New
#61
Boot into windows recovery environment (tap F8 on boot, or from win7 install dvd "repair your computer")
Enter "command prompt"
Look at the size of the volumes. Now you know the drive letter of win7 OS (not necessary C!)Code:diskpart list volume exit
Now post camshot. Be sure all commands succeeded succesfully! If camshot is fine...reboot from harddiskCode:c: (replace drive letter with actual drive letter of win7 partition!!) cd \windows\system32\config (now you are in registry files folder) (you must save current registry files) copy default default.bak copy sam sam.bak copy security security.bak copy software software.bak copy system system.bak xcopy c:\windows\system32\config\regback c:\windows\system32\config (you copied files from regback to config)
----------------------------
Now regback files are copied to config (so made live).
old versions are .bak files. You can copy the 5 files back (in case system doesn't boot), for example:
---------------Code:c: (replace drive letter with actual drive letter of win7 partition!!) cd \windows\system32\config copy default.bak default copy sam.bak sam etc
Do you understand?
This is the partitions.screen sry for quality
thank you so much for your patience,
i'm replying from my laptop pc with internet connection!
in screenshot
copy default default.bak=>probably scrolled of screen
copy sam sam.bak
copy security security.bak=>you forgot it?
copy software software.bak
copy system system.bak
It works so who cares!
In elevated command prompt:
Is windows update still working and enabled? check for updates pleaseCode:c: cd \windows\system32\config dir *.bak (do you see the 5 files you made a copy?) del *.bak
Is system restore enabled now?
In registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\hivelist you see where the real registry files are
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\hivelist]
"\\REGISTRY\\MACHINE\\HARDWARE"="" =>irrelevant. Will be built dynamic
"\\REGISTRY\\MACHINE\\BCD00000000"="\\Device\\HarddiskVolume1\\Boot\\BCD" =>just the bootmenu
"\\REGISTRY\\MACHINE\\SOFTWARE"="\\Device\\HarddiskVolume1\\Windows\\System32\\config\\software"
"\\REGISTRY\\MACHINE\\SYSTEM"="\\Device\\HarddiskVolume1\\Windows\\System32\\config\\system"
"\\REGISTRY\\USER\\.DEFAULT"="\\Device\\HarddiskVolume1\\Windows\\System32\\config\\default"
"\\REGISTRY\\MACHINE\\SECURITY"="\\Device\\HarddiskVolume1\\Windows\\System32\\config\\security"
"\\REGISTRY\\MACHINE\\SAM"="\\Device\\HarddiskVolume1\\Windows\\System32\\config\\sam"
system user and normal user stuff.
"\\REGISTRY\\USER\\S-1-5-20"="\\Device\\HarddiskVolume1\\Windows\\ServiceProfiles\\NetworkService\\ntuser.dat"
"\\REGISTRY\\USER\\S-1-5-19"="\\Device\\HarddiskVolume1\\Windows\\ServiceProfiles\\LocalService\\ntuser.dat"
"\\Registry\\User\\S-1-5-21-3156605357-3623761463-3254633244-1001"="\\Device\\HarddiskVolume1\\Users\\Ron\\ntuser.dat"
"\\Registry\\User\\S-1-5-21-3156605357-3623761463-3254633244-1001_Classes"="\\Device\\HarddiskVolume1\\Users\\Ron\\AppData\\Local\\Microsoft\\Windows\\UsrClass.d at"
Do you see the 5 important files? Each week those 5 files are copied to subfolder regback. So you can always go (at most) 7 days back in time. Of couse longer if system doesn't boot anymore so new registry backup files aren't created. Never put only 1 file back!