2

I messed up the Windows registry. I should be able to restore it to a previous state because Windows keeps a backup in C:\Windows\System32\Config I think. There used to be a tool called Windows Registry Checker Tool (scanreg.exe) that would allow you to not only restore to a previous Windows registry state but also to take backup of the current one, by using one of the two commands below.

scanreg /restore

scanreg /backup

But I am using Windows Vista, and apparently they have removed this from Vista and newer versions of Windows. So how do I do something like this in Windows Vista? Is there an alternative to scanreg.exe? Is there another way to backup and restore Windows registry?

3
  • Please correct me if I'm wrong but it seems that backups of the registry were stored in C:\Windows\System32\Config in old Windows 9x versions. As of Windows XP/Vista it should be stored in C:\System Volume Information as part of the System Restore.
    – Samir
    Jun 19, 2013 at 15:38
  • Does windows boot at all?
    – cybernard
    Jun 19, 2013 at 17:09
  • @cybernard Yes, it boots now and it booted then. It belongs to the past now. It was just that some of the services were messed up, mainly the Windows Audio and the Audio Endpoint Builder which refused to start and I could not use sfc /scannow due to a repair pending error. But I have sorted it out by performing a repair install. It took 5 hours to complete but it works now.
    – Samir
    Jun 19, 2013 at 17:15

2 Answers 2

2

There is a way to restore the registry if System Restore is enabled.

If you can boot into Windows you can use System Restore to restore the registry by restoring the system to a restore point before the incident.

If you cannot boot into Windows, you can try booting into Windows safe mode. You can use System Restore from safe mode as well.

If you cannot boot into Windows normal mode nor into safe mode, you can try performing a startup repair, and at the same time restore the system to a restore point before the incident by using WinPE/WinRE.

  1. Boot from the Windows installation media (DVD).
  2. Select Language to install, Time and currency format, and Keyboard or input method.
  3. Click Next.
  4. Click Repair your computer.
  5. If the System Recovery Options dialog shows up, allow it to scan for Windows installations and follow the instructions shown on screen. It should give you the option to restore the system from a restore point.
  6. If you are not prompted to restore from a restore point, or if no startup errors are found you should see the main System Recovery Options screen.
  7. Click on System Restore and follow the instructions to restore from a restore point before the incident.

If you want to restore only the Windows registry you will have to do it manually. System Restore stores its Restore Points (RP) in a folder called _Restore{#} where # represents a Hex number. It is located in C:\System Volume Information. You will have to take ownership of this folder and all of its subfolders. Each restore point has its own folder of the format RP### where the ### stands for a 3-digit number.

After taking ownership of the C:\System Volume Information folder and its subfolders, locate the RP folder that goes back to a date before the incident.

For example, to restore Windows registry from restore point 100, issue following commands in a command prompt.

cd c:\system volume information\_restore{#}\rp100\snapshot
copy _REGISTRY_MACHINE_COMPONENTS c:\windows\system32\config\COMPONENTS
copy _REGISTRY_MACHINE_SECURITY c:\windows\system32\config\SECURITY
copy _REGISTRY_MACHINE_SYSTEM c:\windows\system32\config\SYSTEM
copy _REGISTRY_MACHINE_SOFTWARE c:\windows\system32\config\SOFTWARE

You don't have to copy them all unless you need to or you want to.

Reboot and the registry should be restored.

9
  • I can see how this could be helpful. It doesn't quite answer the question but this is very good stuff. Thanks for sharing!
    – Samir
    Jun 18, 2013 at 10:10
  • 1
    @Sammy "restore to a previous Windows registry state" Since scanreg is gone this is the next best alternative. Create a new restore point and a new registry backup is taken. You can access the hidden folders above to get at all the backup registries.
    – cybernard
    Jun 19, 2013 at 14:48
  • Unfortunately System Restore was disabled before the incident. So I didn't have the option to restore the registry that way. Or to try to restore to the previous restore point. But I didn't see the path C\Windows\System32\Config when I booted from Windows DVD and opened Command Prompt and tried to cd to this location. Is this normal?
    – Samir
    Jun 19, 2013 at 15:19
  • The LiveCD is mount to X: c:\windows\system32\config is the real registry
    – cybernard
    Jun 19, 2013 at 17:04
  • So the installed Windows system is offline when I'm in Command Prompt in WinRE? But when I do c: and then cd windows\system32\config it says not found. Is it because it is hidden?... Should I use attrib -s -h to show it?
    – Samir
    Jun 19, 2013 at 17:21
1

There is no such thing. If you messed up the registry, do the repair installation (look at your other question about installing Vista over Vista).

  1. Boot into Windows
  2. insert the Windows DVD
  3. run setup.exe from DVD
  4. in setup select "Upgrade".
2
  • Quite right! Thank you! As you have noticed, I have posted several questions lately regarding different Windows system tools, as part of my efforts to resolve the issue with the audio service. I didn't want to make one gigantic post/question. I think splitting it up like this makes it easier for others who have the same issue to find the questions and answers. The chances are also greater that someone will answer if the question is short and concise. I kept posting questions as I encountered new errors while troubleshooting. But you are right, doing a repair installation solved the issue.
    – Samir
    Jun 18, 2013 at 10:18
  • ok, great to hear this :) Jun 18, 2013 at 19:02

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .