Professional Documents
Culture Documents
Windows Registry
Windows Registry
Local
Machine
Current Current
Config User
Registry
(Hkey)
Classes
Users
Root
The forgotten one-
HKey_Current_Config\
► Stores temporary information about
computer’s settings
► Barely implemented
► \Microsoft\Windows\CurrentVersion\InternetSettings (proxy enable)
The User Database
► Personalized Settings
for Windows
Themes
All Users
Accessibility HKey_Users
(2k/Me/XP)
Preferences
► The Cycle- DB
► Saved on Exit
► Edit only Current_User Current User
Important Stuff in HKCU
► AppEvents= Themes (Event Sounds)
► ControlPanel = duh!
►ScreenSaver
►Desktop
► Software=User Preferences
►\Microsoft\Office\x.y\ (office prefs)
► These keys are usually system safe to
delete
Important Stuff in HKCU
► AppEvents= Themes (Event Sounds)
► ControlPanel = duh!
►ScreenSaver
►Desktop
► Software=User Preferences
►\Microsoft\Office\x.y\ (office prefs)
► These keys are usually system safe to
delete
Hkey_Classes_Root:
What should I do with that?
► Handles file
extensions/
.mp3 associations and
links to methods
(Default) ContentType OpenWithList ► Choose what
opens with what
MMJB.mp3 Icon Command (remove old apps)
Who wins with
Icon
multiple apps
.mp3 =>
MMJB.mp3 and
Command
mp3file
► .EXE’s + Viruses
Hkey_Classes_Root:
What should I do with that?
► Handles file
extensions/
.mp3 associations and
links to methods
(Default) ContentType OpenWithList ► Choose what
opens with what
MMJB.mp3 Icon Command (remove old apps)
Who wins with
Icon
multiple apps
.mp3 =>
MMJB.mp3 and
Command
mp3file
► .EXE’s + Viruses
Hkey_Classes_Root:
What should I do with that?
► Handles file
extensions/
.mp3 associations and
links to methods
(Default) ContentType OpenWithList ► Choose what
opens with what
MMJB.mp3 Icon Command (remove old apps)
Who wins with
Icon
multiple apps
.mp3 =>
MMJB.mp3 and
Command
mp3file
► .EXE’s + Viruses
Hkey_Local_Machine
HKey_Local_Machine
► Software-Application Settinsg
► System- Control Sets
Control Sets = Windows HW Profiles
► Otherwise leave it alone!
Hkey_Local_Machine
HKey_Local_Machine
► Software-Application Settings
► System- Control Sets
Control Sets = Windows HW Profiles
► Otherwise leave it alone!
\CurrentControlSet
► \Enum\ – same as Device Mgr
► \Control\Class- Driver Database
► HKLM\System\CurrentControlSet\Services
This is the source of a lot of errors
► \Services\VxD
Those pesky VxD’s are stored here
\Software\Microsoft\Windows\Current Version