Notifications
Clear all
General (Technical, Procedural, Software, Hardware etc.)
3
Posts
3
Users
0
Reactions
665
Views
Topic starter
28/01/2011 11:44 am
Hi
how to extract start-up files from Image of a Vista machine??
28/01/2011 11:56 am
Extract the windows hive files for "Ntuser.dat" and "Software" hives files for the image and use FTK Registry view to open the hive files and open the “Microsoft/Windows/CurrentVersion/Run/” registry key and you get the list of start-up application and their paths.
28/01/2011 8:25 pm
Don't forget your friendly prefetch folder/files.