How To Search Registry In Windows Xp

RegScanner v2.70 - find / search in the Registry of Windows Copyright (c) 2004 - 2022 Nir Sofer

Related Utilities

• RegistryChangesView - Compare 2 snapshots of Windows Registry.
• RegFromApp - Generate RegEdit .reg file from Registry changes fabricated by application.
• RegDllView - View registered dll/ocx/exe files on your system and unregister/delete unwanted registrations.

Other Links

• NK2Edit - Edit, merge and set the AutoComplete files (.NK2) of Microsoft Outlook.

Description

RegScanner is a pocket-sized utility that allows you to scan the Registry, detect the desired Registry values that match to the specified search criteria, and display them in i list. After finding the Registry values, you can easily jump to the right value in RegEdit, simply by double-clicking the desired Registry particular. You can too export the found Registry values into a .reg file that can exist used in RegEdit.

Search for other utilities in NirSoft

Advantages over RegEdit find of Windows

• RegScanner utility brandish the entire search issue at once, so yous don't accept to printing F3 in order to find the side by side value.
• In addition to the standard cord search (Like in RegEdit), RegScanner tin can also observe Registry values by information length, value blazon (REG_SZ, REG_DWORD, and and so on), and past modified date of the key.
• RegScanner can find a unicode string located within a binary value.
• RegScanner allows you to make a case sensitive search.
• While scanning the Registry, RegScanner display the current scanned Registry cardinal, every bit opposed to RegEdit, that simply display a dull "Searching the registry" dialog-box.

System Requirements

This utility works in whatever version of Windows, from Windows XP to Windows 11. A separated download for x64 systems is too bachelor.

Versions History

• Version 2.seventy:
  • Added 'Subkey Depth' option (The default is Infinite).
• Version ii.65:
  • Added new option: 'Open In RegEdit Without Peak', which allows y'all to open the selected Registry key in RegEdit without Administrator privileges.
  • Stock-still bug: RegScanner failed to export to .reg file properly when scanning the 64-scrap Registry using the 32-scrap version of RegScanner.
  • 'Open In RegEdit' choice - Fixed to open the 64-bit version of RegEdit when scanning the 64-scrap Registry using the 32-bit version of RegScanner.
• Version ii.61:
  • Added option to choose some other font (name and size) to brandish in the chief window (Nether the View card).
• Version 2.60:
  • Added choice to filter the search past the owner of the Registry key. You tin choose to search only Registry fundamental with specific owners, or to exclude specific owners from the search. You can specify multiple Registry key owners as comma-delimited list, for instance: Organization, TrustedInstaller
• Version 2.55:
  • Added 'Key Possessor' column, which displays the owner name of the Registry key.
  • Fixed to export properly REG_NONE values.
• Version two.51:
  • Stock-still bug: RegScanner saved the settings in the Registry instead of .cfg file.
  • Fixed RegScanner to use the .cfg file in the electric current directory if the folder is non specfied in the /cfg command-line option.
• Version 2.50:
  • Added new search pick: 'Registry detail contains remote network path'. When you select this choice, RegScanner searches and displays any cord that looks similar a path to remote computer on your network, for example: \\192.168.0.10\c$ , Z:\Windows (Only if Z: is remote network drive).
  • This characteristic can be useful if your system freezes when your network is disconnected and you want to discover references to remote computers in the Registry in order to endeavor to gear up the problem.
• Version ii.47:
  • Fixed the 'Automatically showtime remote Registry service' option to start the service on the remote computer when information technology's disabled.
• Version 2.46:
  • Added /RunAsSystem command-line choice for running RegScanner as SYSTEM user from control line.
  • Added /RunAsAdmin command-line option for running RegScanner equally Administrator (elevation) from command line.
• Version 2.45:
  • Added 'Run Equally System' choice (Under the help bill of fare), which allows you to easily run RegScanner as system user in society to search Registry hives attainable only with system user (HKEY_LOCAL_MACHINE\SAM and HKEY_LOCAL_MACHINE\Security ).
• Version 2.40:
  • Added 'Copy As .Reg File Format' option (Ctrl+R)
  • Added /sreg command-line option.
• Version ii.36:
  • Added pick to start the remote Registry service when scanning the Registry of remote car.
• Version two.35:
  • Added choice to scan the 32-bit or 64-bit view of the Regsitry.
  • By default (When yous don't choose the 32-bit or 64-bit option) - the 32-fleck version of RegScanner scans the 32-chip Registry and the 64-bit version of RegScanner scans the 64-flake Registry.
• Version 2.31:
  • Fixed issue (RegScanner 32-chip without elevation): When scanning the HKEY_CURRENT_USER\Software\Classes\VirtualStore\Car\SOFTWARE key, RegScanner displayed the keys stored nether the HKEY_LOCAL_MACHINE\Software cardinal. This problem was caused by a bug in Registry API of Windows, and a workaround was added to RegScanner so the Registry scan volition piece of work properly with this issues.
• Version 2.thirty:
  • Added option to search Registry keys modified in the terminal xx seconds/minutes/hours/days.
  • Added 'Today' button to set the fourth dimension range fields for today.
• Version 2.26:
  • Fixed issues: 'Exact Lucifer' search didn't work properly for REG_SZ data.
• Version 2.25:
  • Added choice to scan the Registry from command-line and export he result to csv/tab-delimited/html file.
• Version 2.twenty:
  • Added 'Export Value To Binary File' option.
  • Fixed the status bar brandish during scanning to be smoother and without flickering.
• Version 2.17:
  • Added 'New RegScanner Case' under the File menu, for opening a new window of RegScanner.
• Version ii.16
  • Stock-still bug: When exporting value names with '\' grapheme, RegScanner exported it as one '\' graphic symbol instead of ii '\' characters.
• Version ii.15
  • You lot can now specify multiple base keys to browse, delimited by comma. (For example: HKLM\Software\Microsoft\Windows\CurrentVersion, HKCU\Software\Microsoft\Windows\CurrentVersion )
    Be aware that if the base key yous want to browse contains a comma character, yous have enclose the key with quotes (For example: "HKLM\Software\My,Central")
• Version ii.10
  • The date/time values are now saved to the config file.
  • Added 'Save Settings' push for saving the settings without scan.
  • Fixed the edit way in date/time controls.
• Version 2.07
  • Added 'Run Equally Administrator' option (Ctrl+F11), which allows y'all to easily run RegScanner as administrator on Windows Vista/vii/eight/2008.
• Version 2.06
  • RegScanner now remembers the terminal position of the scan options window.
  • Fixed issues: RegScanner failed to remember the last size/position of the main window if it was not located in the primary monitor.
• Version ii.05
  • Fixed problems: RegScanner crashed when searching values using wildcard.
• Version two.04
  • Fixed to display date/time values according to daylight saving fourth dimension settings.
• Version 2.03
  • Added 'Clear Recent Files List' option to the 'Recent Config Files' card.
• Version ii.02
  • The find string is at present displayed in the title bar of the principal window.
• Version 2.01
  • When running RegScanner on Windows Vista/7/8/2008 without 'Run As Administrator', it now allows yous to employ the 'Open In RegEdit' characteristic (Elevation window will appear when using the 'Open In RegEdit' option).
• Version two.00
  • Added option to search Registry items by wildcards. (For example: *num* , abc????)
• Version one.96
  • RegScanner now remembers the last 20 find strings y'all used and allows you lot to easily choose them again from a philharmonic-box.
  • Stock-still the flickering occurred while scrolling the Registry items.
• Version 1.95
  • Fixed the export and delete features to work properly on the Registry of remote computer.
  • Stock-still issue: The backdrop and the other windows opened in the wrong monitor, on multi-monitors system.
• Version 1.90
  • Added 'Contempo Config Files' menu, which allows you lot to easily open up the concluding 10 configuration files that you used.
• Version one.85
  • Added pick to exclude one or more than keys from the Registry scanning. You can specify the Registry keys to exclude every bit comma-delimited list. By using this feature you can skip some major Registry keys (like HKLM\Software\Classes) to brand the search much faster.
• Version 1.83
  • The status bar at present displays the total data size of selected Registry items in KB/MB.
• Version ane.82
  • Added the 'Delete Selected Keys/Values' choice into the context menu, as well every bit this options is now disabled if there is no any selected Registry detail.
• Version 1.81
  • Stock-still problem: On Windows 7/Vista, RegScanner entered into a recursive scan of VirtualStore key , something like HKCR\VirtualStore\Machine\SOFTWARE\Classes\VirtualStore\Car\SOFTWARE\Classes\VirtualStore...
• Version 1.fourscore
  • Added 'Delete Selected Keys/Values' option. (Run into Beneath)
• Version 1.77
  • Fixed bug: When searching a fundamental in 'Verbal Match' style, RegScanner compared the search string with the total key path, and thus it never found the key.
• Version 1.76
  • Consign Selected Items - String values are at present exported as strings and DWord values are at present exported equally DWords. (In previous versions they exported as binary)
  • Fixed bug: When using 'Export Selected Items' more than in one case, the first key was missed.
• Version 1.75
  • New option: Prove institute items during the scan process
• Version 1.70
  • Added 2 regular expression options
• Version ane.65
  • Fixed problems in x64 version: RegScanner returned wrong search results.
• Version 1.64
  • Fixed bug: The main window lost the focus when the user switched to another application and so returned back to RegScanner.
• Version 1.63:
  • Added back up for saving equally comma-delimited file.
• Version ane.62:
  • Fixed bug: RegScanner displayed a crash window immediately subsequently running information technology.
• Version ane.61:
  • Fixed issues: RegScanner remained in memory if you airtight the chief window during the Registry scan.
• Version 1.60:
  • Fixed bug: opening HKLM in RegEdit failed if there was no '\' character.
  • New pick: 'Open up Clipboard Text In RegEdit' - Allows you to open RegEdit with the central that is currently in the clipboard.
  • New command-line pick: /clipregedit
• Version i.56:
  • Removed the text length limit from the 'Base of operations Key' combo-box
• Version 1.55:
  • Added 'Registry item contains any value' in the matching combo-box. This option replace the 'Load all keys...' option in the previous versions.
  • Added 'Add only keys' option - allows y'all to scan only the Registry keys (without values).
  • Added a separated download for x64.
• Version 1.51:
  • Fixed RegEdit open trouble with HKEY_USERS key.
• Version 1.l:
  • New choice: Support Reg: Links - Allows you to utilize reg: links for opening Registry keys in RegEdit. For instance: reg:HKLM\Software\Microsoft\Windows\CurrentVersion
  • New command-line pick: /regedit
  • New option: Create Delete .Reg File - Creates a .reg file that deletes all selected Registry values.
• Version i.twoscore:
  • New search pick: Registry particular contains the specified DWORD value.
  • New search option: Registry item contains the specfied binary value
  • New option: Scan a remote figurer.
  • New pick: Copy the selected key to the clipbard (Ctrl+K).
  • As opposed to previous versions that just scanned the HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER keys, now you can also choose to search under HKEY_CLASSES_ROOT, HKEY_USERS, and HKEY_CURRENT_CONFIG.
• Version 1.30:
  • New search option: search by value blazon.
  • New option: Save/load RegScanner configuration.
  • A tooltip is displayed when a cord in a column is longer than the column length.
  • The configuration of RegScanner utility is now saved into a file (regscanner.cfg - located in the same binder of the executable file) instead of saving it to the Registry.
    (If from some reason, you still want that RegScanner utility will relieve the configuration data into the Registry, run information technology with /usereg parameter)
• Version one.20:
  • New pick: Export selected items to a .reg file that you can use in RegEdit.
  • New column: Data Length.
  • New search selection: search by data length.
  • Dramatically reduced memory footprint during search. (Fixed bug from previous versions)
• Version 1.10:
  • New cavalcade: Key Modified Fourth dimension (Simply for Windows NT/2000/XP)
  • New search pick: by key modified time (Only for Windows NT/2000/XP)
  • New search option: Add together entry for each institute key (Only when y'all select to search by key proper noun)
  • New search selection: Search for Unicode strings in binary values.
  • Added back up for Windows XP visual styles.
• Version one.00: First Release.

License

This utility is released as freeware. You are immune to freely distribute this utility via floppy deejay, CD-ROM, Internet, or in any other way, equally long as you don't charge anything for this. If yous distribute this utility, you must include all files in the distribution package, without any modification !

Disclaimer

The software is provided "Every bit IS" without whatsoever warranty, either expressed or implied, including, simply not express to, the unsaid warranties of merchantability and fitness for a particular purpose. The author will not be liable for any special, incidental, consequential or indirect amercement due to loss of information or any other reason.

Using RegScanner

RegScanner is a standalone executable, and it doesn't require any installation procedure or boosted DLLs. In lodge to start using it, only run the executbale file - regscanner.exe

After running RegScanner, you should select the desired browse/search options, and click OK to start the browse.

Delete Selected Keys/Values

The delete feature was added in version 1.80 subsequently many requests from RegScanner users. This feature allows you to easily delete unwanted Registry keys and values that you lot institute in the search procedure. However, in order to subtract the chance of damage from accidental delete activity, this feature works as follows:

• Earlier any delete action, RegScanner will ask you lot if you want to delete, and the default answer is No.
• When you delete a value item, only the value is deleted, when you delete a key, the entire key is deleted.
• A central won't exist deleted if it has one or more subkeys.
• For every delete, the delete values/keys are added into a .bak file located in the folder of RegScanner.exe
  If RegScanner fails to create the .bak file, it won't delete the selected items.

Tips for using RegScanner

• If you want to view all Registry values under a specific fundamental, choose 'Registry item contains any value' in the matching combo-box, uncheck the 'Scan the post-obit base keys', and in the Base Fundamental combo-box blazon the desired key (For example: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer)
• If you want to view all Registry values that contains large corporeality of data, uncheck the 'Add entry for each institute key' choice, choose 'Registry item contains any value' in the matching combo-box, choose the 'Display only data with the post-obit lenth range', and type the data length range that y'all desire to find, for example: from 1000 bytes to 100000 bytes.
• If you desire to view the listing of all Registry keys that have been modified in the last few hours or days, bank check the 'Add together entry for each found fundamental' and 'Add only keys' options, choose 'Registry item contains any value' in the matching combo-box, choose the 'Brandish only keys that their modified time is inside the following range' choice, and then select the modified date/fourth dimension range that you want to view.

Searching DWORD/Binary values

Starting from version 1.xl, you tin can search DWORD/Binary values. In order to specify a DWORD value to search, you lot can type (In the Find string text-box) a decimal value (for example: 255) or an hexadecimal value (for case: 0xff).
In society to specify a binary value that yous want to search, type (In the Find string text-box) a sequence of hexadecimal bytes, with or without spaces between them.
For example:
013fc7a127cc4a
01 3f c7 a1 27 cc 4a

Searching the Registry in a remote computer

Starting from version i.40, you can search the Registry in a remote computer on your network. In order to practise that, y'all should login to the remote estimator with admin user. Besides, be aware that searching the Registry in a remote computer might be quite dull.

For more information about connecting to the Registry of a remote computer, read this:
How to connect a remote Windows 7/Vista/XP calculator with NirSoft utilities.

Using reg: Links

Starting from version v1.fifty, RegScanner allows yous to use reg: URL equally a link to the Registry central in RegEdit editor.
For Example: Clicking the link below volition open RegEdit with the specified Registry key:
reg:HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
Y'all tin also type the aforementioned reg: string in the accost bar of Net Explorer or in the Run dialog-box of Windows.

In order to enable/disable this feature, go to the File card of RegScanner utility, and choose the 'Support Reg: Links' option.
Exist aware that changing this option merely affects the electric current logged on user.

Using the /regedit and /clipregedit Command-Line Options

Starting from version ane.50, you can use RegScanner.exe utility to open the desired fundamental in RegEdit, past using the /regedit command-line option.
For example:
RegScanner.exe /regedit "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion"
Starting from version i.lx, you can also use the /clipregedit command-line option if yous want to open up a key that you copied into the clipboard.

Notice about transition furnishings

If y'all want that RegEdit will be opened as fast as possible with the correct Registry value, yous should disable the 'transition effects' on your organization. (On Windows 2000, go to the 'Brandish Properties' window, select the 'Effects' tab, and uncheck the 'Use transition effects...' option.

Command-Line Options

/cfg <Filename>	Start RegScanner with the specified config file.
/sreg <Filename>	Browse the Registry and consign the upshot into .reg file.
/stext <Filename>	Scan the Registry and export the result into a simple text file.
/stab <Filename>	Scan the Registry and export the result into a tab-delimited text file.
/scomma <Filename>	Browse the Registry and export the outcome into a comma-delimited text file (csv).
/stabular <Filename>	Scan the Registry and export the issue into a tabular text file.
/shtml <Filename>	Browse the Registry and export the consequence into HTML file (Horizontal).
/sverhtml <Filename>	Scan the Registry and export the outcome into HTML file (Vertical).
/sxml <Filename>	Browse the Registry and consign the consequence into XML file.
/RunAsAdmin	Run the RegScanner tool as Administrator (elevation)
/RunAsSystem	Run the RegScanner tool equally Organization user.

Translating RegScanner to other languages

In order to translate RegScanner to other language, follow the instructions below:

1. Run RegScanner with /savelangfile parameter:
   regscanner.exe /savelangfile
   A file named regscanner_lng.ini will be created in the folder of RegScanner utility.
2. Open the created language file in Notepad or in whatsoever other text editor.
3. Translate all cord entries to the desired language. Optionally, you can also add together your proper name and/or a link to your Web site. (TranslatorName and TranslatorURL values) If you add this data, information technology'll be used in the 'About' window.
4. After y'all finish the translation, Run RegScanner, and all translated strings volition exist loaded from the linguistic communication file.
   If y'all want to run RegScanner without the translation, simply rename the language file, or move it to another binder.

Feedback

If you have any problem, suggestion, comment, or yous institute a problems in my utility, you tin send a message to nirsofer@yahoo.com

RegScanner is too available in other languages. In guild to modify the language of RegScanner, download the appropriate language zip file, excerpt the 'regscanner_lng.ini', and put it in the aforementioned binder that you Installed RegScanner utility.

Language	Translated Past	Date	Version
Standard arabic	Abu Rehaam	xvi/05/2022	2.70
Standard arabic	Mohamed.Bajdouai	12/05/2015	RegScanner v2.10
Belarussian	Agnessa Petrova	26/02/2018	2.twenty
Brazilian Portuguese	Sergio Mota	08/03/2018
Brazilian Portuguese	Paulo Guzmán	18/09/2018	2.31
Croatian	Download.60 minutes	20/07/2016
Czech	Damned	04/12/2013
Danish	Jan Christensen	x/01/2009	ane.70
Dutch	Jan Verheijen	09/05/2022	ii.seventy
Finnish	XS Labs	eleven/01/2010
French	Pouemes	31/12/2020
French	papoo	15/09/2015	2.15
French	xb70walkyrie [v. 2.thirty]	xi/03/2018
Galician	Xosé Antón Vicente Rodríguez	25/12/2004
German	«Latino» auf WinTotal.de	10/xi/2021	2.65
German	SCORPiON	20/10/2007
Greek	George Georgiou	03/08/2008
Greek	Theodoros Stefanidhes	29/01/2009
Hebrew	Aron Don	27/08/2010	1.82
Hungarian	StormChild	23/01/2011
Italian	Styb	18/05/2022	2.lxx
Italian	Felix	30/04/2018	2.30
Japanese	youzeeen	xiii/09/2020	2.60
Japanese	maboroshin	26/06/2020	two.51
Korean	circlash	12/09/2013	2.01
Norwegian	Y Due south Landro (nynorsk@strilen.cyberspace)	06/01/2007
Western farsi	DinoTechno	13/05/2022	2.70
Polish	Hightower	12/05/2022	2.70
Portuguese	Rui Morais	06/01/2008
Portuguese Brazil	Mark Nascimento - Bambuí	23/05/2005
Romanian	Jaff (Oprea Nicolae)	17/06/2018	2.31
Russian	Dmitry Yerokhin	09/05/2022	2.lxx
Simplified Chinese	Kirk	10/05/2022
Simplified Chinese	Sam-Trip	01/04/2019	2.31
Simplified Chinese	DickMoore	13/05/2022	2.70
Slovak	František Fico	25/11/2021	2.65
Slovenian	Jadran Rudec	28/11/2005
Spanish	Ricardo A. Rivas	21/08/2020	2.60
Spanish	Paco Fdez.	12/06/2010	1.82
Spanish	Affections De Giorgi - Argentine republic	27/04/2014	2.04
Swedish	I.K.fifty	05/02/2018	ii.26
Taiwanese	Republic of Taiwan	07/03/2007
Traditional Chinese	Danfong Hsieh	14/05/2022
Thai	ประสิทธิ์ แคภูเขียว	25/03/2008
Turkish	HARUN ARI	10/05/2022	two.seventy
Ukrainian	vmsoft77	xvi/06/2014	2.04
Ukrainian	Lembergman, Baronial 2017	23/08/2017	2.2.0.0
Valencian	vjatv	03/07/2008

Source: https://www.nirsoft.net/utils/regscanner.html

Posted by: landermomp1940.blogspot.com

Share this post