Regedit Pe - Ready For Testing!, Need feedback! Easily edit remote hives. Options

[mlazovjp]

Like many of you, I find editing remote registry hives in WinPE a royal pain.

I wrote a little tool which I hope will make this a little easier for all of us.

I have tested this tool extensively on my system, but I haven't tested it on a wide range of systems. Any and all feedback would be appreciated. I'll try to update this as I get time.

I'll be posting the necessary download information in a few minutes.

[mlazovjp]

OK, the .ZIP file can be found here.
http://jeremy.themlazovskys.com/RegEditPE/

Copy the .ZIP file to your Plugins folder, and extract the contents. It should create the correct plugin folder automatically.

[airburst]

Awesome! This works very well for me and avoids the 2-step process.

Thanks

[Rootman]

OK, the .ZIP file can be found here.
http://jeremy.themlazovskys.com/RegEditPE/

Copy the .ZIP file to your Plugins folder, and extract the contents.  It should create the correct plugin folder automatically.

Looks cool. Seems to work fine for me too.

Do you know if it will finally allow scanning of the registry for AdAware or Search and Destroy? Do these apps look at ALL the registry or just a hardcoded set of branches?

[Troglodyte]

Do these apps look at ALL the registry or just a hardcoded set of branches?

Unfortunatly, I am almost certain that it is the later... a "hardcoded set of branches."

[mlazovjp]

Do you know if it will finally allow scanning of the registry for AdAware or Search and Destroy?  Do these apps look at ALL the registry or just a hardcoded set of branches?

I knew someone was going to ask that

At the moment, no, it won't fix the problems you mentioned. Basically, I was trying to write a more user-friendly version of the LoadHive tool that comes with Bart's PE Builder.

I have a few ideas, but I doubt anything will happen. I'll play around with it a little and see what I can come up with, but I may not get a chance to really work on it for a little bit. Just got back from vacation and I have a lot of work to do

[this-is-me]

Can you please post or include your .au3 file so I can make a customized version for my own use?

[mlazovjp]

Can you please post or include your .au3 file so I can make a customized version for my own use?

I'll try to get it posted by the end of Wednesday.

I am going to GPL the code, and I just have to look into what that entails.

[crazy.cat]

Regeditpe don't works on my pc with Windows2000 sp4.
When launch the program on the cd I have this error

Auto It error
Line 0
Splashimage on ("regeditpe 0.1",@tempdir & "\regeditpelogo.gif",383,171,-1,-1,-1

Error: the request picture file could not be loaded

[mlazovjp]

Regeditpe don't works on my pc with Windows2000 sp4.
When launch the program on the cd I have this error

Auto It error
Line 0
Splashimage on ("regeditpe 0.1",@tempdir & "\regeditpelogo.gif",383,171,-1,-1,-1

Error: the request picture file could not be loaded

Just to clarify ... are you running RegEditPE in Win2k, or in WinPE?

It should only be run in WinPE. If you are running it in WinPE and it is barfing, let me know.

[crazy.cat]

Running in WinPe, start on cd.
(I'm Italian, my English is bad)

[Analyst]

I get the same error running it in BartPE built on WinXP Pro wSP1. I even used a file explorer and saw where it did create the regeditpelogo.gif file in B:\ . I used Irfran View to verfy the pciture file was readable.

[droemel]

On my machine (PE with VirtualPC) it starts Regedit and then it stalls at "90% Completed".

[OT32]

Hello

I have same problem with a build from W2KSP4, it stops at 90% complete, the opened reg-window is as I use regedit.exe.

[mlazovjp]

Hello

I have same problem with a build from W2KSP4, it stops at 90% complete, the opened reg-window is as I use regedit.exe.

I see it still needs some work. That's why it is at version 0.1

OK, I have a Project page for it on SourceForge. Once I get the site setup and I learn how to use CVS a little, I'll be posting the source code there. I'll post an update here when that happens.

I think I have an idea what the issue might be with the logo issue some of you are having.

Will one of you run WinPE, go to a DOS promtp, and type "set" and then <enter>?

Let me know what the value is on the right-hand side of the uequals sign.

For those of you who have the script hanging at 90%, can you please tell me exactly what the window title is for RegEdit? NOTE: The title is case sensitive.

If someone wants to test the slightly updated .exe file, send an e-mail to:
mlazovjp-RegEditPE6744@mailblocks.com

Once I get it working for those of you having problems I'll upload the update.

[droemel]

For those of you who have the script hanging at 90%, can you please tell me exactly what the window title is for RegEdit? NOTE: The title is case sensitive.

The title is "Registrierungs-Editor" - that's German for "Registry-Editor".

And this is my environment in PE:

CODE

D:\i386\System32>set
ALLUSERSPROFILE=B:\Dokumente und Einstellungen\All Users
AutoRun=1
CommonProgramFiles=D:\Programs\Common Files
COMPUTERNAME=MININT-JVC
ComSpec=D:\i386\system32\cmd.exe
OS=Windows_NT
Path=D:\i386;D:\i386\System32;D:\Bin
PATHEXT=.COM;.EXE;.BAT;.CMD
ProfilesDir=B:\Dokumente und Einstellungen
ProgramFiles=D:\Programs
PROMPT=$P$G
ramdrv=B:
SystemDrive=D:
SystemRoot=D:\i386
temp=B:
tmp=B:
USERPROFILE=B:\Dokumente und Einstellungen\Default User
windir=D:\i386

[mlazovjp]

For those of you who have the script hanging at 90%, can you please tell me exactly what the window title is for RegEdit? NOTE: The title is case sensitive.

The title is "Registrierungs-Editor" - that's German for "Registry-Editor".

OK, THAT would be the reason that it is hanging at the launching of RegEdit. The program looks for a window with the title of "Registry Editor" and then when it appears it hits 100%. I'll change that in the next version.

I hadn't anticipated having problems with other languages

[mlazovjp]

One more thing for those of you with non-English copies of Windows.

Is your registry editor executable named regedit.exe, or is it different?

If it IS regedit.exe, that'll make things a little easier.

[droemel]

Yes it's also named regedit.exe in German.

[mlazovjp]

OK, I am rewriting some of the code.

It used to look for a "Documents and Settings" folder on fixed drives and assume that was where the ntuser.dat fiels were located.

One of the things I am changing it so that it loads the SOFTWARE registry hive from the remote hard drive and gets the proper profile directory name from that registry hive.

I am also changing it so that it detects when RegEdit is running and is closed by the process name, and not by the window title.

These changes should make RegEdit PE a little more friendly towards non-US versions of Windows.