Mos

Windows Registry yog dab tsi & Nws ua haujlwm li cas?

Sim Peb Cov Twj Rau Kev Tshem Tawm Cov Teeb Meem





Tshaj tawm rauHloov tshiab kawg: Lub Ob Hlis 16, 2021

Windows Registry yog ib phau ntawm configurations, qhov tseem ceeb, thiab cov khoom ntawm windows daim ntaub ntawv raws li zoo raws li lub qhov rais operating system uas yog npaj thiab khaws cia nyob rau hauv ib tug hierarchical yam nyob rau hauv ib tug singular repository.



Thaum twg qhov kev pab cuam tshiab tau nruab rau hauv Windows system, qhov kev nkag tau tsim hauv Windows Registry nrog nws cov yam ntxwv xws li qhov loj me, version, qhov chaw nyob hauv qhov chaw cia, thiab lwm yam.

Windows Registry yog dab tsi thiab nws ua haujlwm li cas



Vim hais tias, cov ntaub ntawv no tau muab khaws cia rau hauv cov ntaub ntawv, tsis yog lub operating system nkaus xwb paub txog cov peev txheej siv, lwm yam kev siv kuj tuaj yeem tau txais txiaj ntsig los ntawm cov ntaub ntawv no vim lawv paub txog kev tsis sib haum xeeb uas yuav tshwm sim yog tias qee cov peev txheej lossis cov ntaub ntawv tau koom nrog. muaj.

Cov ntsiab lus[ zais ]



Windows Registry yog dab tsi & Nws ua haujlwm li cas?

Windows Registry yog lub hauv paus ntawm txoj kev Windows ua haujlwm. Nws yog tib qho kev khiav hauj lwm uas siv txoj hauv kev no ntawm kev sau npe hauv nruab nrab. Yog tias peb xav pom, txhua feem ntawm lub operating system yuav tsum cuam tshuam nrog Windows Registry txoj cai los ntawm cov txheej txheem booting mus rau qee yam yooj yim xws li hloov npe cov ntaub ntawv lub npe.

Cias muab, nws tsuas yog ib qho chaw khaws ntaub ntawv zoo ib yam li cov tsev qiv ntawv daim ntawv teev npe, qhov twg cov ntawv nkag hauv cov ntawv sau npe zoo li ib pawg ntawm cov ntawv khaws cia hauv daim ntawv teev npe. Tus yuam sij rau npe yuav yog daim npav thiab tus nqi sau npe yuav yog cov ntaub ntawv tseem ceeb sau rau ntawm daim npav ntawd. Lub Windows operating system siv cov ntawv sau npe khaws cia ib pawg ntawm cov ntaub ntawv uas tau siv los tswj thiab tswj peb lub kaw lus thiab software. Qhov no tuaj yeem yog txhua yam los ntawm PC cov ntaub ntawv kho vajtse rau cov neeg siv nyiam thiab hom ntaub ntawv. Yuav luag txhua hom kev teeb tsa uas peb ua rau lub Windows system cuam tshuam nrog kho cov npe.



Keeb kwm ntawm Windows Registry

Nyob rau hauv thawj versions ntawm lub qhov rais, daim ntawv thov developers yuav tsum muaj xws li nyob rau hauv ib tug cais .ini cov ntaub ntawv extension nrog rau cov ntaub ntawv executable. Cov ntaub ntawv .ini no muaj tag nrho cov chaw, cov khoom thiab cov kev teeb tsa uas xav tau rau qhov muab kev pabcuam ua haujlwm kom ua haujlwm tau zoo. Txawm li cas los xij, qhov no tau ua pov thawj tsis muaj txiaj ntsig vim qhov rov ua dua ntawm qee cov ntaub ntawv thiab nws kuj ua rau muaj kev hem thawj rau kev ua haujlwm. Yog li ntawd, ib qho kev siv tshiab ntawm tus qauv, nruab nrab thiab kev ruaj ntseg tshuab yog qhov tsim nyog.

Nrog rau qhov tshwm sim ntawm Windows 3.1, cov pob txha liab qab ntawm qhov kev thov no tau ntsib nrog cov ntaub ntawv hauv nruab nrab rau txhua daim ntawv thov thiab cov kab ke hu ua Windows Registry.

Cov cuab yeej no, txawm li cas los xij, tau txwv heev, txij li cov ntawv thov tsuas tuaj yeem khaws qee cov ntaub ntawv teeb tsa ntawm kev ua tiav. Tau ntau xyoo, Windows 95 thiab Windows NT txuas ntxiv txhim kho ntawm lub hauv paus no, qhia txog kev ua haujlwm hauv nruab nrab raws li qhov tseem ceeb hauv qhov tshiab ntawm Windows Registry.

Uas tau hais tias, khaws cov ntaub ntawv hauv Windows Registry yog qhov kev xaiv rau software tsim tawm. Yog li, yog tias tus tsim tawm software tsim los tsim ib daim ntawv thov portable, nws tsis tas yuav ntxiv cov ntaub ntawv rau kev sau npe, chaw cia hauv zos nrog rau kev teeb tsa, cov khoom, thiab cov txiaj ntsig tuaj yeem tsim thiab xa khoom tiav.

Qhov cuam tshuam ntawm Windows Registry nrog rau lwm cov kev khiav haujlwm

Windows yog tib qho kev ua haujlwm uas siv txoj hauv kev no ntawm kev sau npe hauv nruab nrab. Yog tias peb xav pom, txhua feem ntawm lub operating system yuav tsum cuam tshuam nrog Windows Registry txoj cai los ntawm cov txheej txheem booting mus rau lub npe ntawm cov ntaub ntawv npe.

Tag nrho lwm cov kev khiav hauj lwm xws li iOS, Mac OS, Android, thiab Linux txuas ntxiv siv cov ntawv sau ua ib txoj hauv kev teeb tsa lub operating system thiab hloov kho cov kev ua haujlwm ntawm tus cwj pwm.

Nyob rau hauv feem ntau ntawm Linux variants, cov ntaub ntawv configuration tau txais kev cawmdim nyob rau hauv .txt hom, qhov no yog ib qho teeb meem thaum peb yuav tsum ua hauj lwm nrog cov ntawv nyeem cov ntaub ntawv vim tag nrho cov ntaub ntawv .txt raug suav hais tias yog cov ntaub ntawv tseem ceeb. Yog li yog tias peb sim qhib cov ntawv nyeem hauv cov haujlwm no, peb yuav tsis tuaj yeem saib nws. Cov txheej txheem kev khiav hauj lwm no sim zais nws raws li kev ntsuas kev nyab xeeb txij li tag nrho cov ntaub ntawv kaw lus xws li teeb tsa ntawm daim npav network, firewall, operating system, graphical user interface, video cards interface, thiab lwm yam. ASCII format.

Txhawm rau zam qhov teeb meem no ob qho tib si macOS, nrog rau iOS, siv txoj hauv kev sib txawv kiag li rau cov ntawv txuas ntxiv los ntawm kev siv. .plist extension , uas muaj tag nrho cov kab ke nrog rau cov ntaub ntawv teeb tsa daim ntawv thov tab sis tseem muaj txiaj ntsig ntawm kev muaj cov npe sau npe nyob deb tshaj qhov hloov pauv yooj yim ntawm cov ntaub ntawv txuas ntxiv.

Cov txiaj ntsig ntawm Windows Registry yog dab tsi?

Vim tias txhua feem ntawm lub operating system txuas ntxiv txuas nrog Windows Registry, nws yuav tsum tau muab khaws cia hauv qhov ceev ceev heev. Li no, cov ntaub ntawv no tau tsim los rau kev nyeem ntawv ceev heev thiab sau nrog rau kev khaws cia zoo.

Yog tias peb yuav tsum qhib thiab tshawb xyuas qhov loj ntawm cov ntaub ntawv sau npe, nws feem ntau yuav txav mus los ntawm 15 - 20 megabytes uas ua rau nws me me kom ib txwm thauj mus rau hauv RAM (Random Access Memory) uas co-incidentally yog qhov ceev tshaj plaws cia muaj rau lub operating system.

Txij li thaum daim ntawv teev npe yuav tsum tau muab tso rau hauv lub cim xeeb txhua lub sijhawm, yog tias qhov loj ntawm daim ntawv teev npe loj nws yuav tsis tso chaw txaus rau tag nrho lwm cov ntawv thov kom ua haujlwm zoo lossis ua haujlwm txhua. Qhov no yuav ua rau muaj kev puas tsuaj rau kev ua haujlwm ntawm kev ua haujlwm, yog li Windows Registry yog tsim los nrog lub hom phiaj tseem ceeb ntawm kev ua haujlwm tau zoo.

Yog tias muaj ntau tus neeg siv cuam tshuam nrog tib lub cuab yeej thiab muaj ntau daim ntawv thov uas lawv siv ntau, qhov rov nruab dua ntawm tib daim ntawv thov ob zaug lossis ntau zaus yuav yog qhov pov tseg ntawm cov khoom kim heev. Windows sau npe ua tau zoo nyob rau hauv cov xwm txheej no qhov twg daim ntawv thov teeb tsa tau sib koom nrog ntau tus neeg siv.

Qhov no tsis tsuas yog txo qis tag nrho cov cia siv tab sis kuj muab nws cov neeg siv nkag mus hloov pauv rau daim ntawv thov kev teeb tsa los ntawm ib qho chaw sib cuam tshuam. Qhov no tseem txuag lub sijhawm txij li tus neeg siv tsis tas yuav manually mus rau txhua qhov chaw cia .ini cov ntaub ntawv.

Ntau tus neeg siv cov xwm txheej muaj ntau heev hauv kev teeb tsa kev lag luam, ntawm no, muaj qhov xav tau rau cov neeg siv khoom muaj cai nkag. Txij li tsis yog tag nrho cov ntaub ntawv lossis cov peev txheej tuaj yeem muab faib rau txhua tus, qhov kev xav tau ntawm tus kheej-raws li tus neeg siv nkag tau yooj yim tau siv los ntawm lub hauv paus hauv qhov rais sau npe. Ntawm no tus thawj tswj hwm network muaj cai txwv lossis tso cai raws li kev ua haujlwm. Qhov no ua rau cov ntaub ntawv sib txawv ntau yam thiab ua rau nws muaj zog txij li qhov kev hloov kho tshiab tuaj yeem ua tiav ib txhij nrog cov chaw taws teeb nkag mus rau tag nrho cov npe ntawm ntau yam khoom siv hauv lub network.

Windows Registry ua haujlwm li cas?

Cia peb tshawb nrhiav cov ntsiab lus tseem ceeb ntawm Windows Registry ua ntej peb pib ua peb txhais tes qias neeg.

Lub Windows Registry yog tsim los ntawm ob lub ntsiab lus hu ua Registry Key uas yog ib lub thawv khoom los yog yooj yim muab tso rau lawv zoo li ib daim ntawv tais ceev tseg uas muaj ntau hom ntaub ntawv khaws cia rau hauv lawv thiab Registry Values uas yog cov khoom tsis ntim khoom uas zoo li cov ntaub ntawv uas tuaj yeem yog hom ntawv.

Koj kuj yuav tsum paub: Yuav Ua Li Cas Tswj Xyuas Tag Nrho lossis Cov Tswv Cuab ntawm Windows Registry Keys

Yuav nkag mus rau Windows Registry li cas?

Peb tuaj yeem nkag mus thiab teeb tsa lub Windows Registry siv lub cuab yeej Registry Editor, Microsoft suav nrog kev sau npe pub dawb kho cov nqi hluav taws xob nrog rau txhua qhov version ntawm nws Windows Operating System.

No Registry Editor tuaj yeem nkag tau los ntawm kev ntaus Regedit hauv Command Prompt los yog tsuas yog ntaus Regedit hauv kev tshawb nrhiav lossis khiav lub thawv los ntawm Start menu. Tus editor no yog lub portal nkag mus rau Windows sau npe, thiab nws pab peb tshawb nrhiav thiab hloov pauv rau npe. Lub npe yog lub kaus siv los ntawm ntau cov ntaub ntawv database nyob rau hauv cov npe ntawm Windows installation.

Yuav ua li cas nkag mus rau Registry Editor

khiav regedit hauv kev hais kom ua hloov pauv + F10

Puas muaj kev nyab xeeb los hloov Registry Editor?

Yog tias koj tsis paub tias koj tab tom ua dab tsi, nws yog qhov txaus ntshai ua si ntawm Registry configuration. Thaum twg koj hloov Registry, xyuas kom koj ua raws li cov lus qhia raug thiab tsuas yog hloov qhov koj tau qhia kom hloov.

Yog tias koj paub tseeb lossis yuam kev rho tawm ib yam dab tsi hauv Windows Registry ces nws tuaj yeem hloov kho koj qhov kev teeb tsa uas tuaj yeem ua rau Blue Screen of Death lossis Windows yuav tsis khau raj.

Yog li nws yog feem ntau pom zoo rau backup Windows Registry ua ntej yuav hloov pauv rau nws. Koj tuaj yeem ua tau tsim ib qhov system restore point (uas tau cia li thaub qab Registry) uas tuaj yeem siv tau yog tias koj xav tau hloov pauv Registry nqis rov qab rau qhov qub. Tab sis yog tias koj tsuas yog qhov koj tau hais ces nws yuav tsum tsis muaj teeb meem. Nyob rau hauv rooj plaub koj yuav tsum paub yuav ua li cas rov qab Windows Registry ces qhov kev qhia no piav qhia yuav ua li cas yooj yim.

Cia peb tshawb nrhiav cov qauv ntawm Windows Registry

Muaj ib tus neeg siv nyob rau hauv qhov chaw khaws khoom siv tsis tau uas muaj nyob rau tsuas yog kev siv qhov system nkag.

Cov Ntsiab Lus no tau thauj mus rau RAM thaum lub sijhawm ua haujlwm khau raj thiab txuas ntxiv txuas mus ntxiv nyob rau hauv qee lub sijhawm lossis thaum muaj qee qhov xwm txheej txheej txheej lossis txheej xwm tshwm sim.

Ib feem ntawm cov ntawv sau npe no tau khaws cia rau hauv lub hard disk. Cov yawm sij uas khaws cia rau hauv lub hard disk yog hu ua hives. Tshooj ntawv no muaj cov yuam sij sau npe, npe subkeys, thiab cov nqi sau npe. Nyob ntawm theem ntawm cov cai uas tus neeg siv tau tso cai, nws yuav nkag mus rau qee qhov ntawm cov yuam sij no.

Cov yuam sij uas nyob rau lub ncov ntawm lub hierarchy nyob rau hauv lub npe uas pib nrog HKEY yog suav hais tias yog khaus khaus.

Hauv Editor, cov khaus khaus nyob rau sab laug ntawm lub vijtsam thaum txhua tus yuam sij raug saib yam tsis nthuav dav. Cov no yog cov yuam sij sau npe uas tshwm li folders.

Cia peb tshawb nrhiav cov qauv ntawm windows sau npe yuam sij thiab nws cov subkeys:

Piv txwv ntawm lub npe tseem ceeb – HKEY_LOCAL_MACHINESYSTEMInputBreakloc_0804

Ntawm no loc_0804 hais txog subkey Break yog hais txog subkey Input uas yog hais txog subkey SYSTEM ntawm HKEY_LOCAL_MACHINE lub hauv paus tseem ceeb.

Cov hauv paus ntsiab lus hauv Windows Registry

Txhua tus yuam sij hauv qab no yog nws tus kheej lub Hive, uas muaj ntau tus yuam sij hauv qhov tseem ceeb tshaj plaws.

i. HKEY_CLASSES_ROOT

Qhov no yog qhov kev sau npe Hive ntawm Windows Registry uas muaj cov ntaub ntawv txuas ntxiv cov ntaub ntawv, programmatic ID nkag mus (ProgID), Interface ID (IID) cov ntaub ntawv, thiab Class ID (CLSID) .

Qhov kev sau npe no HKEY_CLASSES_ROOT yog lub rooj vag rau txhua qhov kev ua lossis kev tshwm sim tshwm sim hauv Windows operating system. Piv txwv tias peb xav nkag mus rau qee cov ntaub ntawv mp3 hauv Downloads folder. Lub operating system khiav nws cov lus nug los ntawm qhov no los ua qhov yuav tsum tau ua.

Lub sijhawm koj nkag mus rau HKEY_CLASSES_ROOT Hive, nws yooj yim heev rau kev ntxhov siab saib xws li cov npe loj ntawm cov ntaub ntawv txuas ntxiv. Txawm li cas los xij, cov no yog cov yuam sij rau npe uas ua rau Windows ua haujlwm tau zoo

Hauv qab no yog qee qhov piv txwv ntawm HKEY_CLASSES_ROOT Hive Registry Keys,

HKEY_CLASSES_ROOT.otf HKEY_CLASSES_ROOT.htc HKEY_CLASSES_ROOT.img HKEY_CLASSES_ROOT.mhtml HKEY_CLASSES_ROOT.png'mv-ad-box' data-slotid='content_8_btf'

Thaum twg peb nyem ob zaug thiab qhib cov ntaub ntawv cia hais tias ib daim duab, lub kaw lus xa cov lus nug los ntawm HKEY_CLASSES_ROOT qhov twg cov lus qhia yuav ua li cas thaum cov ntaub ntawv no tau thov kom meej meej. Yog li ntawd, lub kaw lus xaus rau qhib lub yees duab saib uas qhia cov duab thov.

Hauv qhov piv txwv saum toj no, cov npe sau npe hu rau cov yuam sij khaws cia hauv HKEY_CLASSES_ROOT.jpg'https://docs.microsoft.com/en-us/windows/win32/sysinfo/hkey-classes-root-key'> HKEY_ CLASSES_ ROOT . Nws tuaj yeem nkag tau los ntawm kev qhib HKEY_CLASSES tus yuam sij ntawm sab laug ntawm lub vijtsam.

ii. HKEY_LOCAL_MACHINE

Qhov no yog ib qho ntawm ntau qhov kev sau npe khaus uas khaws tag nrho cov chaw uas tshwj xeeb rau lub computer hauv zos. Qhov no yog qhov tseem ceeb thoob ntiaj teb uas cov ntaub ntawv khaws tseg tsis tuaj yeem hloov kho los ntawm ib tus neeg siv lossis cov kev pabcuam. Vim lub ntiaj teb no xwm ntawm lub subkey, tag nrho cov ntaub ntawv khaws cia nyob rau hauv no cia yog nyob rau hauv daim ntawv ntawm ib tug virtual thawv khiav ntawm lub RAM tsis tu ncua. Feem ntau ntawm cov ntaub ntawv teeb tsa rau cov neeg siv software tau teeb tsa thiab Windows operating system nws tus kheej tau nyob hauv HKEY_LOCAL_MACHINE. Tag nrho cov khoom siv tam sim no pom tau khaws cia hauv HKEY_LOCAL_MACHINE Hive.

Kuj paub yuav ua li cas: Txhim kho Regedit.exe Crashes thaum tshawb hauv Registry

Tus yuam sij rau npe no tau muab faib ua 7 sub-keys:

1. SAM (Security Accounts Manager) - Nws yog ib daim ntawv teev npe tseem ceeb uas khaws cov neeg siv cov passwords hauv hom kev nyab xeeb (hauv LM hash thiab NTLM hash). Lub hash muaj nuj nqi yog ib hom kev encryption siv los tiv thaiv cov neeg siv cov ntaub ntawv tus account.

Nws yog cov ntaub ntawv xauv uas nyob hauv qhov system ntawm C:WINDOWSsystem32config, uas tsis tuaj yeem txav los yog theej thaum lub operating system khiav.

Windows siv Tus Thawj Saib Xyuas Kev Ruaj Ntseg Cov Ntawv Sau Npe cov ntaub ntawv tseem ceeb txhawm rau txheeb xyuas cov neeg siv thaum lawv nkag rau hauv lawv cov nyiaj Windows. Thaum twg tus neeg siv nkag rau hauv, Windows siv cov lej ntawm hash algorithms los xam tus hash rau tus password uas tau nkag mus. Yog hais tias tus password nkag mus tus hash yog sib npaug rau tus password hash hauv SAM Registry file , cov neeg siv yuav raug tso cai nkag mus rau lawv tus account. Qhov no kuj yog cov ntaub ntawv uas feem ntau ntawm cov hackers lub hom phiaj thaum ua qhov kev tawm tsam.

2. Kev ruaj ntseg (tsis siv tau tshwj tsis yog los ntawm tus thawj tswj hwm) - Tus yuam sij rau npe no yog nyob rau hauv tus as khauj ntawm tus neeg siv kev tswj hwm uas tau nkag mus rau hauv qhov system tam sim no. Yog tias lub kaw lus tau tswj hwm los ntawm ib lub koom haum, cov neeg siv tsis tuaj yeem nkag mus rau cov ntaub ntawv no tshwj tsis yog tias kev nkag mus rau kev tswj hwm tau muab qhia meej rau tus neeg siv. Yog tias peb yuav qhib cov ntaub ntawv no yam tsis muaj cai tswj hwm nws yuav yog qhov khoob. Tam sim no, yog tias peb qhov system txuas nrog kev tswj hwm kev tswj hwm, tus yuam sij no yuav ua rau lub hauv paus kev ruaj ntseg profile tsim thiab nquag tswj hwm los ntawm lub koom haum. Tus yuam sij no txuas mus rau SAM, yog li thaum muaj kev lees paub tiav, nyob ntawm qib tsim nyog ntawm tus neeg siv, ntau yam hauv zos thiab pab pawg txoj cai raug siv.

3. Qhov System (cov txheej txheem khau raj tseem ceeb thiab lwm yam kev ua haujlwm kernel) - Cov lus tseem ceeb no muaj cov ntaub ntawv tseem ceeb ntsig txog tag nrho cov kab ke xws li lub npe computer, tam sim no mounted hardware devices, filesystem thiab hom kev ua haujlwm li cas tuaj yeem ua rau qee qhov xwm txheej, hais tias muaj. Blue screen ntawm kev tuag vim CPU overheating, muaj cov txheej txheem tsim nyog uas lub computer yuav cia li pib noj nyob rau hauv xws li ib tug tshwm sim. Cov ntaub ntawv no tsuas yog siv tau los ntawm cov neeg siv uas muaj cai tswj hwm txaus. Thaum lub kaw lus khau raj no yog qhov twg tag nrho cov cav tau dynamically tau txais kev cawmdim thiab nyeem. Ntau qhov system tsis xws li lwm qhov kev teeb tsa uas yog hu ua kev tswj hwm.

4. Software Tag nrho cov neeg sab nrauv software teeb tsa xws li ntsaws thiab ua si tsav tsheb tau khaws cia ntawm no. Cov subkey no muaj cov software thiab Windows teeb tsa txuas mus rau cov khoom siv uas twb muaj lawm uas tuaj yeem hloov tau los ntawm ntau daim ntawv thov thiab cov txheej txheem nruab. Software developers tau txwv los yog tso cai dab tsi cov ntaub ntawv tau txais los ntawm cov neeg siv thaum lawv siv software, qhov no tuaj yeem teeb tsa siv Policies subkey uas tswj hwm txoj cai siv dav dav ntawm cov ntawv thov thiab cov kev pabcuam uas suav nrog cov ntawv pov thawj uas siv los txheeb xyuas qhov tseeb. , tso cai lossis tsis tso cai rau qee lub tshuab lossis kev pabcuam.

5. Kho vajtse uas yog ib tug subkey uas yog tsim dynamically thaum lub system khau raj

6. Cov khoom xyaw system-wide device-specific component configuration information tuaj yeem pom ntawm no

7. BCD.dat (hauv oot nplaub tshev hauv qhov system muab faib) uas yog cov ntaub ntawv tseem ceeb uas lub kaw lus nyeem thiab pib ua haujlwm thaum lub sijhawm ua haujlwm khau raj los ntawm kev thauj cov npe rau RAM.

iii. HKEY_CURRENT_CONFIG

Lub ntsiab yog vim li cas rau lub hav zoov ntawm no subkey yog khaws video raws li zoo raws li network chaw. Qhov ntawd tuaj yeem yog tag nrho cov ntaub ntawv hais txog daim npav video xws li kev daws teeb meem, refresh npaum li cas, nam piv, thiab lwm yam nrog rau lub network.

Nws kuj yog ib qho kev sau npe Hive, ib feem ntawm Windows Registry, thiab uas khaws cov ntaub ntawv hais txog hardware profile tam sim no siv. HKEY_CURRENT_CONFIG yeej yog tus taw tes rau HKEY_LOCAL_MACHINESYSTEMCurrentControlSetHardwareProfilesCurrentregistry key, Qhov no tsuas yog tus taw tes rau cov khoom siv tam sim no uas tau teev tseg hauv HKEY_LOCAL_MACHINESYSTEMCurrentControlfilesHardware.

Yog li HKEY_ CURRENT_CONFIG pab peb saib thiab hloov kho qhov teeb tsa ntawm tus neeg siv tam sim no cov ntaub ntawv kho vajtse, uas peb tuaj yeem ua tus thawj coj hauv ib qho ntawm peb qhov chaw raws li teev saum toj no txij li lawv txhua tus tib yam.

ib iv. HKEY_CURRENT_USER

Ib feem ntawm cov npe khaus khaus uas muaj cov chaw khaws khoom thiab cov ntaub ntawv teeb tsa rau Windows thiab software uas tshwj xeeb rau cov neeg siv tam sim no nkag. Piv txwv li, ntau yam kev sau npe muaj txiaj ntsig hauv cov lej sau npe yog nyob rau hauv HKEY_CURRENT_USER Hive tswj cov neeg siv qib kev teeb tsa xws li cov keyboard layout, printers ntsia, desktop wallpaper, zaub teeb tsa, mapped network drives, thiab ntau dua.

Ntau qhov chaw koj teeb tsa nyob rau hauv ntau yam applets hauv Control Vaj Huam Sib Luag yog khaws cia rau hauv HKEY_CURRENT_USER kev sau npe Hive. Vim tias HKEY_CURRENT_USER Hive yog cov neeg siv tshwj xeeb, ntawm tib lub computer, cov yuam sij thiab cov txiaj ntsig muaj nyob hauv nws yuav txawv ntawm tus neeg siv rau cov neeg siv. Qhov no tsis zoo li feem ntau lwm qhov kev sau npe khaus uas yog thoob ntiaj teb, txhais tau tias lawv khaws cov ntaub ntawv tib yam thoob plaws txhua tus neeg siv hauv Windows.

Nyem rau ntawm sab laug ntawm lub vijtsam ntawm tus sau npe editor yuav muab rau peb nkag mus rau HKEY_CURRENT_USER. Raws li kev ntsuas kev nyab xeeb, cov ntaub ntawv khaws cia rau ntawm HKEY_CURRENT_USER tsuas yog tus taw qhia rau qhov tseem ceeb nyob hauv qab HKEY_USERS Hive raws li peb tus cim kev ruaj ntseg. Cov kev hloov pauv tau ua rau ib qho ntawm thaj chaw yuav siv tam sim ntawd.

v. HKEY_USERS

Qhov no muaj subkeys sib raug rau HKEY_CURRENT_USER tus yuam sij rau txhua tus neeg siv profile. Qhov no kuj yog ib qho ntawm ntau qhov kev sau npe khaus uas peb muaj nyob rau hauv Windows Registry.

Txhua tus neeg siv cov ntaub ntawv kev teeb tsa tshwj xeeb yog nkag rau ntawm no, rau txhua tus neeg uas nquag siv lub cuab yeej uas cov ntaub ntawv zoo khaws cia hauv HKEY_USERS. Txhua tus neeg siv cov ntaub ntawv tshwj xeeb khaws cia rau hauv qhov system uas sib haum rau ib tus neeg siv tshwj xeeb yog khaws cia hauv HKEY_USERS Hive, peb tuaj yeem txheeb xyuas cov neeg siv tshwj xeeb uas siv cov Kev ruaj ntseg ID lossis SID uas teev tag nrho cov configuration hloov los ntawm tus neeg siv.

Tag nrho cov neeg siv nquag no uas nws tus account muaj nyob hauv HKEY_USERS Hive nyob ntawm qhov tsim nyog tau txais los ntawm tus thawj tswj hwm lub cev yuav tuaj yeem nkag mus rau cov khoom siv sib koom xws li tshuab luam ntawv, lub network hauv zos, cov chaw khaws cia hauv zos, keeb kwm yav dhau los, thiab lwm yam. Lawv tus account muaj qee qhov kev sau npe. cov yuam sij thiab cov nqi sau npe sib raug khaws cia hauv qab tus neeg siv tam sim no SID.

Nyob rau hauv cov nqe lus ntawm forensic ntaub ntawv txhua SID khaws ib tug loj npaum li cas ntawm cov ntaub ntawv nyob rau hauv txhua txhua tus neeg siv raws li nws ua rau ib tug log ntawm txhua qhov kev tshwm sim thiab kev txiav txim tau ua nyob rau hauv tus neeg siv tus account. Qhov no suav nrog Tus Neeg Siv Lub Npe, tus naj npawb ntawm lub sijhawm tus neeg siv nkag mus rau hauv lub computer, hnub thiab sijhawm ntawm kev nkag mus dhau los, hnub thiab sijhawm hloov tus password kawg, tus lej ntawm kev nkag tsis tau, thiab lwm yam. Tsis tas li ntawd, nws tseem muaj cov ntaub ntawv sau npe rau thaum Windows loads thiab zaum ntawm tus ID nkag mus.

Pom zoo: Txhim kho Registry editor tau tso tseg

Cov yuam sij rau npe rau tus neeg siv lub neej ntawd tau khaws cia rau hauv cov ntaub ntawv ntuser.dat nyob rau hauv qhov profile, uas peb yuav tsum tau thauj khoom no ua lub Hive siv regedit ntxiv cov chaw rau tus neeg siv lub neej ntawd.

Hom ntaub ntawv peb tuaj yeem xav pom hauv Windows Registry

Tag nrho cov yuam sij saum toj no-hais lus sib tham thiab subkeys yuav muaj cov teeb tsa, qhov tseem ceeb, thiab cov khoom khaws tseg hauv ib qho ntawm cov ntaub ntawv hauv qab no, feem ntau, nws yog kev sib txuas ntawm cov ntaub ntawv hauv qab no uas ua rau peb tag nrho cov npe Windows.

  • Cov hlua tseem ceeb xws li Unicode ​​uas yog tus qauv kev lag luam hauv kev lag luam rau kev sib koom ua ke, kev sawv cev, thiab kev tuav cov ntawv qhia hauv feem ntau ntawm lub ntiaj teb kev sau ntawv.
  • Binary cov ntaub ntawv
  • Unsigned integers
  • Symbol links
  • Ntau txoj hlua muaj nuj nqis
  • Daim ntawv teev cov peev txheej (Plug thiab Play hardware)
  • Resource descriptor (Plug thiab Play hardware)
  • 64-ntsis integers

Xaus

Windows Registry tsis muaj dab tsi tsawg dua ntawm kev hloov pauv, uas tsis yog tsuas yog txo qis qhov kev pheej hmoo ntawm kev nyab xeeb uas tuaj los ntawm kev siv cov ntawv sau ua cov ntaub ntawv txuas ntxiv kom txuag tau qhov system thiab daim ntawv thov teeb tsa tab sis nws kuj txo tus naj npawb ntawm kev teeb tsa lossis .ini cov ntaub ntawv uas cov ntawv thov tsim tawm. yuav tsum tau xa nrog lawv cov khoom software. Cov txiaj ntsig ntawm kev muaj lub hauv paus chaw cia khoom khaws cia cov ntaub ntawv nquag nkag los ntawm ob lub system nrog rau cov software uas khiav ntawm lub kaw lus yog qhov tseeb heev.

Qhov yooj yim ntawm kev siv nrog rau kev nkag mus rau ntau yam kev hloov kho thiab kev teeb tsa hauv ib qho chaw nruab nrab kuj tau ua rau lub qhov rais nyiam lub platform rau cov ntawv thov desktop los ntawm ntau cov software tsim tawm. Qhov no yog qhov tseeb yog tias koj sib piv cov ntim loj ntawm cov ntawv thov software ntawm lub qhov rais rau Apple's macOS. Txhawm rau ua kom tiav, peb tau tham txog yuav ua li cas Windows Registry ua haujlwm thiab nws cov qauv ntaub ntawv thiab qhov tseem ceeb ntawm ntau yam kev sau npe tseem ceeb ntawm kev teeb tsa nrog rau kev siv cov ntawv sau npe editor kom ua tiav cov txiaj ntsig.

Elon Decker

Elon yog tus kws sau ntawv thev naus laus zis ntawm Cyber ​​S. Nws tau sau cov lus qhia yuav ua li cas rau li 6 xyoo tam sim no thiab tau hais txog ntau yam. Nws nyiam npog cov ncauj lus hais txog Windows, Android, thiab cov lus qhia tshiab thiab cov lus qhia.