- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Usually I used two bat-scripts to scan this hive.
START.bat
snapshot start.snapshot HKEY_CLASSES_ROOT
END.bat
snapshot end.snapshot HKEY_CLASSES_ROOT
snapshot start.snapshot -diffprint end.snapshot
So I see in console:
Error: Unknown registry base subkey HKEY_CLASSES_ROOT
What is the way to scan this hive?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Why would you like to capture HKCR? HKEY_CLASSES_ROOT is a merged view of HKEY_LOCAL_MACHINE\Software\Classes and HKEY_CURRENT_USER\Software\Classes which we capture during the normal Setup Capture process..
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Ok. But two things:
1) I might be wrong but I think there is some unique (not only merged) data in this hive.
2) And this feature was present so why it is cut out now?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
1. Could you provide examples of what is not captured with our normal procedure?
2. I wasn't even aware you could capture HKCR in that way and therefore cannot say why it’s not working now. Hope someone else here can share some light on the subject.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What about HKEY_CLASSES_ROOT/CLSID/
It contains unique id for ActiveX components. Other hives do not have those IDs.
Or I'm wrong?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Are they not also located in HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID ??
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I think you are right. Thank you!