본문 바로가기
운영체제 (LNX,WIN)

Windows Registry Recovery

by 날으는물고기 2014. 9. 11.

Windows Registry Recovery


This application allows to read files containing Windows 9x,NT,2K,XP,2K3 registry hives. It extracts many useful information about configuration and windows installation settings of host machine. 
Registry hive can be exported into REGEDIT4 format. 
Every topic data can be saved to CSV.
It's designed in Multiple Document Interface. 

Here are described individual explorers:

  • File Information 
    In this explorer you can see basic file properties and checksums. 
  • Security Record Explorer 
    Displays all security records used in registry. Usage counter, owner SID, group SID, list of affected keys and list of SACL and DACL is displayed for every record with flags and permissions enumerated. This explorer is available only for NT based system registry hives. 
  • SAM 
    Displays Machine SID and part of SYSKEY. Enumerates local user and group accounts and some of their properties. This explorer is available only for NT based system registry SAM hive. 
  • Windows Instalation 
    Displays Windows name, ID and key, install date and user registration info. Enumerates installed software with descriptions and install date and list of installed hotfixes wih description. This explorer is available only SOFTWARE registry hive (Product ID and key are extracted in SYSTEM hive too). 
  • Hardware 
    Displays quick overview (CPU, Monitors, Video and Sound card and Network cards) and full device map of configured devices that worked on host machine. They are displayed in "like Device Manager" tree with some properties. This explorer is available for SYSTEM registry hive. 
  • User Data 
    Displays user and machine name and tree based Start menu for selected USER hive. This explorer is available for USER registry hive. 
  • Startup Applications 
    Enumerates applications that are registered to be run after startup. This explorer is available for SOFTWARE registry hive. 
  • Services and Drivers 
    Enumerates all installed services and drivers with properties. This explorer is available only for NT based system registry SYSTEM hive. 
  • Network Configuration 
    Displays all installed network clients, protocols and services. Enumerates all defined network connections with its TCP/IP configuration. This explorer is available only for NT based system registry SYSTEM hive. 
  • Windows Firewall Settings 
    Displays settings (rules) for Windows Firewall. This explorer is available only for NT based system registry SYSTEM hive. 
  • Environment 
    Displays all environment variables. This explorer is available only for NT based system registry SYSTEM hive. 
  • Shell Folders 
    Displays shell folders (folders known to system). This explorer is available only for NT based system registry SYSTEM hive. 
  • Outlook Express 
    Digs out all Outlook Express accounts and their settings. This explorer is available only for NT based system registry USER hive. 
  • Raw Data 
    This explorer displays whole registry in known tree format. Contains powerful searching and data interpreter. 

Target platforms
Windows 2000
Windows XP
Windows 2003
Windows Vista
Windows 7
Windows Server 2008
Windows Server 2008 R2


Licence

Free to use for both private and commercial users.




출처 : mitec.cz

728x90

댓글