JSI Tip 1903. The reskit ScanReg.

Scanreg is a 32-bit, character-based, command-line 'Registry GREP' that enables you to search for strings in Registry key names, value entry names, or actual value data. You can use this utility to scan registries on local or remote computers running Windows NT or Windows 95.

Command-line syntax

scanreg [-s] searchstring [-k] [-v] [-d] [[-r]rootkey] [-c] [-e] [-n]

where

OptionMeaning

-sThe string to search for

-rThe Registry subtree from which to start searching (default: HKEY_CURRENT_USER).

Rootkey can be abbreviated as follows:

HKEY_LOCAL_MACHINE lm

HKEY_CURRENT_USER cu

HKEY_CLASSES_ROOT cr

HKEY_USERS us

-kSearch keynames (Note: You must specify either -k -v or -d, and you may specify any combination of the three.)

-vSearch value names

-dSearch data

-cSearch case sensitive (default: not case sensitive)

-eReturns only an exact match (default: returns all matches)

-nDisables use of color in output (default: keys red, values green, data yellow)

Examples

Valid examples of Scanreg usage include:

SCANREG -sWindows -k
SCANREG -s:Windows -v
SCANREG -s=Windows -kvc
SCANREG -s Windows -k -ve
SCANREG -s Windows -k -v -dn
SCANREG -s Windows -kvd
SCANREG /s Windows -kvd
SCANREG /s Windows -kvd -rlm
SCANREG /s Windows -kvd -rsoftware
SCANREG /s Windows -kvd -r\HOTDOGlmsystem
SCANREG /s Windows -kvd -r\HOTDOGHKEY_LOCAL_MACHINEsystem
SCANREG Windows lm -kvd
SCANREG Windows -kvd
SCANREG Windows HKEY_CURRENT_USERsoftware -kvd