Usually I used two bat-scripts to scan this hive.
START.bat
snapshot start.snapshot HKEY_CLASSES_ROOT
END.bat
snapshot end.snapshot HKEY_CLASSES_ROOT
snapshot start.snapshot -diffprint end.snapshot
So I see in console:
Error: Unknown registry base subkey HKEY_CLASSES_ROOT
What is the way to scan this hive?
Are they not also located in HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID ??
Why would you like to capture HKCR? HKEY_CLASSES_ROOT is a merged view of HKEY_LOCAL_MACHINE\Software\Classes and HKEY_CURRENT_USER\Software\Classes which we capture during the normal Setup Capture process..
Ok. But two things:
1) I might be wrong but I think there is some unique (not only merged) data in this hive.
2) And this feature was present so why it is cut out now?
1. Could you provide examples of what is not captured with our normal procedure?
2. I wasn't even aware you could capture HKCR in that way and therefore cannot say why it’s not working now. Hope someone else here can share some light on the subject.
What about HKEY_CLASSES_ROOT/CLSID/
It contains unique id for ActiveX components. Other hives do not have those IDs.
Or I'm wrong?
Are they not also located in HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID ??
I think you are right. Thank you!