The Oven

Project World => Talk about other things ... => Topic started by: Atari800xl on July 12, 2017, 07:19:30 AM

Title: New: NirSoft RegistryChangesView
Post by: Atari800xl on July 12, 2017, 07:19:30 AM
I'm sure lots of you know the great utility collections by NirSoft (Nir Sofer), so I wanted to share the news of his latest RegistryChangesView tool (v1.00). It works like the well-known RegShot, so again I think a lot of you know what I'm talking about. From the readme:

RegistryChangesView is a tool for Windows that allows you to take a snapshot of Windows Registry and later compare it with another Registry snapshots, with the current Registry or with Registry files stored in a shadow copy created by Windows. When comparing 2 Registry snapshots, you can see the exact changes made in the Registry between the 2 snapshots, and optionally export the Registry changes into a standard .reg file of RegEdit.

It's fully "portable" as well, so no need to install unwanted extras, just extract (only 150kb) and run!

http://www.nirsoft.net/utils/registry_changes_view.html

There's a native 64bit version as well!!, works fine in 64bit PE without WOW64 (just make sure you don't select non-existent hives)
Title: Re: New: NirSoft RegistryChangesView 1.00 (looks VERY promising!)
Post by: Lancelot on July 14, 2017, 03:09:39 AM
Create Registry does not work on SEx64 (Tested Win10x64 - basic build) also with Gena

with
"Error 5: Access is denied"

Enable VSS plugin does not fix.

reason behind probably is "shadow copy" dependency.

Tip:
RegShot utilties made for PE from day 1, RegistryChangesView seem to be made for normal Windows .


I hope in time Nir Sofer will update RegistryChangesView with PE support, maybe you can e-mail.

:turtle:
Title: Re: New: NirSoft RegistryChangesView 1.00 (looks VERY promising!)
Post by: JFX on July 14, 2017, 06:23:06 AM
Nice tool, and works fine here in WinPE.

But compared to RegShot2 it's leaves much to be desired.