What Is HKEY in Computers?
While Windows computers use a tool called the registry to save important data, this is not a function of computers that use either the Mac or Linux operating system. Upon viewing the registry, you will see sections, or hives, of information with the prefix "HKEY_." These hives allow you to navigate further into the registry.
-
The Registry
-
The Windows registry is a hierarchical database that stores hardware, software and system information. The data in the registry is typically accessed continually while you use the program or your computer is on. The registry is divided in sections, known as hives. Each hive name begins with the phrase "HKEY_". For example, one hive is known as "HKEY_LOCAL_MACHINE\System" and deals with system information. Other hives include information for the default user, "HKEY_USERS\DEFAULT," and software data, "HKEY_LOCAL_MACHINE\Software."
Accessing the Registry
-
If you see instructions telling you to look for data in any HKEY location, you must open the registry to access the hives and contained data. From the Windows Start Menu, type "registry" into the search bar to find the option. Alternatively, press the Windows key and "R" simultaneously. Type "regedit" into the dialog box and hit "Enter" to bring up the editor. You will see the primary hives, including options such as "HKEY_CLASSES_ROOT" and "HKEY_USERS."
-
Navigating Hives
-
You will see keys in the registry listed in a hierarchical order, similar to "[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]." The first part of the location denotes the hive, which you must expand in order to find the directory "Software." Expand each directory to find the next location. When you open these keys on the left, individual values will appear on the right. Some keys will contain long lists while others may have only one or two options. Each line shows the name of the value and the data contained as well as the type of data. For example, some data may be a single digit of "0" or "1" to represent "no" or "yes," respectively. Other values are a series of alphanumeric strings between brackets.
Significance
-
The Windows registry is one area where malicious software may attack. For example, programs that download to your computer without your knowledge may add data to the startup section so that the malware starts whenever you boot your computer. This is why some malware removal guides instruct you to delete this data from the registry. However, the registry contains essential data that can cause your computer to malfunction. For instance, you can remove critical startup programs by accident. You should carefully follow any guides and, when in doubt, consult a professional to look for signs of infection in the hives of your registry.
-