Fixing registry problems via system restore when windows won't boot


Recommended Posts

Fixing registry problems via system restore when windows won't boot.

Everybody knows about system restore, how you can use it to restore your system back to a particular date when all was well. What happens when windows does not boot, because of a problem with the registry? Everybody?s first thought is either performing a repair installation of windows or formatting and reinstalling. Before going that drastic there is one Hail Mary you can attempt before giving up all hope. To do this you need a copy of bartpe (a version of windows that you can boot off a CD.

http://www.nu2.nu/pebuilder (you can use this free software to make your own)

System restore stores all of the restore points in the root of C: in a folder called ?System Volume Information? (You have to tell windows to show Protected Operating system files).

If you open that folder you will see a folder called ?_restore (and then a bunch of numbers)?. All your machines restore points are stored there. The restore points all share a common name, the letters RP and then a number (example RP143). The numbers themselves don?t really tell you when that restore point was created, but the time stamp does. So it?s best to view by details and arrange by date. So you pick a RP folder corresponding by the date you want to go back to and open it up. Every restore point has a ?Snapshot? folder. This folder contains a backup of the system registry the day the restore point was created.

All the registry backups start with the name _Registry_User followed by the name of the registry file. Example _REGISTRY_MACHINE_SYSTEM. (all that file needs is a little rename love?n and it will be as good as new).

Windows stores all of its registry entries in c:\windows(or winnt)\system32\config. So it?s best to backup that folder up before making any changes. After that?s done it?s a good idea to rename the current registry entries to something else, like system to systemold. Now return to your ?Snapshot? directory and copy all backed up registry entries and paste them in c:\windows(or winnt)\system32\config.

All it takes now is just a little renaming. Let?s take system for example. The backup of the system registry file is called _REGISTRY_MACHINE_SYSTEM. Right click it and rename it to what the old file was called. In this case the file was called just system with no file extension. The same goes for the rest of the registry files. The most common registry files to get you back up and running are, System,Software,Security,SAM and Default. I usually just restore all of them.

Once complete reboot your machine. If all goes well the once unbootable windows installation should come back to life, if all that was wrong was the registry. This has worked on more than one occasion, when the fate of a windows install was looking pretty bleak.

Edited by warwagon
  • 2 weeks later...

Excellent technique man, haven't had the need to try it, but it sounds QUITE logical & solid...

(Kudos to you!)

:)

* They ought to "sticky thread" this one... imo, @ least!

HOWEVER - wouldn't RECOVERY CONSOLE (free, as in included with your Operating System CD/DVD already) allow for the SAME THING?

(E.G..-> backing up originals, renaming files, & Copy/overwrite of corrupt ones)

I.E.-> It's QUITE POSSIBLE, bart's PE builder is NOT required!

HOWEVER - you may be correct: It's possible that the registry hives are LOCKED, even if only in part, while RC operates too & a 3rd party tool MAY be needed (since it is NOT "Windows itself" running & thus, not locking registry hives).

(Other tools could possibly manage it as well - such as "System Lifeline" by the folks that produce ONTRACK utlities - this is NOT a std. command processor, & it works while windows is booting. prior to the Windows OS Explorer.exe shell taking effect... & probably does NOT "lock" the registry hives against overwrites too).

APK

P.S.=> Since I liked it, even though it's only based on "theoreticals" @ this point (imo & experience because I have NOT had to use it, but it sounds logical enough)? You get a "5 stars" out of me for a rating... apk

Edited by APK
Excellent technique man, haven't had the need to try it, but it sounds QUITE logical & solid...

(Kudos to you!)

:)

* They ought to "sticky thread" this one... imo, @ least!

HOWEVER - wouldn't RECOVERY CONSOLE (free, as in included with your Operating System CD/DVD already) allow for the SAME THING?

(E.G..-> backing up originals, renaming files, & Copy/overwrite of corrupt ones)

I.E.-> It's QUITE POSSIBLE, bart's PE builder is NOT required!

HOWEVER - you may be correct: It's possible that the registry hives are LOCKED, even if only in part, while RC operates too & a 3rd party tool MAY be needed (since it is NOT "Windows itself" running & thus, not locking registry hives).

(Other tools could possibly manage it as well - such as "System Lifeline" by the folks that produce ONTRACK utlities - this is NOT a std. command processor, & it works while windows is booting. prior to the Windows OS Explorer.exe shell taking effect... & probably does NOT "lock" the registry hives against overwrites too).

APK

P.S.=> Since I liked it, even though it's only based on "theoreticals" @ this point (imo & experience because I have NOT had to use it, but it sounds logical enough)? You get a "5 stars" out of me for a rating... apk

True you don't need bartpe. But with the recovery console you have to type out the whole file names. They can be quite long. yes it can be done. BartPE is easier

True you don't need bartpe.

Ah, THAT'S what I was wondering & it appears THERE IS NOTHING LOCKING THE REGISTRY @ THAT POINT (while in RC)... that's what I needed to know!

I was unsure here on this note, thanks for seconding me on it & removing my doubts @ this point.

(Heh, I would try to "experiment" here, but... I only have 1 system now, & trying to pull a "radical experiment" on it, after it has been up & running on Windows Server 2003 since 2003 would be a HUGE risk imo... one I would rather NOT gamble on!)

BUT, you have "had the balls" to try it apparently!

(& that earns your 5 star rating from me @ least, on that merit alone (well, that & the fact your technique sounded logical as all get out too!)).

The thing is, over on "my side of the fence", is:

I don't dare "risk" this setup - TOO many years poured into it, very fine-tuned, secured, & much reorganization/personalization into it etc. et al!

(Well, then again, I have an Acronis TrueImage backup I could return to that IS current, but, would take me about 1 hr. to reinstall the OS, install Acronis TrueImage, & then run the restore from it also)

Ah heck, I'll admit it - it's just me being a coward is all, lol!

But with the recovery console you have to type out the whole file names. They can be quite long. yes it can be done. BartPE is easier

Easier = GOOD!

:)

* RC is "primitive" in MANY respects, such as its copy command being a pain too (so, I hear your "pain" when you mention typing things out in it, & more), but, it does do the job well enough, but as you say, sometimes NOT as easily as other things can.

APK

P.S.=> What I am wondering @ this point, & perhaps you can help here? Is IF there is an "SDK" for Windows RECOVERY CONSOLE, because this has given me an idea... that is to write up a small app for RC that will allow .reg file merges. Do you know if MS puts out a SDK for RC? Thanks... apk

Note that this is unnecessary in Vista - just insert the operating system DVD, choose "repair my computer", and the DVD will automatically restore the registry. I've had it do this when my registry became corrupted (a friend was over, and he accidentally flipped the power supply switch while the computer was booting. Not good)

  • 3 years later...

Note that this is unnecessary in Vista - just insert the operating system DVD, choose "repair my computer", and the DVD will automatically restore the registry. I've had it do this when my registry became corrupted (a friend was over, and he accidentally flipped the power supply switch while the computer was booting. Not good)

Plus in Vista and 7 under the c:\windows\system32\config folder there is a folder in their called regback. So if you wanted to do it yourself, all you have to do is back up your original ones. and just copy and paste the contents of regback, into the system32/config folder and boom! Done!

Plus in Vista and 7 under the c:windowssystem32config folder there is a folder in their called regback. So if you wanted to do it yourself, all you have to do is back up your original ones. and just copy and paste the contents of regback, into the system32/config folder and boom! Done!

Only took you 3+ years to reply mate. Gotta be a record, right? :D

  • 7 months later...
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • BleachBit 6.0.1 Beta by Razvan Serea When your computer is getting full, BleachBit quickly frees disk space. When your information is only your business, BleachBit guards your privacy. With BleachBit you can free cache, delete cookies, clear Internet history, shred temporary files, delete logs, and discard junk you didn't know was there. Designed for Linux and Windows systems, it wipes clean thousands of applications including Firefox, Microsoft Edge, Google Chrome, Opera, Safari, and more. Beyond simply deleting files, BleachBit includes advanced features such as shredding files to prevent recovery, wiping free disk space to hide traces of files deleted by other applications, and vacuuming Firefox to make it faster. Better than free, BleachBit is open source. BleachBit has many useful features: Delete your private files so completely that "even God can't read them" according to South Carolina Representative Trey Gowdy. Simple operation: read the descriptions, check the boxes you want, click preview, and click delete. Multi-platform: Linux and Windows Free of charge and no money trail Free to share, learn, and modify (open source) No adware, spyware, malware, browser toolbars, or "value-added software" Translated to 64 languages besides American English Shred files to hide their contents and prevent data recovery Shred any file (such as a spreadsheet on your desktop) Overwrite free disk space to hide previously deleted files Portable app for Windows: run without installation Command line interface for scripting and automation CleanerML allows anyone to write a new cleaner using XML Automatically import and update winapp2.ini cleaner files (a separate download) giving Windows users access to 2500+ additional cleaners Frequent software updates with new features Going beyond standard deletion of files, BleachBit has several advanced cleaners: Clear the memory and swap on Linux Delete broken shortcuts on Linux Delete the Firefox URL history without deleting the whole file—with optional shredding Delete Linux localizations: delete languages you don't use. More powerful than localepurge and available on more Linux distributions. Clean APT for Debian, Ubuntu, Kubuntu, Xubuntu, and Linux Mint Find widely-scattered junk such as Thumbs.db and .DS_Store files. Execute yum clean for CentOS, Fedora, and Red Hat to remove cached package data Delete Windows registry keys—often where MRU (most recently used) lists are stored Delete the OpenOffice.org recent documents list without deleting the whole Common.xcu file Overwrite free disk space to hide previously files Vacuum Firefox, Google Chrome, Liferea, Thunderbird, and Yum databases: shrink files without removing data to save space and improve speed Surgically remove private information from .ini and JSON configuration files and SQLite3 databases without deleting the whole file Overwrite data in SQLite3 before deleting it to prevent recovery (optional) BleachBit 6.0.1 Beta release notes: BleachBit 6.0.1 beta is now available for testing. This maintenance-focused release includes bug fixes, updated translations, and a range of safe enhancements. This release fixes a Windows security issue that could allow arbitrary file deletion during privileged cleaning (reported by Zeze with TeamT5). It also adds new cleaners (including a DNS cache cleaner, Claude Code, and Visual Studio Code forks), support for multiple Chrome and Edge profiles, new deep scan options for developer directories like node_modules and venv, and safer, faster file shredding. All Platforms Added cleaners for Claude Code, DNS cache, and many Visual Studio Code forks. Added support for multiple Chrome and Edge profiles. Chrome can now clean downloaded AI models. Deep Scan can optionally remove venv, __pycache__, node_modules, and .angular directories. Deep Scan is faster by skipping directories on the keep list. File shredding is safer, faster, and leaves fewer recoverable traces. Improved handling of cookies, symlinks, Unicode filenames, external processes, and configuration files. Improved Expert Mode warnings and long warning dialogs. Fixed crashes related to cleaner detection, invalid Unicode, and malformed cleaner data. Clipboard is now cleared automatically after shredding files via paste operations. Linux Added AppImage support. Added cleaners for Visual Studio Code, Codeium, Librewolf (.deb), Transmission (Flatpak), and Profanity. Improved Linux trash detection, including Snap-installed applications and mounted drives. Fixed Wayland root CLI issues and several Snap-related problems. Improved package dependencies, AppStream metadata, and desktop file handling. Fixed startup crashes when Python Requests is unavailable. Windows Fixed a security vulnerability that could allow arbitrary file deletion when cleaning with elevated privileges. Added %WindowsSystem% variable support. Improved clipboard clearing using native Windows APIs. Improved installer experience on unsupported Windows versions. Reduced installer size and improved application robustness. Fixed Unicode handling, filename anonymization, Git revision reporting, and splash screen stability. [full release notes] Download: BleachBit 6.0 | Portable | ~20.0 MB (Open Source) View: BleachBit Home page | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • DriversCloud 12.1.6 by Razvan Serea With DriversCloud (formerly My-Config.com), you can explore your computer easily, safely and free. The application quickly scans your PC and identifies the hardware and software components. DriversCloud then establishes a list of the different drivers compatible with your OS and hardware. Download the drivers needed for the proper functioning of your computer. To detect your drivers, DriversCloud also displays a detailed summary of your hardware and software configuration, analyzes your BSOD, monitors in real-time your PC voltages and temperatures and lets you share your configuration online. Once the hardware components have been detected, you will be able to obtain with just a few clicks the latest drivers corresponding to the identified hardware. You can record your configuration on the site for free, and can get the corresponding URL to post the configuration to technical forums, e-mail and social networks. You can also download the detection result (the configuration) as a PDF file. To protect the user's privacy and data confidentiality, a 4-level confidentiality system was created that filters the XML marks and gives control to the user. The default level can be modified in the preferences. Using the maximum level will prevent the user from publishing his configuration and generating a corresponding PDF file. In non-connected mode, each XML configuration is stored on the server for one day (for practical reasons). However, you are given the opportunity to manually delete it. Created in 2004, and continually improved, My-Config.com has established itself on the web as a free service to PC users running Windows and Linux operating systems. The service is designed to work with the most common Internet browsers (Edge, Firefox, Chrome, Safari). Download: DriversCloud 64-bit | 20.0 MB (Freeware) Download: DriversCloud 32-bit | 18.9 MB Link: DriversCloud Home Page | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
  • Recent Achievements

    • One Month Later
      AndreaB earned a badge
      One Month Later
    • One Month Later
      agatameier earned a badge
      One Month Later
    • Week One Done
      agatameier earned a badge
      Week One Done
    • Week One Done
      ssd21345 earned a badge
      Week One Done
    • Contributor
      MarkHughes4096 went up a rank
      Contributor
  • Popular Contributors

    1. 1
      +primortal
      516
    2. 2
      +Edouard
      189
    3. 3
      PsYcHoKiLLa
      148
    4. 4
      ATLien_0
      96
    5. 5
      Steven P.
      76
  • Tell a friend

    Love Neowin? Tell a friend!