Wednesday, March 13, 2013

How to Restore the Registry Hives From a System Restore Snapshot

This applies to Windows XP.
When the windows registry is corrupt Windows doesn't start and appears that message:

Windows XP could not start because the following file is missing or corrupt: \WINDOWS\SYSTEM32\CONFIG\SYSTEM
or
Windows XP could not start because the following file is missing or corrupt: \WINDOWS\SYSTEM32\CONFIG\SOFTWARE

To fix this problem:
(ADVANCED KNOWLEDGE REQUIRED)

1.- Take out the hard disk drive and connect it to another computer.

2.- Go to (X may be the unit you have connected) X:\Windows\system32\config.

3.- Make a new folder called Backup.

4.- Move to the folder Backup the files: Default, Sam, Security, Software, System.

5.- Get acces to X:\system volume information    





  • Click Start, and then click My Computer.
  • On the Tools menu, click Folder Options.
  • On the View tab, click Show hidden files and folders.
  • Clear the Hide protected operating system files (Recommended) check box. Click Yes when you are prompted to confirm the change.
  • Clear the Use simple file sharing (Recommended) check box.
  • Click OK.
  • Right-click the System Volume Information folder in the root folder, and then click Properties.
  • Click the Security tab.
  • Click Add, and then type the name of the user to whom you want to give access to the folder. Typically, this is the account with which you are logged on. Click OK, and then click OK again.
  • Double-click the System Volume Information folder in the root folder to open it.


  • 6.-Locate the recent snapshot, identified by the Restore Point Sequence ID (RP1, RP2, RP3 and so forth…). The highest number indicates the most recent snapshot, and the lowest number indicates the oldest snapshot. Choose the one that you want to restore. Alternately, you can also sort the System Restore snapshots using the Date column.

    7.-Select the following files (Use the CTRL key to select multiple files.)
    _REGISTRY_MACHINE_SAM
    _REGISTRY_MACHINE_SECURITY
    _REGISTRY_MACHINE_SYSTEM
    _REGISTRY_MACHINE_SOFTWARE
    _REGISTRY_USER_.DEFAULT

    8.-Copy the selected files to X:\Windows\system32\config

    9.-Rename the files copied deleting the entry _REGISTRY_MACHINE_

    10.- Connect the hard disk on its original computer.

    No comments:

    Post a Comment