How to Edit and Modify Windows Registry OFFLINE – wintips.org

If your system is no longer bootable due to a virus attack or other reasons (for example, after changing the SATA controller mode in the BIOS or motherboard), go offline to make the appropriate changes in the Windows registry. you need to use registry editor. Boot Windows normally. This article provides detailed instructions on how to load and edit the Windows registry without booting into Windows (Unbootable Windows System).

How to modify the Windows registry OFFLINE

To modify the registry offline, you need an OFFLINE registry editor. I prefer to use two offline registry editors for this task. One can be found in the Windows recovery media on any Windows 7 or Windows Vista installation DVD, and the other can be found on Hiren’s boot disk. So let’s begin.

Method 1: Modify the registry OFFLINE using the Windows installation DVD.

1. Insert the Windows installation DVD into your CD/DVD drive and boot your computer from the Windows installation DVD.

Note: To boot from a DVD, you must set the CD/DVD drive as the first boot device in the BIOS settings. For this:

  1. Enabled click on your computer and “DEL“or”F1“or”F2“or”F10” enter BIOS (CMOS) installation utility.
    (The method of accessing the BIOS settings depends on the computer manufacturer).
  2. In the BIOS menu “Download procedure“adjustment.
    (This setting is usually “located inAdvanced BIOS features” menu).
  3. At”Download procedure” setting, install the CD/DVDRW device first boot device.
  4. Save and Exit From the BIOS settings.

2. Click on the first screen The next one.

image

3. On the next screen, selectRepair your computer“.

image

4. Yes System Restore Options (Screen 1) Click next.

image

5. Yes Select the recovery tool screen, select Command line.

image

6. Type “” in the command window.regedit” (without quotes) and press Enter.

image

In the registry editor:

7. highlight the HKEY_LOCAL_MACHINE the key.

edit registry offline

8. From whom File select menu Download Hive to load the offline registry file you need.

HKEY_LOCAL_MACHINE \SAM > %windir%\system32\config\SAM
HKEY_LOCAL_MACHINE \SYSTEM > %windir%/system32/config/system
[HKEY_LOCAL_MACHINE \SOFTWARE > %windir%/system32/config/software
HKEY_USERS \.Default] > %windir%/system32/config/default
HKEY_CURRENT_USER > %userprofile%/ntuser.dat

image

For example, if you want to change the database of the SYSTEM registry, go to the drive where Windows is installed (usually on the “C:” drive) and open the system file found in “%”.Windir%\system32\config“directory. (eg,”C:\Windows\system32\config\system”)

image

9. Then enter a key name for the offline registry database (for example, “Offline“) and press OK.

image

10. Now under HKEY_LOCAL_MACHINE key, you should have a new key named with the name you typed earlier (eg ‘offline” in this example).

image

11. Now make all the necessary changes under this key. After finishing the changes, specify the key that you created earlier (for example, “Offlinebutton) and select from the File menu Download Hive to overwrite the changes made to the offline registry.

image

12. Shut down Registry Editor, Command Prompt window and restart the computer.

13. RRemove the Windows installation DVD from the CD/DVD drive and allow Windows to start normally.

Method 2: Modify registry OFFLINE using Hiren’s BOOTCD.

Step 1. Download Hiren’s BootCD

1. Download it Hiren’s BootCD to your computer.*

* Hiren’s BootCD official download page: http://www.hirensbootcd.org/download/

Scroll down the page and click onHirens.BootCD.15.2.zip)

image_thumb7_thumb

2. When the download is complete, right click on “Hirens.BootCD.15.2.zip” extract the file.

image_thumb11_thumb

Step 2: Burn Hirens BootCD to optical disc.

Note: If your computer does not have a CD/DVD drive (for example, you have a netbook), follow the instructions below: How to put Hirens BootCD on a USB flash drive.

1. “atHirens.BootCD.15.2” folder, find the Disc Image file “Hiren’s.BootCD.15.2.ISO” and burn it to CD.

image_thumb16

Step 3: Boot with Hirens.BootCD.

1. First, make sure your DVD/CDROM drive is selected as the first boot device in the BIOS (CMOS) settings. For this:

  1. Enabled click on your computer and “DEL“or”F1“or”F2“or”F10” enter BIOS (CMOS) installation utility.
    (The method of accessing the BIOS settings depends on the computer manufacturer).
  2. In the BIOS menu “Download procedure“adjustment.
    (This setting is usually “located inAdvanced BIOS features” menu).
  3. At”Download procedure” setting CD-ROM driving like first boot device.
  4. Save and Exit From the BIOS settings.

2. Insert Hirens Boot CD into CD/DVD drive to boot from infected computer.

3. When “Hiren’s BootCD” menu appears on the screen, use the arrow keys on the keyboard “Mini Windows XP” select the option and then “INTRODUCTION

image_thumb18

Step 4. Modify the remote registry.

1. from “Mini Windows XP” desktop, double click at HBCD menu sign.

image

2. From whom Programs select menu Register > Registry Editor PE.

edit registry-offline

3. Yes Check out the folder screen, select the Windows directory where Windows is installed (usually “C:\Windows”) and select OK.

image

4. In each window that appears on the screen, select the appropriate registry slot and then click It’s open. (You must do this for all registries: SAM, SYSTEM, SOFTWARE & SECURITY).

for example to select SAM select slot “Sam” file below “%windir%\system32\config\”directory and click It’s open. (eg C:\Windows\System32\config\sam)

image

5. If you want to edit the remote user profile (HKEY_CURRENT_USER), you must select it. Yes on the following screen (otherwise select No).

image

6. Then select NTUSER.DAT file found in the user profile directory (%userprofile%/ntuser.dat) of the user you want to edit. (Usually the full path: C:\Users\%Username%\ntuser.dat In Windows 7 or C:\Documents and Settings\Username\ntuser.dat on Windows XP.)

image

7. Click to select another remote profile to edit Yes otherwise press No continue.

image

8. Yes Registry Editor PE information window, click OK.

image

9. Double click to expand HKEY_LOCAL_MACHINE button and you should see four (4) folders marked with it _REMOTE_ prefix in their name. These are _REMOTE_ keys contain remote registry settings, so expand them and make any necessary changes.

image

10. In the same way, you can edit the remote user profile settings located below HKEY_USERS key, with a prefix _REMOTE_.

image

11. Finally, when you are done with the changes, close the registry editor and the changes will be automatically uploaded to the remote registry.

That’s it!

If you found this article useful, please support us by donating. Even $1 can make a big difference for us We continue to help others while keeping this site free:

Leave a Comment