Cracking the Code: Dive Deep into Windows Registry

[@MalwareAnalysisForHedgehogs]

Dear Mr Vanderpool. I am a computer scientist and have been working in IT security as malware analyst for 6 years. I decided to keep learning by watching one technical video every day and that's how I found your channel as I was looking for things on Windows internals. Thank you very much for your videos. I like especially the old ones with the lectures because it feels like sitting in a class room again and your teaching style is very engaging and passionate. I learn a lot from your videos and I also recommended your channel to my colleagues. Thank you!

[@TechsavvyProductions]

Thank you for taking the time and leaving a kind comment!!! Thanks for supporting the channel.

[@techtopics5782]

I think I learned more in the last 25 minutes about windows then registry then I've ever known in the last 25 years. Thanks!

[@TechsavvyProductions]

Thank you for watching the channel!

[@carlallison9530]

What a blessing I always feel smarter after I watch one your teaching videos

[@TechsavvyProductions]

Thanks for watching!!!

[@qarls4815]

I've been watching IT-related videos here for years now, and while there are many great ones out there, this here is lightyears ahead of anything I've encountered so far. it's well-structured, goes in-depth but starts with the basics, and is really easy to focus on and follow. I rarely leave comments on here, but this is some impressive work I'd usually not expect to be available for free.

[@TechsavvyProductions]

Thanks for the comment, hope you continue browsing our channel!

[@EveryDayImJavlin]

None of any of your videos I have watched in a row have any dislikes, that is awesome. Just shows the quality of content. Thank you

[@TechsavvyProductions]

Thanks for watching!

[@sellem3]

just wanted to tell you your videos are still helping and educating people out there. thanks a lot!!

[@TechsavvyProductions]

Thanks for the encouragement!

[@CoCoDaCo241]

Thanks! I was just thinking I should probably start to learn about the Windows Registry and then you uploaded this. Appreciate all the effort and knowledge you put into this. Thank you!

[@TechsavvyProductions]

Thank you for watching!

[@Pricestewart]

The smoothest teacher ever. Knowledgeable and pleasant. Thank you for this great presentation.

[@TechsavvyProductions]

Thank you for watching!

[@codegate615]

I love that you're still coming out with content.

[@TechsavvyProductions]

Thank you for watching! Content is worthless without it being of value to someone!

[@shaidu]

It makes me sad that I only recently discovered your Channel. Thank you for sharing. You are truly an amazing teacher. Cancelled my Netflix b/c I will be binge watching the videos on your Channel.

[@TechsavvyProductions]

Thanks for the comment and for watching the channel!

[@eniolajohnbamgbopa9497]

This helped me a lot to understand how the registry keys work. I enjoyed every section. Would look into your page more. Great Work!!!

[@TechsavvyProductions]

I enjoyed studying for this subject, it helped me better understand the registry. Thanks for the comment!

[@arcticjoe1142]

Your videos just keep getting better, Mr. V. I'm glad you're still making them.

[@TechsavvyProductions]

Thanks for the comment and for watching the channel!

[@freeandhappy8562]

Excellent content as always. This really helped to clarify some questions that I had regarding registries in general. Thanks so much for all you do for we IT pros who want to grow.

[@TechsavvyProductions]

I am just grateful you watch the content and find something to learn from it!

[@alexron2023]

Very nice presentation, I never quite understood how and what the registry works. This is very interesting and well executed

[@TechsavvyProductions]

Thanks for watching1

[@Mark-hc8vu]

Jesus Christ!!! Wish you were my professor during my college, because you incredibly awesome.

[@TechsavvyProductions]

Happy to help!

[@jamiewilliams8519]

So much valuable information! So glad I found your channel. Will be binge watching your videos now. Keep them coming!

[@TechsavvyProductions]

Thank you for taking the time to share and welcome to the channel!

[@jobyreynolds2040]

Thanks so much for sharing your knowledge. This was my first video of yours. First thing that came to mind was, you are the Bob Ross of IT. I'll certainly be back for more.

[@TechsavvyProductions]

Wow that's a compliment!! Thanks for watching!

[@ilyaaselmy6668]

This video is more than useful that gives most of the informations you need to understand the windows registry, you are more than awesome thanks, may God all mighty reward you for your efforts 😘

[@TechsavvyProductions]

Thank you for your comments and blessings, Thanks for watching!

[@lejnyovn9251]

Great work, Great videos, Clear Teaching, Quality content, Nice and cool presentation, Rare videos, Life saving videos for a tech. Expecting more videos. Thank you so much Mr. Lowell Vanderpool.

[@TechsavvyProductions]

Glad you like them!

[@ajaxSAF]

Thank you very much for all of your videos. I have found your content on Windows to be particularly helpful. This one of the only channels that goes "under the hood" of this operating system. I'll definitely recommend you to my peers.

[@TechsavvyProductions]

Thanks for watching and your comments!

[@just_the_job]

This video is amazing, I'm studying the MTA 98-365 Server Administration fundamentals and this goes into great detail as the book I'm using only briefly goes over it.

[@TechsavvyProductions]

The MTA series of texts are very basic and help with concepts but you need much more to solve problems. Keep learning!!!

[@just_the_job]

@@TechsavvyProductions Thanks for the reply, Shall do. I'm using multiple sources including your videos. Thank you for the content it is really appreciated, the pdfs are so handy.

[@LucasMoratoAraujo-v1n]

Greetings from Brazil. Excelent content, excelent teacher! Thanks for sharing your knowledge with us! ❤

[@TechsavvyProductions]

Obrigado pelo comentário, Damos as boas-vindas a todos os nossos amigos da tecnologia no Brasil

[@pankajvaish7730]

I appreciate you for sharing your valuable knowledge ... I am loving it

[@TechsavvyProductions]

Thanks for the comments and for watching!

[@KarthikK-gw7cc]

Thanks a lot for sharing your knowledge. It helped me a lot to understand the registry structure....lots of love and respect ....

[@TechsavvyProductions]

So nice of you to share kind words!

[@fytubevw]

Very solid stuff! Thanks a million!

[@TechsavvyProductions]

Thanks for watching!

[@silicium5472]

Very good video and very good presenter ! Thanks for the good stuff explained

[@TechsavvyProductions]

Thanks for watching!

[@queenofcats1]

I love the music. It's very rad

[@TechsavvyProductions]

Thanks for watching!

[@redeemingluvblog6025]

Great work. You are a blessing. I thank you kindly.

[@TechsavvyProductions]

Thanks for watching!

[@panchakosha]

That opening beat is fire!

[@TechsavvyProductions]

Awesome! Thanks for sharing!

[@souravaddi]

Great explanation. I found it very useful. thanks for making such videos. Keep going.. I want more of these. thanks again.

[@TechsavvyProductions]

Thank you, I will

[@chaminda512]

Fantastic as always

[@TechsavvyProductions]

Thanks again!

[@Pooja-xu4lp]

This is very helpful. Thanks for sharing it. Needed 1 help understanding, any registry changes I make in Registry editor, that it's not reflected when I try to access them in powershell and when I update registry from a PowerShell and get it, I see the updated one but not in the registry editor or next powershell window. Is any registroy update is volatile in nature and it's only visible in that session (powershell session or registry editor of that session?) What's required to reflect the update everywhere?

[@TechsavvyProductions]

Pooja: very interesting question let me look into this.. Thanks for watching

[@simplelife5926]

I appreciate that your sharing content

[@TechsavvyProductions]

Thanks for watching!

[@0tt0z]

Wow this was very interesting. Thanks for sharing your knowledge.

[@TechsavvyProductions]

Thanks for watching!

[@nathannaranjo52]

Awesome Videos, Professor Vanderpool! Your videos are helping me excel through my Cybersecurity Program at GCU. Your hard work in producing these videos is greatly appreciated. Thank you so much!

[@TechsavvyProductions]

Keep up the good work at your studies! Thanks for watching.

[@jeffsad8391]

Is true that registry edit can be only create a file or keys inside hive ?(I mean malicious key or folder if somebody want to do în your computer)

[@TechsavvyProductions]

The registry is a unique database for holding specific data, not files, hackers do use the registry to "auto-run" their code.

[@Svk332]

Best understanding video on registry thank you Sir

[@TechsavvyProductions]

Thanks for watching!

[@babakgholian3467]

Hi I have a problem with my WiFi when I start my PC it works OK but after a few hours it shuts off & I cannot turn it back on , when I try to open wlanext. Exe a command prompt opens 8 it closes very quick . I want to ask you what is the correct registry value for wlanext. Exe ?

[@TechsavvyProductions]

Babak Gholian, it sounds like your Transmitter chip is overheating and causing the WiFi card to fail. Can you reboot and everything works fine? How long does the card work until it stops. WiFi transmitter amplifiers draw 90% of the current for your card and often overheat and fail.

[@AydinJamshidi]

WOW love it... Best tutorial about windows registry

[@TechsavvyProductions]

Aydin, thanks for the comments and for watching!

[@redhawkrobin]

if you mess up a reg key badly,, can you use dism to repair it?

[@TechsavvyProductions]

Dism is used to check the files of the operating system and replace or download missing or update incorrect versions. It does not fix the registry. System restore is your best option for restoring the registry. www.howtogeek.com/howto/windows-vista/using-windows-vista-system-restore/

[@shiv9525]

Sir I have a question, is it possible to delete whole files of uninstalled software from computer without leaving single data regarding currently uninstalled software.....?

[@TechsavvyProductions]

I hope I am understanding correctly: if there are files left after you have uninstalled software can you delete those files? Yes. Thanks for watching!

[@shiv9525]

@@TechsavvyProductions but how sir can u make video on it plzzz

[@shiv9525]

Sir I have more doubts when r u free sir so that I can contact u and have a continuous conversation for a while.....I am eagerly waiting for ur reply sir😆😆😆😃😃

[@TechsavvyProductions]

feel free to contact me [e-mail]

[@shiv9525]

@@TechsavvyProductions thank u sir

[@donniexl1033]

Stupid question but, what would it mean if there WAS executable code in the registry, out of curiousity.

[@TechsavvyProductions]

There are 200+ registry entries that launch executable code, that creates plenty of problems. The registry structure is such that it can not store files. Your HD is designed for that.

[@kg3474]

Great work!

[@TechsavvyProductions]

Thanks for watching!

[@aslani.r3099]

Thanks for this applicable video.

[@TechsavvyProductions]

You are welcome

[@freedesigners7680]

Nice video. Thanks for sharing 😊

[@TechsavvyProductions]

Thanks for visiting

[@petephelp971]

Im trying to learn how to configure and administer Windows. Not only that but how Windows works and the various components that make up the operating system do you have any advice sir on what videos I should watch on your channel and labs/projects I should create?

[@TechsavvyProductions]

I would start here then move to the OSI network layer series. Day 1: Troubleshooting Windows Applications. What is a process and What are threads? kzbin.info/www/bejne/fmLIf2ihfK9opcU Day 2: Troubleshooting Windows Applications. Types of Applications and Processes. kzbin.info/www/bejne/g6qQn2VsjdFqpc0 Day 3: Troubleshooting Windows Applications: Process States kzbin.info/www/bejne/nWebhoR5fslnq7M Day 4: Process Explorer Metrics and Troubleshooting Windows Applications kzbin.info/www/bejne/ZpDWpYGon6epb80 Day 5: A Look at Microsoft Store Apps and Why we don’t Troubleshoot them! kzbin.info/www/bejne/i6eym6CFjbqIa6s Day 6: Linux GUI Applications are coming to Windows kzbin.info/www/bejne/fJrOi2OqntSpiZo Day 7: Understanding Application *.DLL files kzbin.info/www/bejne/lXaplISAeJKfjbM

[@azurestarton]

How do I open files as administrator,when a hacker hacked my laptop? And they set themself up as the administrator now.What can I do,to kick them off as administrator?

[@TechsavvyProductions]

If you know for sure you have been hacked, from a security stand point download a fresh copy of Windows and format the laptop hard drive and reinstall. You can not be certain of the condition of the laptop even if you regained admin rights on the laptop.

[@johnsenchak1428]

My question Mr V is that I always see that DWORD as 32 bit when making changes, "but" if it's a 64 bit OS then why isn't the QWORD used more often . I have yet to find anyone to explain this to me, it's like the registry is resorting to the WOW64 with backwards compatibility to 32 bit (DWORD) I think this is real odd that if you wanted to take full advantage of a 64 bit operating system you would use the QWORD for registry changes I do registry backups on my main computer weekly

[@TechsavvyProductions]

John very good question and astute observation, 32-bit values can be easily be converted to 64 bit values (binary computers do this with little impact on performance). I imagine much of the 32 bit conversion of Windows to 64 bit had limited change on the 32-bit original registry.

[@i87san]

Love your videos sir. Keep doing great quality content.. 🙏

[@TechsavvyProductions]

Thanks for the comment and for watching!

[@0xHxt3.0]

Thank you! Much appreciated!

[@TechsavvyProductions]

You're welcome!

[@oudr9858]

it's the best tutorial on youtube about " Windows Registry "

[@TechsavvyProductions]

Thank you for watching!

[@filipsjostrand3885]

Great! Thanks a lot for this content :)

[@TechsavvyProductions]

So glad you enjoyed. Thanks for watching!

[@mevsme5007]

Hello sir i got blue screen problem because i changed random regiatry i m so fool please help me get back i have tried allll the methodss..i canbot ubderstand please help.

[@TechsavvyProductions]

You may have to reset your PC. Watch my newest video on the channel.

[@yashpreetricky]

amazing content, keep uploading

[@TechsavvyProductions]

More to come!

[@yashpreetricky]

@@TechsavvyProductions lucky us

[@Dr_MKUltra]

What’s your opinion on unix-like systems that don’t utilise a registry?

[@TechsavvyProductions]

All the major operating systems are amazing and developed by some of the most brilliant software engineers in the world. The Mac-OS, Android, iOS, Linux, BSD, Windows and UNIX are all different in some respects but are all corporate and enterprise ready. Using a registry concept for system and application configuration is simply a Microsoft choice.

[@Dr_MKUltra]

Lowell Vanderpool thank you for the prompt response.

[@docteurgreene]

Hi Lowell! today everybody is talking about the virus so this is good to return to basics and watch a good Windows video :):):) By the way, I always thought HK was for "Hive" and not "Handles", i don't know why... And last question, do you know something about the HKLM\COMPONENTS key? because I solved many issues on Windows computers at work by removing or modifying this key that is supposed to be "hidden" most of the time, but I don't really understand the root cause of the problem (why this key is suddenly stuck online...)

[@TechsavvyProductions]

You stay healthy over there in the great country of France! The HK is handles although who would argue if you called it Hive? Thanks for sharing your experience with HKLM\COMPONETS key, I will look into this, sound interesting.

[@anujverma9444]

hello sir and thank you for your valuable services , i had been studying from your videos for about a month . Your videos will get me through the interview and finally a job HOPE SO .. such a clear understanding on topics helped me but sir plzzzzzzzzzzzzzzzzzzzzzzzzzzzz upload more videos on topic "ACTIVE DIRECTORY" their are only a few of them ..and every1 is telling AD like "waaaaa its very tough , very tough " . help us to understand sir . thank u

[@TechsavvyProductions]

Thank you Anuj for the feedback and for watching!

[@TheCorei71]

Simply Amazing!!

[@TechsavvyProductions]

Thank you! Cheers!

[@GooogleGoglee]

After this educational video I am more convinced ... Linux forever!

[@TechsavvyProductions]

Awesome! Thanks for watching

[@Kicksta-1978]

Iam asking my self How to make a shortcut Ctrl + Alt + NumLock = Fn how to make a enable and disable hotkey wth it in regedit ??

[@TechsavvyProductions]

Here’s how you can create a shortcut Ctrl + Alt + NumLock = Fn and enable/disable hotkeys with it in regedit: Open Registry Editor by pressing Windows key + R and typing “regedit” into the Run box. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layout. Right-click on Keyboard Layout and select New > Binary Value. Name the new value “Scancode Map”. Double-click on Scancode Map to open it. In the Value data field, enter “00 00 00 00 00 00 00 00 02 00 00 00 3A 00 45 E0 5B E0”. Click OK to save your changes. Restart your computer for the changes to take effect1. I hope this helps!

[@Kicksta-1978]

@@TechsavvyProductions tanks de computer is already cone but next time when my mother bring it i will try it thanks

[@hoseashpm7810]

This is amazing

[@TechsavvyProductions]

Thanks for watching!

[@polonia66]

I am very happy you are creating such a great videos. Even I am intro IT and I know a litte bit - its always good to know more. I would like to ask you. Can you point any indicators for cybersecurity guys? Create rule - if anyone would try to change SAM folder then trigger the alert? I am just trying to think forward and understand.

[@TechsavvyProductions]

You are thinking about security very well! You can setup auditing for the file and then using event viewer to run a batch file to either email you or text. This requires extra software but it can be done.

[@polonia66]

@@TechsavvyProductions thank you so much

[@loki6903]

Thank you 👍👍👍

[@TechsavvyProductions]

Thank you for watching

[@basavarajchougala3384]

Dear Sir, Each Local User has his own HKEY_CURRENT_USER Settings. What I need is... I want to copy the Content of This Path ==>>HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager TO HKEY_LOCAL_MACHINE Folder In Registry . Because Whatever changes I do.... It is going to affect on ALL Local User Accounts Using Administrator Account. is it Possible? Please Do Help in this regard as early as possible...... Thank you for Detailed Explanation about Registry Section of windows. Basavaraj, From India.

[@TechsavvyProductions]

Are you just wanting Ads and unwanted applications from 3rd parties to not install?

[@synthoelectro]

I think a lot of our many problems would run better and faster if windows in the future incorporated the way linux does things, because in linux there is no registry.

[@TechsavvyProductions]

Great point, the registry has been a sore issue for Microsoft but it has survived all these years.

[@miss_tech]

The old présentation is explained better, but the demo is nice

[@TechsavvyProductions]

Thanks for the feedback!

[@thaharahman9568]

Nice

[@TechsavvyProductions]

Thanks for watching!

[@danieldroguett2407]

In other words, if we master the Windows registry, we have been in data analyst for 2 years at university hahaha

[@TechsavvyProductions]

Thanks for watching!

[@ovih6069]

love you sir.....

[@TechsavvyProductions]

Thanks for watching!

[@mradminus]

Registry = Sink

[@TechsavvyProductions]

Thanks for watching!