{"id":162,"date":"2008-12-19T12:22:00","date_gmt":"2008-12-19T12:22:00","guid":{"rendered":"http:\/\/jjamwal.in\/blog\/?p=162"},"modified":"2008-12-19T12:22:00","modified_gmt":"2008-12-19T12:22:00","slug":"restoring-registry-of-xp","status":"publish","type":"post","link":"https:\/\/jjamwal.in\/yayavar\/restoring-registry-of-xp\/","title":{"rendered":"Restoring Registry of XP"},"content":{"rendered":"

Few days back, my Windows XP got infected by a few viruses. Using infected pen drives seemed to be the reason. One particularly pesky virus was a script that started everytime I logged on even when I deleted the .vbs file manually. So I opened up regedit.exe and deleted every registry entry containing that file name. Bad move.
Next time I rebooted, I got the Welcome Screen, which I usually bypass. Clicking on my user name was not good enough to log in. It’d display, Loading User Settings and then come back to login screen without getting to desktop. I have a dual boot system with Linux as other OS (Using ntfs-3g it’s possible to read-write NTFS partitions from Linux). I could do most work on Linux but not gaming. I needed that XP back, reinstalling was not an option.
So….booted into Linux and fired up Google to look for some solution. There were many such cases but only one solution was applicable in my case, that is..restoring the registry.
There are many ways to restore registry one being using Windows Recovery Console. But that’s slow as it involved booting using XP cd and running commands to copy\/rename files from crappy command line of Windows. Why use Windows command line, when you can read-write NTFS partitions from Linux itself!! :p
Here are the steps:-<\/p>\n

First identify your XP partition on which it’s installed. In my system it was sda1.<\/p>\n

Then make a new directory anywhere. Name it reg. <\/span>Type
mkdir \/reg <\/span><\/p>\n

<\/span>Now get into Windowssystemconfig directory.
Type
cd \/mnt\/sda1\/Windows\/system\/config
<\/span>Notice that \/ is used in linux not <\/p>\n

Copy the following 5 files into Windowsrepair <\/span>directory
software, system, security, sam and default<\/p>\n

Now find your system restore folder on XP partition. It should be like
\/mnt\/sda1\/System Volume Information\/_restore{74AB4D58-11E9-4AAD-83C4-A8687AfE0C89}<\/p>\n

<\/span>Get into snapshots<\/span> folder. There should be some folders there named RP**<\/span> where **<\/span> stands for some number. Open the most recent folder and copy the following files<\/p>\n

_REGISTRY_MACHINE_SAM
_REGISTRY_MACHINE_SECURITY
_REGISTRY_MACHINE_SOFTWARE
_REGISTRY_MACHINE_SYSTEM
_REGISTRY_USER_.DEFAULT<\/p>\n

<\/b>into reg folder you created previously.<\/p>\n

Rename these files by deleting the <\/b><\/span>_REGISTRY_MACHINE_<\/b><\/span> part from each one so that the new names are SAM, SECURITY, SOFTWARE, .DEFAULT and SYSTEM<\/p>\n

Copy these 5 files to WindowsSystem32Config folder<\/p><\/blockquote>\n

Reboot, get to the welcome screen. You’ll be able to login using one account at least.
In my case I logged in using Administrator account. (only one visible). Then I created one account with same name as older on and got all my account settings and documents back.<\/p>\n

If you don’t have linux, you can follow the instructions from this website.<\/a><\/p>\n



<\/pre>\n","protected":false},"excerpt":{"rendered":"
Few days back, my Windows XP got infected by a few viruses. Using infected pen drives seemed to be the reason. One particularly pesky virus was a script that started everytime I logged on even when I deleted the .vbs file manually. So I opened up regedit.exe and deleted every registry entry containing that file…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-162","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\nRestoring Registry of XP - \u0905\u0930\u0947 \u092f\u093e\u092f\u093e\u0935\u0930 \u0930\u0939\u0947\u0917\u093e \u092f\u093e\u0926?<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jjamwal.in\/yayavar\/restoring-registry-of-xp\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Restoring Registry of XP - \u0905\u0930\u0947 \u092f\u093e\u092f\u093e\u0935\u0930 \u0930\u0939\u0947\u0917\u093e \u092f\u093e\u0926?\" \/>\n<meta property=\"og:description\" content=\"Few days back, my Windows XP got infected by a few viruses. Using infected pen drives seemed to be the reason. One particularly pesky virus was a script that started everytime I logged on even when I deleted the .vbs file manually. So I opened up regedit.exe and deleted every registry entry containing that file...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jjamwal.in\/yayavar\/restoring-registry-of-xp\/\" \/>\n<meta property=\"og:site_name\" content=\"\u0905\u0930\u0947 \u092f\u093e\u092f\u093e\u0935\u0930 \u0930\u0939\u0947\u0917\u093e \u092f\u093e\u0926?\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/jjamwalin\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/jjamwalin\" \/>\n<meta property=\"article:published_time\" content=\"2008-12-19T12:22:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jjamwal.in\/yayavar\/wp-content\/uploads\/2022\/01\/jjamwalin-logo-2-small.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"200\" \/>\n\t<meta property=\"og:image:height\" content=\"200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jaidev Jamwal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@JaidevJamwal\" \/>\n<meta name=\"twitter:site\" content=\"@JaidevJamwal\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jaidev Jamwal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/restoring-registry-of-xp\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/restoring-registry-of-xp\\\/\"},\"author\":{\"name\":\"Jaidev Jamwal\",\"@id\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/#\\\/schema\\\/person\\\/4b29cbc0fe18a86ec09a7c01177deac4\"},\"headline\":\"Restoring Registry of XP\",\"datePublished\":\"2008-12-19T12:22:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/restoring-registry-of-xp\\\/\"},\"wordCount\":460,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/#\\\/schema\\\/person\\\/4b29cbc0fe18a86ec09a7c01177deac4\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/restoring-registry-of-xp\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/restoring-registry-of-xp\\\/\",\"url\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/restoring-registry-of-xp\\\/\",\"name\":\"Restoring Registry of XP - \u0905\u0930\u0947 \u092f\u093e\u092f\u093e\u0935\u0930 \u0930\u0939\u0947\u0917\u093e \u092f\u093e\u0926?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/#website\"},\"datePublished\":\"2008-12-19T12:22:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/restoring-registry-of-xp\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/restoring-registry-of-xp\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/restoring-registry-of-xp\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Restoring Registry of XP\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/#website\",\"url\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/\",\"name\":\"\u0905\u0930\u0947 \u092f\u093e\u092f\u093e\u0935\u0930 \u0930\u0939\u0947\u0917\u093e \u092f\u093e\u0926?\",\"description\":\"Travel, Defence, Books & Photography\",\"publisher\":{\"@id\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/#\\\/schema\\\/person\\\/4b29cbc0fe18a86ec09a7c01177deac4\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/#\\\/schema\\\/person\\\/4b29cbc0fe18a86ec09a7c01177deac4\",\"name\":\"Jaidev Jamwal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/jjamwalin-logo-2-small.jpg\",\"url\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/jjamwalin-logo-2-small.jpg\",\"contentUrl\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/jjamwalin-logo-2-small.jpg\",\"width\":200,\"height\":200,\"caption\":\"Jaidev Jamwal\"},\"logo\":{\"@id\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/jjamwalin-logo-2-small.jpg\"},\"sameAs\":[\"http:\\\/\\\/jjamwal.in\",\"https:\\\/\\\/www.facebook.com\\\/jjamwalin\",\"https:\\\/\\\/www.instagram.com\\\/jamwal.jaidev\\\/\",\"https:\\\/\\\/x.com\\\/JaidevJamwal\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCuqw1ikTDrd3Lzf6RivuR6Q\"],\"url\":\"https:\\\/\\\/jjamwal.in\\\/yayavar\\\/author\\\/jaidev\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Restoring Registry of XP - \u0905\u0930\u0947 \u092f\u093e\u092f\u093e\u0935\u0930 \u0930\u0939\u0947\u0917\u093e \u092f\u093e\u0926?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jjamwal.in\/yayavar\/restoring-registry-of-xp\/","og_locale":"en_US","og_type":"article","og_title":"Restoring Registry of XP - \u0905\u0930\u0947 \u092f\u093e\u092f\u093e\u0935\u0930 \u0930\u0939\u0947\u0917\u093e \u092f\u093e\u0926?","og_description":"Few days back, my Windows XP got infected by a few viruses. Using infected pen drives seemed to be the reason. One particularly pesky virus was a script that started everytime I logged on even when I deleted the .vbs file manually. So I opened up regedit.exe and deleted every registry entry containing that file...","og_url":"https:\/\/jjamwal.in\/yayavar\/restoring-registry-of-xp\/","og_site_name":"\u0905\u0930\u0947 \u092f\u093e\u092f\u093e\u0935\u0930 \u0930\u0939\u0947\u0917\u093e \u092f\u093e\u0926?","article_publisher":"https:\/\/www.facebook.com\/jjamwalin","article_author":"https:\/\/www.facebook.com\/jjamwalin","article_published_time":"2008-12-19T12:22:00+00:00","og_image":[{"width":200,"height":200,"url":"https:\/\/jjamwal.in\/yayavar\/wp-content\/uploads\/2022\/01\/jjamwalin-logo-2-small.jpg","type":"image\/jpeg"}],"author":"Jaidev Jamwal","twitter_card":"summary_large_image","twitter_creator":"@JaidevJamwal","twitter_site":"@JaidevJamwal","twitter_misc":{"Written by":"Jaidev Jamwal","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jjamwal.in\/yayavar\/restoring-registry-of-xp\/#article","isPartOf":{"@id":"https:\/\/jjamwal.in\/yayavar\/restoring-registry-of-xp\/"},"author":{"name":"Jaidev Jamwal","@id":"https:\/\/jjamwal.in\/yayavar\/#\/schema\/person\/4b29cbc0fe18a86ec09a7c01177deac4"},"headline":"Restoring Registry of XP","datePublished":"2008-12-19T12:22:00+00:00","mainEntityOfPage":{"@id":"https:\/\/jjamwal.in\/yayavar\/restoring-registry-of-xp\/"},"wordCount":460,"commentCount":0,"publisher":{"@id":"https:\/\/jjamwal.in\/yayavar\/#\/schema\/person\/4b29cbc0fe18a86ec09a7c01177deac4"},"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/jjamwal.in\/yayavar\/restoring-registry-of-xp\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/jjamwal.in\/yayavar\/restoring-registry-of-xp\/","url":"https:\/\/jjamwal.in\/yayavar\/restoring-registry-of-xp\/","name":"Restoring Registry of XP - \u0905\u0930\u0947 \u092f\u093e\u092f\u093e\u0935\u0930 \u0930\u0939\u0947\u0917\u093e \u092f\u093e\u0926?","isPartOf":{"@id":"https:\/\/jjamwal.in\/yayavar\/#website"},"datePublished":"2008-12-19T12:22:00+00:00","breadcrumb":{"@id":"https:\/\/jjamwal.in\/yayavar\/restoring-registry-of-xp\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jjamwal.in\/yayavar\/restoring-registry-of-xp\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jjamwal.in\/yayavar\/restoring-registry-of-xp\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jjamwal.in\/yayavar\/"},{"@type":"ListItem","position":2,"name":"Restoring Registry of XP"}]},{"@type":"WebSite","@id":"https:\/\/jjamwal.in\/yayavar\/#website","url":"https:\/\/jjamwal.in\/yayavar\/","name":"\u0905\u0930\u0947 \u092f\u093e\u092f\u093e\u0935\u0930 \u0930\u0939\u0947\u0917\u093e \u092f\u093e\u0926?","description":"Travel, Defence, Books & Photography","publisher":{"@id":"https:\/\/jjamwal.in\/yayavar\/#\/schema\/person\/4b29cbc0fe18a86ec09a7c01177deac4"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jjamwal.in\/yayavar\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/jjamwal.in\/yayavar\/#\/schema\/person\/4b29cbc0fe18a86ec09a7c01177deac4","name":"Jaidev Jamwal","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jjamwal.in\/yayavar\/wp-content\/uploads\/2022\/01\/jjamwalin-logo-2-small.jpg","url":"https:\/\/jjamwal.in\/yayavar\/wp-content\/uploads\/2022\/01\/jjamwalin-logo-2-small.jpg","contentUrl":"https:\/\/jjamwal.in\/yayavar\/wp-content\/uploads\/2022\/01\/jjamwalin-logo-2-small.jpg","width":200,"height":200,"caption":"Jaidev Jamwal"},"logo":{"@id":"https:\/\/jjamwal.in\/yayavar\/wp-content\/uploads\/2022\/01\/jjamwalin-logo-2-small.jpg"},"sameAs":["http:\/\/jjamwal.in","https:\/\/www.facebook.com\/jjamwalin","https:\/\/www.instagram.com\/jamwal.jaidev\/","https:\/\/x.com\/JaidevJamwal","https:\/\/www.youtube.com\/channel\/UCuqw1ikTDrd3Lzf6RivuR6Q"],"url":"https:\/\/jjamwal.in\/yayavar\/author\/jaidev\/"}]}},"_links":{"self":[{"href":"https:\/\/jjamwal.in\/yayavar\/wp-json\/wp\/v2\/posts\/162","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jjamwal.in\/yayavar\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jjamwal.in\/yayavar\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jjamwal.in\/yayavar\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jjamwal.in\/yayavar\/wp-json\/wp\/v2\/comments?post=162"}],"version-history":[{"count":0,"href":"https:\/\/jjamwal.in\/yayavar\/wp-json\/wp\/v2\/posts\/162\/revisions"}],"wp:attachment":[{"href":"https:\/\/jjamwal.in\/yayavar\/wp-json\/wp\/v2\/media?parent=162"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jjamwal.in\/yayavar\/wp-json\/wp\/v2\/categories?post=162"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jjamwal.in\/yayavar\/wp-json\/wp\/v2\/tags?post=162"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}