What
Load current user registry settings from another user
Problem
I was looking for a way how to load the current user registry settings from another user
Solution
This trick is very easy and helpful when your trying to remove spyware from yourpc. The problem with spyware is that it mostley load on startup. Sometimes you are lucky and you can logon with another user account where the spyware doesn't start at startup.
We can then load the CURRENT USER registry settings from our infected user, using command prompt:
reg load HKLM\TempHive “C:\Users\Someuser\ntuser.dat”
When you open regedit the settings will be viewable at thelocation you specified (HKLM\TempHive)
When your done editing the setting, don't forget to unload the TempHive:
reg unload "HKLM\TempHive"
That's it, this can also be very handy when change some registry settings for the default user.. so the settings will be loaded when creating a new user on the system.
No comments:
Post a Comment