De-Mystifying Windows Registry

De-Mystifying Windows Registry

Registry search and delete – программа для поиска в реестре остаточныхзаписей других программ (или любого контекста) с их последующим удалением.Если Вы пользовались командой RegEdit и знаете, что такое F3, то навернякаиспытывали неудобство из-за того, что во встроенном редакторе реестраневозможно сразу просмотреть, и, возможно, удалить, интересующие Вас записи.Если Вы же не знаете, где на клавиатура клавиша F3 и впервые слышите о реестре,но Вас не устраивает, что любимая программа “помнит”, что она уже устанавливаласьна данный компьютер, прошла испытательный срок и теперь отказывается работать,то Rsd решит эту проблему.

Системные требования:Windows XP, Vista, 7, 8.1, 10

Торрент Очистка следов удаленных программ – Registry search and delete 2.0 Portable подробно:Возможности программы:·Выбор поиска по нужным веткам реестра: (HKCR) (HKCU) (HKLM)·После окончания поиска и удалении нужных веток реестра, программа создает *.reg файл удаленных вами веток. В случае ошибочного удаления можно восстановить.·После поиска ветки реестра можно сохранить в текстовый файл.

От автора:Rsd – свободно распространяемая бесплатная программа. Она поставляетсяна условиях “As Is” (как есть), что означает, что автор не несет ответственностиза какие-либо физические и программные повреждения оборудования, потери данных,потери прибыли или любые другие виды потерь, связанные с использованием(правильным или неправильным) этой программы. Вы используете данный программныйпродукт на свой страх и риск.Автор приложил максимум таланта и усилий, чтобы программа не вызывала всеготого, о чем сказано выше, но и гарантию на все 100 %, что в процессе ееиспользования не обнаружатся ошибки, дать не может. При возникновении подобныхситуаций пишите.Всеми авторскими правами на Rsd обладает автор программы ГребенниковДмитрий Викторович (AloneWolf Software).

О Portable:Портативная версия предоставлена разработчиком, не требует установки.

Скриншоты Очистка следов удаленных программ – Registry search and delete 2.0 Portable торрент:

De-Mystifying Windows Registry

De-Mystifying Windows Registry

De-Mystifying Windows Registry

De-Mystifying Windows Registry

De-Mystifying Windows Registry

Торрент Registry Finder 2.54 + Portable подробно:Основные возможности:

* Всю необходимую информацию можно посмотреть на сайте автора программы.

Изменения в программе:История версий Registry Finder

Особенности портативной версии:• Портативные версии программы 32-и 64-бит от разработчика, работают без установки на компьютер.* Второй вариант – запустить установщик. Он содержит как 32-битные, так и 64-битные версии двоичных файлов. Необходимо выбрать “Portable installation” и указать папку для распаковки портативной версии.

De-Mystifying Windows Registry

Смена языка интерфейса программы:

Скриншоты Registry Finder 2.54 + Portable торрент:

De-Mystifying Windows Registry

De-Mystifying Windows Registry

De-Mystifying Windows Registry

De-Mystifying Windows Registry

Торрент Registry Finder 2.55 + Portable подробно:Основные возможности:

De-Mystifying Windows Registry

Скриншоты Registry Finder 2.55 + Portable торрент:

De-Mystifying Windows Registry

De-Mystifying Windows Registry

De-Mystifying Windows Registry

Registry Finder
для Windows

De-Mystifying Windows Registry

Поддерживается поиск скрытых ключей – это ключи с нулевым символом в имени. Такие ключи не могут быть созданы, удалены, изменены или просмотрены стандартными средствами Windows. В составе загружаемого архива, кроме самой утилиты Registry Finder, также находится инструмент NREG, с помощью которого можно создать и удалить скрытые ключей в демонстрационных целях.

Что нового в Registry Finder 2.49.0?

De-Mystifying Windows Registry

ТОП-сегодня раздела “Реестр, Автозагрузка”

Отзывы о программе Registry Finder

De-Mystifying Windows Registry

De-Mystifying Windows Registry

OfflineRegistryFinder – простой в использовании инструмент для Windows, который позволяет сканировать файлы реестра с внешнего диска и находить нужные ключи / значения / данные реестра в соответствии с заданными критериями поиска. В результатах поиска можно легко выбрать один или несколько элементов, а затем экспортировать их в файл .reg, который затем можно импортировать в встроенный редактор реестра Windows RegEdit.

Для использования программы необходимо создать снимок реестра, а затем отсканировать полученный снимок с помощью данной утилиты. OfflineRegistryFinder может использоваться для сканирования системного реестра, но при создании снимка реестра его сканирование будет работать намного быстрее, чем поиск в реестре запущенной системы.

Отзывы о программе OfflineRegistryFinder

Regedit lets you search using the Find feature in the Windows Registry. To access it, you have to click on Edit menu and select Find.

De-Mystifying Windows Registry

The Find box will let you search for items in the Windows Registry, and this includes Keys, Values, and Data. You can also set it to match whole strings only. Hitting the F3 key will take you to all the found searches, one after the other.

Free Registry finder software

De-Mystifying Windows Registry

RegScanner is a free registry finder and scanner software that allows you to scan the Registry, find the desired Registry values and display them in a single list. Double-clicking on the desired Registry item from the list will make you jump to that item instantly. The tool also lets you export the found Registry values into a .reg file.

RegScanner has a useful feature that lets you jump directly to an item from the path copied to your clipboard. If you have copied a registry path from say, a Notepad, then if open RegScnner and from the File menu select Open Clipboard Text In Regedit – or simply press F7, and it will open Regedit and directly navigate to the copied key.

Read: How to directly jump to any Registry key.

2] Registry Finder

De-Mystifying Windows Registry

Registry Finder is a portable tool to search the Windows registry. It too displays the results in a list, which you can edit items or jump to items in Regedit. It too lets you save the results to a .reg or a text file. Its Replace feature lets you easily replace a string with another.All operations that modify the registry including deletion and replacement can be undone and redone. The operations are listed in the Undo History window.

This tool also allows you to search for hidden registry keys, which are not otherwise accessible using Regedit. Hidden Registry Keys are those who have a null character in the name.

If you are looking for a full-fledged registry manage software, check out these freeware:

De-Mystifying Windows Registry

De-Mystifying Windows Registry

De-Mystifying Windows Registry

This list of tips to work with the Registry, I hope, will ease your discomfort some and make it a little bit easier to manage. But remember, if you are unsure, its best to stay away from it.

Create a desktop shortcut to open Windows Registry

Read: How to switch between HKLM and HKCU quickly in Registry Editor

Files with. reg extension

Downloaded a file with the extension .reg but you are unsure of what it may do? Right-click the file and select Edit or Open in Notepad and you will be able to see the location of the Registry key it will manipulate.

If you are unsure of what the .reg file is going to do, you can always copy the location and search online for it.

Backup before touching the Windows Registry

If you are working in Regedit, there are a number of things you can do easily, to avoid messing up with the Registry.

  • Before making changes to the Registry, it is always recommended to quickly create a System Restore Point first, as this will enable you to return to the previous state before you did changes.
  • If you would like to create a backup of a Registry key or Export the key for sharing with someone else, Right-Click the key and select Export, choose a name and add .reg as the format. You can also back up the Registry using freeware or ERUNTgui.

Read: Emojis are being used in the Windows Registry path; Did you know!?

Change, Add, Rename keys in Windows Registry

  • If you want to change settings to a Registry key, you can do so easily by Double-Clicking the value you wish to change and add the changes you wish.
  • Renaming Registry keys: You need only Right-Click the key or value and select rename.
  • To Add a key Right-Click the key you wish to add as a and select New Key, the same with values.

Read: Registry Editor not opening, crashing or stopped working.

Take ownership of Registry keys

  • Trusted Installer: Type in NT SERVICETrustedInstaller, click Check Names then click OK.
  • System: Type in System, click Check Names and then click OK.

Read: When do changes to the Registry get saved?

Add Registry keys to Favorites

One feature I like with Regedit is Favorites. As I tend to work a lot within the same areas in the Registry, adding the keys to Favorites helps to get to these keys quickly.

To add a Registry key to Favorites, simply select a key to go to the top menu and select FavoritesAdd to Favorites.

Once done you will see an entry under Favorites that you need only click when you wish to go to that Registry key.

De-Mystifying Windows Registry

Read: How to create a Registry Key in Windows.

Using Command Prompt to manipulate the Registry

  • : Adds a new or entry to the Registry.
  • Reg : Compares specified registry or entries.
  • Reg copy : Copies a to another .
  • Reg delete : Deletes a or entries from the Registry.
  • Reg export : Creates a copy of specified , entries, and values into a file in REG (text) format.
  • Reg import : Merges a REG file containing exported Registry , entries, and values into the Registry.
  • Reg load : Writes saved and entries in hive format back to a different .
  • Reg query : Displays the data in a or a value.
  • Reg restore : Writes saved and entries in hive format back to the Registry.
  • Reg : Saves a copy of specified , entries, and values of the Registry in hive (binary) format.
  • Reg : Removes a section of the Registry that was loaded using reg load.
Больше проверок:  Как пройти проверку росприроднадзора

Example: Reg query HKLMSoftware will list all the

In a Command Prompt if you type in Reg /? It will list the available commands.

De-Mystifying Windows Registry

De-Mystifying Windows Registry

The Windows registry was introduced to tidy up the profusion of per-program INI files that had previously been used to store configuration settings for Windows programs. These files tended to be scattered all over the system, which made them difficult to track.

De-Mystifying Windows Registry

  • HKEY_CLASSES_ROOT
  • HKEY_LOCAL_MACHINE
  • HKEY_CURRENT_CONFIG.

Root Keys contain SubKeys. Subkeys may contain of their own too and contain at least one value, called as its Default Value. A key with all its and values is called as a Hive.

De-Mystifying Windows Registry

The Registry uses the following data types

  • REG_SZ : The SZ indicates a zero-terminated string. This is a variable-length string that can contain Unicode as well as ANSI characters.
  • REG_BINARY : It contains binary data. 0’s & 1’s.
  • REG_DWORD : This data type is a Double Word. It is a 32-bit numeric value and can hold any number from 0 to 232.
  • REG_QWORD : This data type is a Quadruple Word. It is a 64-bit numeric value.
  • REG_MULTI_SZ : This data type contains a group of zero-terminated strings assigned to a single value.
  • REG_EXPAND_SZ : This data type is a zero-terminated string containing an unexpanded reference to an environment variable, like say, %SystemRoot%.

Registry Virtualization in Windows

In Windows Vista and later, the UAC utilizes the Registry Virtualization Feature, to redirect attempts to write to of

This is done discreetly. No one gets to know that this is happening!

This is, in short, Registry Virtualization, and it is a useful Security feature.

Incidentally, mention must also be made of another new technology underlying Windows Vista and later: The Kernel Transaction Manager, which enables the Transactional Registry. This feature enables a sort of a Registry rollback. But it’s not implemented in Registry Editor. Instead, this feature is designed for use by developers who need to create robust applications using transactional processing.

The primary tool in Windows 10/8/7/Vista for working directly with the registry is Registry Editor. To access it, simply type in Vista’s Start Menu Search Bar and hit Enter!

You have to be doubly careful when working with the Registry, as there is no confirmation prompt or a click OK to save prompt. Changes made are directly incorporated.

Mention must specifically be made of the

hive, as the keys in this particular location, are so essential for Windows to start, that its backup is maintained, which you can restore when necessary, simply by booting in Safe Mode and selecting Last Known Good Configuration in earlier Windows versions.

Because the Windows registry is a hierarchy, the way regedit is laid out makes typical searches inefficient and slow.

Typically, when performing a search in regedit, you highlight the first line (‘Computer’) and then perform the search. But since some of the branches shown are really subbranches, certain large sections of the registry are searched more than once when this common strategy is used.

Thus, this typical method is not efficient due to some branches of the registry being searched more than one time.

Given that the standard technique is inefficient, what is a simple and fast strategy to fully search the registry, preferably using regedit?

asked Oct 26, 2014 at 3:36

De-Mystifying Windows Registry

I would recommend the little and powerful tool RegScanner by Nirsoft.

De-Mystifying Windows Registry

3 gold badges9 silver badges25 bronze badges

answered Feb 14, 2017 at 8:49

1 gold badge5 silver badges19 bronze badges

Faster, and dumps all results so you can go through the whole list without hitting next a hundred times. Also free since it is a powershell script:

Search-Registry.ps1 improves on regedit’s Find feature in four ways:

  • The script searches by using regular expressions.
  • It can search the registry on remote computers.
  • It can limit the number of returned search results.
  • It outputs objects than can be filtered, sorted, exported to comma-separated value (CSV) files, and so on.

5 gold badges24 silver badges34 bronze badges

answered Nov 2, 2014 at 1:55

12 silver badges23 bronze badges

answered Mar 26, 2016 at 5:10

1 silver badge3 bronze badges

Summary

De-Mystifying Windows Registry

I use Registry Finder to search the Windows registry.

Disclaimer

This answer is relevant for September 2019. In the future, its data may be outdated.

Features

  • Fully free
  • Powerful
  • Works for Windows XP and above

Speed

From official documentation:

The Find operation is efficient and quick. All found items are displayed in a separate window as a list. Each line represents a single match with the search criteria. The icon shows where the match occurred: key name, value name or value data. Matched text is highlighted with red.

For example, I tried to search keys, values and data uTorrent in entire registry.

De-Mystifying Windows Registry

Time — 37.4 seconds for ~500000 registry keys. That’s speed enough for me.

Additional links

answered Sep 27, 2019 at 14:09

De-Mystifying Windows Registry

13 silver badges29 bronze badges

There is a Software called RegEditX which is pretty fast: http://www.dcsoft.com/products/regeditx/

If you want a free Version search for the old v2.0, but 9.95$ isn’t very much.

answered Nov 2, 2014 at 1:30

De-Mystifying Windows Registry

Is there a tool or method with which I can search the windows registry with regular expressions?

27 gold badges336 silver badges346 bronze badges

asked Nov 4, 2009 at 18:01

De-Mystifying Windows Registry

7 gold badges32 silver badges43 bronze badges

The free RegAlyzer utility searches by substring, wildcard (*,?), boolean (AND OR NOT), and regular expression:

RegAlyzer is a tool to browse and
change the registry. It was created
because of a few features we missed in
the original regedit tool, from
support for exotic value types over
background and regular expression
search to better bookmarks, displaying
.reg files in the accustomed style and
a history view.

De-Mystifying Windows Registry

answered Nov 4, 2009 at 18:16

De-Mystifying Windows Registry

You can use PowerShell with -match:

answered Nov 4, 2009 at 18:10

To export the whole registry, right-click the Computer node in Registry Editor and select Export.

Watch out, the exported file can be huge. I just tried and the file was 250 MB big.

Encoding update: On WinXP, cygwin’s file utility reports the exported data as Unicode text, UTF-16, little-endian.

14 gold badges104 silver badges130 bronze badges

answered Nov 4, 2009 at 18:04

7 gold badges85 silver badges95 bronze badges

You can use Cygwin.

Open Cygwin terminal and use those commands:

cd /proc/registry32/HKEY_LOCAL_MACHINE
find . -name “*something*”

answered Jun 25, 2015 at 13:22

2 silver badges6 bronze badges

Even reg.exe does not seem to support it, but it might help getting a list to process with other command line tools. See reg.exe query.

answered Nov 4, 2009 at 18:12

De-Mystifying Windows Registry

14 gold badges74 silver badges112 bronze badges

I use a tool named Regscanner by Nirsoft. It can search registry (with or without Regex) and returns results, you can click matches to open it in Regedit.

answered Sep 17, 2020 at 2:47

De-Mystifying Windows Registry

2 gold badges15 silver badges32 bronze badges

Download

The latest version of Registry Finder is 2.55 (November 06, 2022).
What’s new

Installer – both 32-bit and 64-bit SHA-256: 204a201125e26b1992129c53e81aeca07e8b19012b6e0fc8bee5abb770dcc808. Check it on VirusTotal

Archive 32-bit SHA-256: 56ebfc80eb32f5893b83df427606d5a9e70867271ad05438007bdd1f27ace455. Check it on VirusTotal

Archive 64-bit SHA-256: 9a78872df4ab484878d5e96ccf4288b492a251e7d0f77165bcb71d3625aebb74. Check it on VirusTotal

If you are unsure of what archive to use for portable mode, I recommend to select one that matches architecture of your Windows. Installer does that automatically.

Note. To check SHA256 of a file, in the command prompt type

Больше проверок:  Общие правила проведения выездных налоговых проверок

and compare the output with the SHA256 above.

Description

Registry Finder is an improved replacement for the built-in Windows registry editor. It has many features that makes working with registry more productive, comfortable and safe, including:

  • Cut/Copy/Paste keys and/or values.
  • Undo and redo registry modifications (except changing permissions).
  • Multiple local and remote registry windows.
  • Whole search results are displayed in a list.
  • Multiple search results window.
  • Ability to search within previous search results narrowing down your search scope.
  • Ability to search for hidden keys.

Registry Finder allows you to browse the local registry; create, delete, rename keys and values; modify values as its natural data type (string, multistring, DWORD) or as a binary data. It is allowed to open multiple Registry windows. Next time you start Registry Finder, those windows will be reopened on the same keys as before.

The Find operation is efficient and quick. All found items are displayed in a separate window as a list. Each line represents a single match with the search criteria. The icon shows where the match occurred: key name, value name or value data. Matched text is highlighted with red.
You can jump to any found item in the Registry window or edit/delete items right in the Find Results window.
Items in the Find Results window can be saved to file in .reg or .txt format. In latter case, items are separated by tabulator. It allows easy data importing and analyzing in other programs, such as Microsoft Excel.

With the Replace feature you can easily replace all or particular occurrences of one string with another. The replacement is performed only in items that are in the Find Results window. In the Replace dialog you specify either all items or just selected ones. After replacement is done, items in the window are updated. If some item do not match the search criteria any more it still remains in the list.

Full name of the key can be copied to clipboard.

Screenshots

De-Mystifying Windows Registry

Installation

Registry Finder can be used without installation. Just download archive with binaries, unpack it into any folder on HDD or USB drive and start the executable. The utility does not store any of its data in the registry. It stores settings in the RegistryFinder.config file located in the same folder as the executable.

Another option is to download and run the installer. It contains both 32-bit and 64-bit versions of binaries, so you do not need to choose. The installer can deploy Registry Finder either in Normal mode or in Portable mode. The later just unpacks binaries into the folder you specify. The Normal mode performs standard things – unpack binaries, create shortcut in the Start Menu, create a desktop icon and make uninstallation entry in the Control Panel. One little difference is that in Normal mode the config file is stored in another place. Specifically, in the %APPDATA%RegistryFinder folder.

Dark theme

De-Mystifying Windows Registry

Make sure Registry Finder is not running and change the entry to

I could not make some UI elements to be dark (some due to technical issues, some due to I was too focused on the main window and did not noticed them on time). This include the status bar in the main window, drop-down list in all combo boxes, data controls in the Find dialog, the main control in the Modify Binary dialog, tabs in the Properties dialog, the links list in the Edit Favorite dialog.
The grayscale icons that Registry Finder uses by default are not good with the dark theme. I recommend to use custom toolbar icons.
If you notice other incompleteness or issues, don’t hesitate to contact me.

Windows Explorer Integration

To facilitate importing .reg files with Registry Finder you can add a command to Windows Explorer’s context menu for .reg files.

De-Mystifying Windows Registry

To do so, just execute the file. To remove the command, execute the ContextMenu-Remove.bat file.

Also, you can make Registry Finder, instead of regedit, to perform import when you double-click a .reg file: execute RegFileAssoc-Add.bat. RegFileAssoc-Remove.bat restores import with regedit.

reg add “HKLMSoftwareMicrosoftWindows NTCurrentVersionImage File Execution Options
egedit.exe” /v “Debugger” /t REG_SZ /d “”REGISTRY_FINDER_DIRRegistryFinder.exe” -z” /f

If you replaced regedit and want to launch regedit, not Registry Finder, you can do it with the –regedit command line argument:

Running from Write-protected Media

In some use cases the folder where Registry Finder stores its settings and undo history is not accessible for write. The most evident is running from a write-protected USB stick.

In that case, Registry Finder is fully functional except that the undo history and application settings are not saved (so called No-Save mode). On startup, appropriate message is shown and the status bar contains a yellow triangle sign.

Offline Registry

Registry Finder is able to treat set of registry hive files as a separate standalone registry. This feature saves you from tedious procedure of loading and unloading hive files separately. It allows you to, say, easily examine a backup of the registry or modify registry of unbootable Windows when running Registry Finder from bootable USB drive.

The usage is simple: you specify a folder with registry hive files. Registry Finder loads particular files from that folder as hives and gives you familiar interface to work with much as it were live registry: you can browse, create keys and values, import, export, search and so on.

Because of limitations of API, this feature is not available on Windows XP.

Command Line

Registry Finder has a number of command line parameters you can use to customize its behavior.

Note 1. The parameter names are case insensitive.

Note 2. There are additional parameters (displayed with –help) but they are left undocumented since they are experimental and may not work as expected.

Keyboard shortcuts

Changes take effect on the next search, restart of Registry Finder is not required.

Regular Expressions

A regular expression (or regex, or regexp) is a way to specify a search pattern. This is a very powerful tool that allows you to set complex search criteria so,
that the results, on the one hand, contain the required information and, on the other, that there are minimal results that do not contain the required information.

Because of the variety of constructions of regular expressions I do not try to describe even the most basic ones here. Instead, I recommend finding relevant information on the Internet.
For example, an excellent starting point to learn regular expressions is regular-expressions.info.
Another useful resource is regex101.com which is a tool for testing regular expressions.

To search for regular expressions, you have to enable the “Use regular expressions” option in the Find dialog.

Registry Finder uses the Boost.Regex library.
It utilizes the Perl regular expression syntax. See the documentation is you need details.

Hidden Keys

Registry Finder supports searching so called hidden registry keys. These are the keys with the null character in the name. Such keys cannot be created, deleted, modified or viewed by standard Windows API,
so they are not accessible by regedit and most other registry editors.

To quickly evaluate this feature, you can use the “Search only hidden keys” checkbox in the Find dialog.

De-Mystifying Windows Registry

In the results list the null character is displayed as the bullet sign:

De-Mystifying Windows Registry

The downloaded archive contains the NReg utility that you can use to create and delete hidden keys for demonstration purposes. Type NReg -h to see the usage information.

Translations of Registry Finder

Available translations are listed here.

Translating Registry Finder into another language

  • Start MakeLang.exe with the -i parameter:

    That creates RegistryFinder_lang.ini file containing all strings used in Registry Finder UI.

  • Start Registry Finder. It automatically invokes MakeLang with the -d parameter to create the RegistryFinder_lang.dll file containing all translated resources in binary form.
    If you want to run Registry Finder without the translation, rename the language ini and dll files, or move it to another folder.

Here you can find some clarifications to certain lines in the language file.

  • An icon set from Martin
  • An icon set from SirTazofMania
  • An icon set from Joe P. – rework of SirTazofMania’s icons in Windows 11 style
  • An icon set from Spitfire XIV
  • An icon set from Marcio de Andrade
  • An icon set from Frédéric Bellec
  • An icon set from amshevch

To install a custom icon set, just download an archive and unpack it to the “res” folder located in

  • For portable mode, the program’s folder.
  • For normal installation mode, %APPDATA%RegistryFinder.

(The folder does not exist by default. You should create it yourself.)

For details on how to create custom toolbar icons, see here.

Crash Reports

When Registry Finder encounters an unexpected error it generates crash report and asks you to send it to the developer.

De-Mystifying Windows Registry

This report contains information essential to investigate and fix the problem. So please prefer pressing the Send report button.
If you encounter crash multiple times, do not hesitate to send report two or three times – it is possible,
the latter contain slightly different information not available in the former. Press the Close the program button when you believe you already reported the same problem several times.

Please note that due to lack of time, I analyze reports from the latest version only.

System requirements

Windows XP, Vista, 7, 8, 8.1, 10 32-bit and 64-bit versions.

License

In brief, this utility is released as freeware. You are allowed to freely distribute this utility via removable media, Internet, or in any other way,
as long as you don’t charge anything for this. For details, please see License Agreement.

The software is provided “AS IS” without any warranty, either expressed or implied, including, but not limited to, the implied warranties of
merchantability and fitness for a particular purpose. The author will not be liable for any special, incidental, consequential or indirect damages
due to loss of data or any other reason.

Feedback

Registry Finder will be developed further, so your feedback is greatly appreciated!

If used carefully, the Windows Registry can be a potent tool for making changes to Windows on your computer. But it isn’t the easiest thing to navigate, and finding individual entries in the Registry Editor can be confusing.

Thankfully, there is a much easier and more powerful way to search the Windows Registry.

What Is the Windows Registry?

The Windows Registry is a database of settings and configurations for many parts of the Windows operating system. It was introduced in Windows 3.1 and has been a part of the OS ever since.

When a new program is installed, a new entry called a Key is added to the Registry. Inside the Key are Values, a bit like files in a folder. Values can contain the location of the program, its version number, settings configuration, and much more information.

It is not advisable to make changes to the Registry if you are not confident about what you are doing. An incorrect change to a vital key or value could cause your computer to crash or even stop working altogether. More likely, it would break the software the value is associated with.

Download and Set Up RegScanner

One of the biggest headaches when working in the Registry is finding the keys and values you want to edit. You can use the Find function, but it doesn’t always work if you don’t know the exact value name.

RegScanner is a small, lightweight utility that lets you search for keys and values using several variables. You can search by value type, such as DWORD or SZ, or even by the date the value was modified. You can download RegScanner from the NirSoft website. There are a couple of different versions available, including an x64 version.

Download the version you want, and unzip the compressed folder. RegScanner is a portable utility. It doesn’t need to be installed before you can use it. Just double-click the RegScanner executable file to get started.

RegScanner will open with the scan options pane open. This can seem confusing initially, but it’s not as hard to use as it first looks.

Searching Windows Registry With RegScanner

Searching by the exact name of the value is the easiest way to find Registry entries. When searching for a value name, results should typically only contain a single item.

  • Open RegScanner and click the New Scan button if the scan options pane doesn’t automatically open.
  • In the Find String field, type the name of the value you want to find. For example, “StuckRects3”.
  • Change the Matching field to Exact Match or Registry item contains one or more words.
  • If you aren’t sure if it is the name of a value or a key, leave all options in the Look At field selected.
  • Near the bottom of the scan options, choose the base key (HKEY_LOCAL_MACHINE, etc.) where you think the value is located. If you aren’t sure, you can select all of them.

You can easily search by other data types, such as a DWORD value, or even by a complete string. Just change the Matching field to the data type you are using.

Search by Date Modified

If you know when a value or key was last modified, perhaps when you installed some software, you can refine your search by date.

  • In the scan options, enter your search term if you have one. If not, and you just want to search all values modified in a date range, leave it blank.
  • There are two time modifiers to choose from in the time filter field: Show only in the last and Show only within the specified range.
  • Choose the time filter that suits your needs, and set the time range or date range as needed. Then click the Scan button.

Be aware that even if looking for keys or values modified in the last few minutes, there could still be hundreds of results, especially if you have been using your computer during that time. Even a small amount of information entered into the Find field will reduce the number of results.

Exporting Registry Values as REG Files

  • In RegScanner, search for and find the value you want to export as a REG file.
  • Choose the export location and enter a file name that you will remember.

You can also save keys and values as a text file. However, this is just a record or to view the data it includes—you can’t use the text file in the same way as the REG file.

There is a limited search tool built into the Registry Editor. It only allows you to search by value, data, or key name. It also doesn’t return a list of results like RegScanner. If it doesn’t find the exact value you enter, it will return nothing.

  • Select Find from the menu and enter the search term in the field.
  • You can select from keys, values, and data or search all three.

If several values have the same name, you can press F3 to find the next one if the first result is not the one you need.

A Better Way to Search Windows Registry

As long as you are careful and understand the changes you make, the Windows Registry can be a powerful tool. You can use it to make changes to apps and features in Windows that might not be available in the standard settings. Finding keys and values isn’t always very easy, but by using RegScanner, searching the Registry is much less frustrating.