Retrieving Devices From The Registry
WinXPTalk.com Forum Index WinXPTalk.com
Forums for Windows XP users.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winxptalk.com
Retrieving Devices From The Registry

 
Post new topic   Reply to topic    WinXPTalk.com Forum Index -> Security
Author Message
ForensicFrank
Guest
Posted: Wed Nov 09, 2005 5:27 pm    Post subject: Retrieving Devices From The Registry Reply with quote
I am trying to narrow down some information from the Windows registry on how
Windows deals with connected hardware.

Under HKLM/System/ControlSetxxx/Enum Windows lists a number of keys (e.g.
IDE, USB, USBSTOR) under each of these there are devices listed (e.g. IDE you
have IDE drives listed) what I am trying to find out is how Windows deals
with these keys.

I see some drives listed under IDE (e.g. CD Drives) that I have not
connected to this machine at any time.

Anyone who can shed some light on this part of the registry and how it is
deal with I would look forward to reading it.

Thanks
Back to top
Steven L Umbach
Guest
Posted: Thu Nov 10, 2005 12:24 am    Post subject: Re: Retrieving Devices From The Registry Reply with quote
Be very careful in messing with those keys. You also may want to use Device
Manager and then select show hidden devices under view to more details. From
what I can tell those are entries that PNP finds. It is not unusual to see
entries from hardware no longer installed. I don't know why you are seeing a
mysterious entry but you might try temporarily disabling your cdrom in cmos
and rebooting to see if those entries go away. --- Steve



"ForensicFrank" <mortonm74@hotmail.com> wrote in message
news:506347A9-EE53-4D8D-8AB7-113485592C15@microsoft.com...
Quote:
I am trying to narrow down some information from the Windows registry on
how
Windows deals with connected hardware.

Under HKLM/System/ControlSetxxx/Enum Windows lists a number of keys (e.g.
IDE, USB, USBSTOR) under each of these there are devices listed (e.g. IDE
you
have IDE drives listed) what I am trying to find out is how Windows deals
with these keys.

I see some drives listed under IDE (e.g. CD Drives) that I have not
connected to this machine at any time.

Anyone who can shed some light on this part of the registry and how it is
deal with I would look forward to reading it.

Thanks
Back to top
 
Post new topic   Reply to topic    WinXPTalk.com Forum Index -> Security All times are GMT
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Office Forums Access Forums Windows Server Exchange Server Help
New Topics Powered by phpBB