The Un-Official Proxomitron Forum

Full Version: The First NT Tweak
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Before applying that registry tweak you read about on a site which caters to folks who reinstall Windows a lot, try this one. Actually it isn't a tweak but a reliable means of determining whether or not the tweak is legit.

First step, get System Internals stings utility and unzip it to a folder in your path such as the Windows folder. Then execute the following commands at the command prompt.

c:
cd\
cd %windir%
strings c:\%windir%\system32\ntoskrnl.exe > krnlstrings.txt
findstr /i REGISTRY_KEY_NAME krnlstrings.txt

If nothing is returned then it is because it isn't in the kernal and so chances are very good (but not 100%) that the tweak is entirely bogus.

Examples of a few bogus tweaks are the recently touted "EnableSuperfetch" tweak, the IRQNPriority tweaks where N is the IRQ in question and the IoPageLockLimit tweak. All entirely bogus.

Ok so what if the string you are looking for is in the kernal? Does that mean that the values being recommended are valid? No it doesn't. So your best bet is to scour Microsoft's sites in search of some authoritative documentation. If you cannot find any you should probably stop right there but one further step you can take is to perform a logged boot using System Internals NTRegMon. After Windows boots and you login again, start regmon, disable filtering and close it. Then open the logfile created and see if Windows queried for the key in question. If it didn't, why bother with it?
Reference URL's