menus when you are making a network connection (Path).

6. RemoteAccess: Contains settings markers networking, is divided into two branches:

Addresses: Contains a binary definition of each connection you have mounted on Dial-Up Networking.

Profile: What is subdivided into a branch for each connection, these branches are the values of IP, domain, username, etc.. Each connection.

7.  Software: All Subkeys that make up this Subkey (I’m getting tired of subkey key …) represent software installed on your PC or software has been installed, the branches have either the program name or the name the manufacturer and distinctive, sometimes we can find clues with the same name within LOCAL_MACHINE but usually the content will be different in each case.

The content of the branches that we find is often very similar, user preferences, saved files, and addresses the most interesting installation dates, user names / serial numbers and codes that determine whether or not the program is registered.

HKEY_LOCAL_MACHINE (HKLM)

The various entries in this Key defines the physical state of your PC, including data on the bus, memory and system configurations of our hardware and software (registered / unregistered for example).

Contains 7 Subkeys which are:

1.  Setup: This branch will keep the settings you define your hardware through the Control Panel by clicking the System icon. The last setting before turning the PC is copied to HKCC at startup.

2.  Enum: this is where they saved most of your hardware settings, such as PNP devices, BIOS, PCI, ESDI, FLOP, ISAPNP, Monitor, SCSI, and networking devices.

3 . Hardware: is divided into two branches: Description: containing the branch SystemFloating Point Processor, which is 0 or 1 depending on their existence. Devicemap, which contains the branch serialcomm which lists your ports.

4. Network: Contains the Logon branch, which in turn is composed of LMLogon values (will be 1 if the machine is then connected in a network and/or otherwise), logonvalidated (1 to be validated), Policy Handler, Primary Provider, username and UserProfile.

5. Services: Each of these branches are full of twigs, mostly trivial explanation, everyone will know or can imagine what does branch or Shutdown or KeyboardLayout ComputerName, etc. I can give Vmm32 problems, a list of the VxD that you have to work and little else.

HKEY_USERS (HKU)

You define the user settings and default settings that are given to new users. Default and username respectively.

HKEY_CURRENT_CONFIG (HKCC)

The contents of this Key are taken to start the PC-PC-PC housed in the settings in each user profile Local_MachineConfig.

Here we find three Subkeys:

1. Display: Contains the value chain that determine the fonts that may appear in the Settings main window that contains the value chain that determine: BitsPerPixel, different DPIs, oemfonts, fixedfon, fonts and Resolution.

2 . Software: Where to find details of internet settings such as proxies or autodial.

3 . System: It contains only one branch CurrentControlSetcontrolPrintPrinters where we have information about the printers that we have defined via Start – Settings – Printers.

HKEY_DYN_DATA (HKDD)

In this Key we have information from our system detected the start, this information as the name suggests is dynamic and therefore susceptible to change at any time, which makes it seem that this key is not saved.

Within HKDD we encounter:

1. ConfigManager: With a single branch of Enum name that opens into a pile of twigs number that defines the status, location, problems identified and the hardware key PNP devices detected when you start the PC-PC-PC.

2. PerfStats: The statistics of the current operation of PC-PC-PC are saved to this Subkey under color of Values in binary, it is said that some of the branches define the file system, or management”memory” .

3. Security: With a single branch of Provider name where we found a”mirror”HKLM\SecurityProvider branch, while the former will change along with the properties of the second network remains static.

So here is almost the full description of Windows Registry.