Windows system registry introduction and its use

                                                                                                                                                                                         

First, what is the registry Windows registry (registry) is essentially a huge database, it stores the following: software and hardware related configuration and status information; application and resource manager shell initial Conditions, preferences, and offload data; settings and various permissions for the entire system; file extensions associated with the application; hardware descriptions, states, and attributes; computer> performance records and underlying system state information, And various other data.

Second, the structure of the registry
Windows provides us with a registry editor (regedit.exe) tool, which can be used to view and maintain the registry. As you can see from the figure, the Registry Editor is similar to the Explorer interface. It has six branches (some are five): hkey-classes-root file extension associated with the application and ole information hkey-current-user current login user control panel options and settings for the desktop, and mapped network
Driver hkey-local-machine Computer Hardware and Application Information hkey-users Information about all logged in users hkey-current-config Computer hardware configuration information hkey-dyn-data Plug and Play and system performance dynamics

Three, the registry modification method
1, software modification (security) through some special modification tools to modify the registry, such as: magicset, tweakui, winhacker and so on. In fact, the control panel is such a tool, but the function is simpler. 2, indirect modification (comparative security) will be modified to write to a .reg file, and then imported into the registry. This has the advantage of avoiding erroneous writes or deletes, but requires the user to understand the internal structure of the registry and the format of the .reg file. 3, direct modification (the least secure, but the most direct and effective) is to modify the registry key data items directly through the registry editor, but requires users to have certain registry knowledge, familiar with the internal structure of the registry, and certainly Be careful, otherwise it will ruin the system.

Fourth, use the method
1 modify the key value: start & mdash; run, enter regedit OK, open the registry editor, select the subkey you want to modify in the left pane, in In the right pane, hit the key value item to be modified, right click on the key value item, modify it as required, and modify it. Example: To speed up the switch modification "HKEY-LOCAL-MACHINE", \\“Stem”\\“CurrentControlSet”\\“Control”, the string "WaitToKillServceTimeout" value data 20000 is modified to 1000. Start — run — enter “Regedit”, in the open registry editor, go back to “Control& left; left click to open the right pane, in the right pane hit "WaitToKillServceTimeout"; double click to open &ldquo ; edit string & rdquo; dialog box, enter the data value to be modified to “1000” in the "Value data" box. 2 New subkey and key value: Right click on the parent key, select “New → Item”, enter the subkey name in the open “New #1“, confirm, right click on the newly created subkey, in the right window Add new key-value items and key-values. Example: New string, new value "HKEY-LOCAL-MACHINE", \\“Stem”\\“CurrentControlSet”\\“Control”\\“HungAppTimeout”The numerical data is “200”. Start — run — enter “Regedit”, in the open registry editor, find the following step to "Control"" left click to open the right pane, right click on the right pane blank — new & mdash; string — enter the name "HungAppTimeout" in the name, double-click the name to open the "Edit String" dialog box, enter the data value in the "Value data" box, "200", confirm. 3 Delete subkeys and key values: Start — Run - type regedit OK, open the Registry Editor, right click on the subkey you want to delete in the left pane, select “delete”; right click on the right pane To delete the key-value item, select “delete”. Note that for insurance purposes, you need to prepare the registry before the registry. The method is: in the registry editor window — file — export & mdash; select the export part or all — enter the file name & mdash; save. Once the modified error available & ldquo; import & rdquo; method of recovering