Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Monday, May 13, 2019 7:10 AM
{Registry Hive Recovered} Registry hive (file): '\SystemRoot\System32\Config\SOFTWARE' was corrupted and it has been recovered. Some data might have been lost.
1) What is the method in which a registry hive is identified as being corrupted?
2) What is the method in which a registry hive is identified as being recovered?
3) What determines whether data is lost?
4) How do you identify the lost data?
5) Is it similar or different from regback?
6) What is the significance of one entry as compared to two or three?
7) How can an end user check a registry hive? (similar to checking the component store or protected files with restorehealth or scannow)
8) If a problem were found with a registry hive how could it be manually recovered?
All replies (5)
Tuesday, May 14, 2019 6:24 AM
Hi,
>1) What is the method in which a registry hive is identified as being corrupted?
Registry errors can manifest in strange ways, such as by blue-screen crashes or by cryptic error messages occurring when your computer starts up. Sometimes things are a little more obvious, and you’ll get an explicit message when your PC crashes that a registry error has occurred, or upon startup Windows Registry Checker may tell you that “Windows registry is damaged.”
2) What is the method in which a registry hive is identified as being recovered?
Run chkdsk /f /r
Run sfc /scannow
Do a system restore to where your registry was not saying it is corrupt.
3) What determines whether data is lost?
If your computer does not restart, the registry hives may be corrupted. The error messages may vary.
4) How do you identify the lost data?
Error message.
5) Is it similar or different from regback?
Windows 10 includes a task that creates backups of the Windows Registry regularly when the system is idle. These backups are placed in the C:\Windows\System32\config\RegBack and can be used to restore the Registry.
6) What is the significance of one entry as compared to two or three?
Please describe your issue in detail.
7) How can an end user check a registry hive? (similar to checking the component store or protected files with restorehealth or scannow)
Press Win+R, type or paste regedit, and press Enter.
Click the HKEY_LOCAL_MACHINE key.
Click the File > Load Hive menu, and select the registry hive file (eg. NTUSER.DAT).
Choose an unique name, and click OK.
8) If a problem were found with a registry hive how could it be manually recovered?
Please refer to:https://support.microsoft.com/en-sg/help/822705/registry-troubleshooting-steps-for-advanced-users
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Tuesday, May 14, 2019 8:21 AM
1) The registry hive recovery is seen in the event viewer.
Scannow checks specific windows protected files that are part of the operating system.
Chkdsk switches check the drive file system.
2) Please display scannow and chkdsk reports where each fixed a registry hive.
3) The typical message displays that data may have been lost.
How can you check to see whether there was or was not a data loss?
4) Regback has failed since Windows 1703. It last worked with Windows 1607. What information is available whether it will or will not be fixed for Windows 1903?
https://www.ghacks.net/2018/10/31/windows-10-bug-prevents-registry-backup-creation/
5) When there are no crashes and the event viewer is scanned registry hive recovery entries may be displayed.
These may occur when scannow, restorehealt, and chkdsk display no problems. What else should be checked?
Please post Microsoft links on registry hives:
a) What triggers the corruption check?
b) How often is the corruption check made?
c) What is the registry hive compared to to find corruption?
d) Which Windows log files display the corruption check, findings,repair,etc.?
e) Can a registry hive be copied from one computer to another or is each hive unique?
Tuesday, May 14, 2019 8:44 AM
Hi,
Please describe what issue you have been had.
For more information, please refer to the following article:
/en-us/windows/desktop/sysinfo/about-the-registry
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Tuesday, May 14, 2019 8:53 AM
On Technet I troubleshoot problems in many threads after collecting event viewer files.
These entries have appeared in many logs so I'm looking for detailed information on these entries.
Wednesday, May 15, 2019 8:25 AM
Hi,
> Can a registry hive be copied from one computer to another or is each hive unique?
Just copying to the new machine is no guarantee of it working.
Much of the registry is very specific to the computer and its current configuration. Many changes to the registry are deleted or replaced when you restart or log off and log on again.
The final registry that you see with each operating system is built during Windows Setup by template files found in the Windows installation source files. These files contain basic, generic values that are combined with user input and hardware and configuration specifics to create the registry found on each unique Windows installation. This is one of many reasons why the registry files from one Windows installation cannot be used on another Windows installation, even if the hardware appears to be identical.
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].