Jump to content

Windows Registry


nlgma
 Share

Recommended Posts

I'm trying to search Windows Registry. I've tired a few thing, like exporting the Windows Registry to a .txt file, then searching that. It worked, but it takes a while. I tried to put Windows Registry into an array and search that but no dice. I've searched the forums, no luck!

Link to comment
Share on other sites

Sorry, but AutoIt can not do this. The registry is pretty off-limits except the commands in AutoIt (read/write/ect).

By off-limits, I do not mean you shouldn't, but I mean you can't. Like there are no current commands to do this.

[left][sub]We're trapped in the belly of this horrible machine.[/sub][sup]And the machine is bleeding to death...[/sup][sup][/sup][/left]

Link to comment
Share on other sites

Windows backs up the registry on startup & stores the last five backups. As well as this it is possible to back up the Registry while doing a normal backup or on it's own.

There is a program within Windows 98 called "Scanreg" go to START BUTTON - RUN & type (scanreg)

Scanreg will check the registry and should tell you that your registry has been backed up today & would you like to do it again.

By default there are 5 backups stored by windows.

They are stored as (rb###.cab) files from rb000.cab to rb004.cab. These are hidden files so to see them you must have "Show all files" must be ticked. - MY COMPUTER - VIEW from the menu on top of window - FOLDER OPTIONS - select VIEW tab - & click the box next to SHOW ALL FILES.

------------------

Jonty rodes

Social Media Marketing

Link to comment
Share on other sites

Windows backs up the registry on startup & stores the last five backups. As well as this it is possible to back up the Registry while doing a normal backup or on it's own.

There is a program within Windows 98 called "Scanreg" go to START BUTTON - RUN & type (scanreg)

Scanreg will check the registry and should tell you that your registry has been backed up today & would you like to do it again.

By default there are 5 backups stored by windows.

They are stored as (rb###.cab) files from rb000.cab to rb004.cab. These are hidden files so to see them you must have "Show all files" must be ticked. - MY COMPUTER - VIEW from the menu on top of window - FOLDER OPTIONS - select VIEW tab - & click the box next to SHOW ALL FILES.

------------------

Jonty rodes

Social Media Marketing

Regedit Command Line Options Syntax
Link to comment
Share on other sites

Sorry, but AutoIt can not do this. The registry is pretty off-limits except the commands in AutoIt (read/write/ect).

By off-limits, I do not mean you shouldn't, but I mean you can't. Like there are no current commands to do this.

I managed to put this together. It's not clean, nor can I get it to stop automatically. Can someone please look at this, help me clean it up and for the love of god make it stop ?

#include <Array.au3>

;.-''-..-''-.| USER OPTIONS |.-''-..-''-.
HotKeySet("^z","Stop"); Press Ctrl + Z to stop at any time.
;----------------------------------------
Global $word = "firefox"; Word to search for.
;----------------------------------------
Global $c = 0; 0 = not case sensitive, default
             ; 1 = case sensitive
             ; 2 = not case sensitive, using a basic/faster comparison
;----------------------------------------
Global $M_Array[5]; If you comment any of the other Reg trees list below, Change the $M_Array[?]
$M_Array[0] = "HKEY_LOCAL_MACHINE" 
$M_Array[1] = "HKEY_USERS" 
$M_Array[2] = "HKEY_CURRENT_USER" 
$M_Array[3] = "HKEY_CLASSES_ROOT" 
$M_Array[4] = "HKEY_CURRENT_CONFIG" 
;----------------------------------------
Global $Tip = 1; 0 = Tray Tip off
            ; 1 = Tray Tip on
;----------------------------------------
Global $Array1[1],$Array2[1],$Done = 0
;----------------------------------------

Main()
Do
    Read()
Until $Done = 1

_ArraySort($Array1)

Func Main()
    Do 
        For $i = 0 to UBound($M_Array)  -1; to the size of $M_Array
            If @error <> 0 Then MsgBox(0,"TEST " & $i, UBound($M_Array))
            $search = $M_Array[$i]
            Search($search)
        Next
    Until UBound($M_Array) = $i
EndFunc

Func Search($search)
    For $a= 1 to 10000
        if $Tip = 1 Then TrayTip("("&$a&") Ctrl+z to stop",$search,2)
        $var = RegEnumKey($search, $a)
        If @error <> 0 then ExitLoop
        IF StringInStr($var, $word,$c)  Then Found($search,$var)
        _ArrayAdd($Array1, $search&"\"&$var)
    Next
    $count = UBound($Array1)
    $s = UBound($Array1)
EndFunc

Func Read()
    For $i = 0 to UBound($Array1) -1
        If @error <> 0 Then MsgBox(0,"TEST " & $i, UBound($Array1))
        $search = $Array1[$i]
        Search($search)
    Next
EndFunc

Func Found($search,$var)
    $current = $search&"\"&$var
    _ArraySearch($Array2,$current) 
    If @error = 6 Then 
        _ArrayAdd($Array2, $current)
        $MsgBoxAnswer = MsgBox(262180,"Found it!",$current&@CRLF&"Would you like to continue ?",10)
        Select
            Case $MsgBoxAnswer = 6;Yes
            ;Continue Loop
            Case $MsgBoxAnswer = 7;No
                Stop()
            Case $MsgBoxAnswer = -1;Timeout
            ;Continue Loop
        EndSelect
    EndIf
EndFunc

Func Stop()
    _ArraySort($Array2)
    _ArrayDisplay($Array2, "Results: "&$word)
    Exit
EndFunc
Link to comment
Share on other sites

By off-limits, I do not mean you shouldn't, but I mean you can't. Like there are no current commands to do this.

Really? News to me: _RegSearch()

;)

Valuater's AutoIt 1-2-3, Class... Is now in Session!For those who want somebody to write the script for them: RentACoder"Any technology distinguishable from magic is insufficiently advanced." -- Geek's corollary to Clarke's law
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...