RegdatXP reads non active NT based registry files like Ntuser.dat and usrClass.dat and compares them to the current Registry. It is an NT version of Regdat and has binary Search and Replace functions for the Registry. Registry Backups can be done by command-line arguments.
The full version can recover data from corrupt registry files, repair a corrupt file directly in many cases and remove user passwords from offline Sam files. RegdatXP can also open NT based registry files when running on Win9x/ME.
Fixes the following:
This contains all the information in the current SOFTWARE, SYSTEM, SAM, and SECURITY files of the System32Config directory.
This key contains the .Default and other user keys and a repetition of the HKEY_CURRENT_USER key.
This contains all the information stored in the Ntuser.dat and usrClass.dat of the current user.
This is a repeat of the HKLMSoftwareClasses key and contains the information pertaining to the file associations and the OLE references that make the shell.