(((   .   .   :
-   , ,  .      ,        .)))


 ( ) -    ,  ,       Microsoft Windows.    ,       ,   ,         ,    .          "Hive".         "". Microsoft       "".             %SystemRoot%\system32\config ( C:\windows\system32\config).    Windows 2000/XP     
default
sam
security
software
system 
           , ,             (  , , , ).           -   (REGEDIT.EXE, REGEDT32.EXE),     .     "" "" - regedit.exe

[IMG]
regedit.png


           (root keys) .          (subkeys)   (value entries). 
    :
HKEY_CLASSES_ROOT (   HKCR) -            COM  ActiveX.
HKEY_CURRENT_USER (HKCU)-     ( ,  , ).        HKEY_USERS\  (SID)   S-1-5-21-854245398-1035525444-...
SID -  ,    ,   .        .   Windows        ,       .  ,           ,              ,       .  SID   Security ID.    SID       PsGetSID.exe   PSTools 
HKEY_LOCAL_MACHINE (HKLM) -      .    .        .     , ,  .
HKEY_USERS( HKU) -        ( )        .
HKEY_CURRENT_CONFIG (HKCC) -     .    ,        " " - "" - ""- " ".    HKCC     ,        HKLM
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\CurrentControlSet\Hardware Profiles\Current 

               .   , ,     ,      .
    -,    HKLM   2    SAM  SECURITY,            (Local System Account),       (system services). .     ,        Local System,      PSExec
psexec.exe -i -s regedit.exe
   -   " PSTools"

                   ,    .           ,      . ,     ,       . 

[IMG]
vosklic.png

:         ,        ,  .      Wind`    . !        ,   !!!