Author Topic: Registry hive issues  (Read 3698 times)

0 Members and 1 Guest are viewing this topic.

Offline Willy2

  • Hero Member
  • *****
  • Join Date: Oct 2011
  • Posts: 1051
  • Karma: 16
    • View Profile
Registry hive issues
« on: September 15, 2016, 10:55:39 AM »
- I compared "Tweaking's Registry compressor" program with the one that was written by Eusing. And I noticed that Eusing's program seems to compact four hives more. I made a screenshot of the differences. Those four extra hives are inside black rectangles in the picture attached. Perhaps it's possible to compact these hives as well in the next version of the "Registry Compressor" program ?
- Does "Tweaking's Registry backup" make a copy of those extra four hives as well ? I did a little digging on my HD and it looks like the program doesn't. To be added in the next version of RB ?
« Last Edit: September 24, 2016, 10:15:51 AM by Willy2 »

Offline Willy2

  • Hero Member
  • *****
  • Join Date: Oct 2011
  • Posts: 1051
  • Karma: 16
    • View Profile
Re: Registry hive issues
« Reply #1 on: September 21, 2016, 12:32:36 AM »
- It looks like the Eusing program completely kills/removes one hive because the size of one hive in the picture (see above) is reduced by 100%. Is that hive not by any chance a hive for the "Administrator" account ?
- I found a filed called "BCD000000000" in a folder called "C:\boot". It was the only occurrence of that file. Is that part of the OS ?

Offline Boggin

  • Global Moderator
  • Hero Member
  • *****
  • Join Date: Jul 2014
  • Posts: 7089
  • Location: UK
  • Karma: 106
    • View Profile
Re: Registry hive issues
« Reply #2 on: September 21, 2016, 08:35:07 AM »
BCD is Boot Configuration Data and is used as bcdedit to change the Boot configuration.

An example is bcdedit /set {current} bootmenupolicy legacy

This cmd will restore the F2, F8 and F12 keys on boot in Win 8/8.1 and 10, although in Win 10 you need to disable Fast startup for them to function.

Offline Willy2

  • Hero Member
  • *****
  • Join Date: Oct 2011
  • Posts: 1051
  • Karma: 16
    • View Profile
Re: Registry hive issues
« Reply #3 on: September 24, 2016, 10:51:24 AM »
- Post deleted.
« Last Edit: September 28, 2016, 03:53:07 PM by Willy2 »

Offline Boggin

  • Global Moderator
  • Hero Member
  • *****
  • Join Date: Jul 2014
  • Posts: 7089
  • Location: UK
  • Karma: 106
    • View Profile
Re: Registry hive issues
« Reply #4 on: September 24, 2016, 01:06:19 PM »
While I've used the free version of Revo Uninstaller, I never bothered going into the guts of it, but I discarded that program very early on in favour of IObit which dug out 64 bit programs which at the time, the free version of Revo only worked on 32 bit programs.

That now works on 64 bit programs but I much prefer IObit because of its simplicity.

I'm not sure where you are going with this thread though.

This is an early explanation of BCD https://technet.microsoft.com/en-us/library/cc721886(v=ws.10).aspx

Offline Willy2

  • Hero Member
  • *****
  • Join Date: Oct 2011
  • Posts: 1051
  • Karma: 16
    • View Profile
Re: Registry hive issues
« Reply #5 on: September 24, 2016, 01:46:13 PM »
- I can understand your thoughts. I am also not sure anymore whether or not I reported something new and useful. And if the Tweaking programs also backs up enough hives. I thought the Eusing program targets/takes care of more hives than Tweaking's one. But with the latest info in the last post I am not so sure what to think any more.  :shy:
- I brought the REVO program up because it also "meddles" with the registry (make a backup).

- The REVO program now also became a free program. Just some 2 months after I paid for the 64 bit (paid for) version. :omg:

Offline Willy2

  • Hero Member
  • *****
  • Join Date: Oct 2011
  • Posts: 1051
  • Karma: 16
    • View Profile
Re: Registry hive issues
« Reply #6 on: September 28, 2016, 12:32:29 PM »
- Did some more "digging" on my Win 7 system. The files (file + path) below marked with "XX" (in total 13) are backed up by "Tweaking's Registry Backup". The files marked with "**" (in total 7) are reduced in size by the "Tweaking Registry Compressor" program.
- Eusing's registry compressor program seems to compress 3 hives/files more (in total 10, these 10 are marked with "+"). I use the word "seem" because a 100% compression (see above) is very odd, to put it friendly. These 3 hives - and one additional one that does get compressed by "Tweaking's Registry Compressor" - have different names in the GUI of Eusing's program. These 4 names ("S-1-5-..........") refer to the internal name(s) of specific parts in the registry itself.

Here's the full list:
(My system has 2 accounts i.e. "Administrator" and my own account called "BRS-Limited")

XX          C:\Users\Administrator\ntuser.dat
XX          C:\Users\Administrator\AppData\Local\Microsoft\Windows\UsrClass.dat

XX ** + C:\Users\BRS-Limited\ntuser.dat
             (Eusing's name: "S-1-5-21-170124911-2447686378-1839796511-1000")

XX      + C:\Users\BRS-Limited\AppData\Local\Microsoft\Windows\UsrClass.dat
             (Eusing's name: "S-1-5-21-170124911-2447686378-1839796511-1000_Classes")

XX          C:\Users\Default\ntuser.dat

XX      + C:\Windows\ServiceProfiles\LocalService\ntuser.dat
             (Eusing's name: "S-1-5-20")

XX      + C:\Windows\ServiceProfiles\NetworkService\ntuser.dat
             (Eusing's name: "S-1-5-19")

XX ** + C:\Windows\System32\Config\Components
XX ** + C:\Windows\System32\Config\Default
XX ** + C:\Windows\System32\Config\Sam
XX ** + C:\Windows\System32\Config\Security
XX ** + C:\Windows\System32\Config\Software
XX ** + C:\Windows\System32\Config\System

- And yes, "BCD00000000" (see picture in the 1st post) is a registry hive and it can be compressed. And it's stored in "C:\Boot". See the picture in the attachment of this post.
- More files to be backed up/reduced in size in the next versions of "Registry Backup" & "Registry Compressor" ?
- Does Windows allow programs having access to files in other user accounts ? That would enable the program(s) compress/backup all listed files above. Or do these programs have to run under the System Account to perform this trick ?
- The picture below is also very insightfull.
« Last Edit: October 10, 2016, 11:27:06 PM by Willy2 »

Offline Willy2

  • Hero Member
  • *****
  • Join Date: Oct 2011
  • Posts: 1051
  • Karma: 16
    • View Profile
Re: Registry hive issues
« Reply #7 on: September 28, 2016, 03:37:06 PM »
Post deleted.
« Last Edit: September 28, 2016, 03:54:10 PM by Willy2 »