About the binary value


  1. yxq
    Posts : 57
    Vista and Windows 7
       New #1

    About the binary value


    In Windows 7 Registry, "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\Count", there are 72 binary bytes value, but only there are 16 binary bytes value in XP, and i known the last 8 bytes mean the date that the shortcut clicked. I have researched the 72 bytes in Windows 7, seem 61 - 68 byte save the shortcut clicked date, but i can not convert the bytes to right date.
      My Computer
    Quote Quote

  3. Bill2
    Posts : 5,056
    Windows 7 x64 pro/ Windows 7 x86 Pro/ XP SP3 x86
       New #2

    Hello,

    Theres an analysis of win7 Userassist registry keys by Didier Stevens in his forensic magazine. Heres a link to that issue.

    http://go2.wordpress.com/?id=725X134...s-issue-0x0%2F

    Stevens has also released a tool that can analyze the structure of these keys for you (its a beta. Google for the final version).

    http://didierstevens.com/files/softw...aunchParty.zip
      My Computer
    Quote Quote

  4. TimStitt
    Posts : 1,020
    Windows 7 Ultimate 64 bit
       New #3

    Hi yxq,

    I was reading about user assist yesterday. There is a new key format for Vista, Server 2008, Win7 etc. The second article goes into this in detail.

    Enjoy

    http://documents.sirlopu.com/documents/carvey.pdf
    http://intotheboxes.files.wordpress....es_2010_q1.pdf

    @Bill2 - Thanks, I'll take a look at your articles too.
      My Computer
    Quote Quote

  6. yxq
    Posts : 57
    Vista and Windows 7
    Thread Starter
       New #4

    Thank you, i will research that.
      My Computer
    Quote Quote

 

  Related Discussions
I have win7 64 bit and use a currency trading platform that relies on Java. I have been running it quite happily for several months but now find that the platform freezes when I ask it to work a little harder. I have to close it via Task Manager and that is when I get the warning that Java is not...
Assignment help on Binary
in General Discussion

I really have to finish my computer assignment and I am confused at few questions. 1) Say Computer A has a 1GHz processor and 16-but word size. Computer B has a 2GHz processor and 32-bit word size. Compare the processing speeds of these computers quantitatively. Show calculations. 2)...
binary files?
in Software

are all of softwares binary fiels?
High CPU usage java se binary
in Performance & Maintenance

Really need some help here guys if you can. Ok i will start with the fact that there is a software that i use which uses java. It's been running fine until today. whenever i open the application i get a warning come up on the bottom right hand of the screen saying that java se binary is using a cpu...
I might have missed this in an earlier post, If I did, I apologise for reposting. The gist of this article, written in May 2008, was that unlike Vista, Winows 7 will not have a "compatabilty" mode. Rather, older programs will run in a virtualized environment Read more here:- ...
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 02:22.
Find Us