You may have heard of freeware that allow you to recover deleted files from your Windows operating system – but what if you were working with the Windows Registry and you accidentally deleted a registry key?
Well, we always recommend that you backup the registry first, before working in it, but a situation can arise where you find that you don’t have a backup and you have erroneously deleted a key.
Well, this is where freeware Yaru can help you! If you delete a registry key by mistake, Yaru scans for and tries to list the deleted registry keys. Right clicking the deleted items will give you an option to Export the key/s to a file, which can then be easily imported back to the registry. It is not only able to find deleted registry keys, but it can even provide additional details like where the key/s were deleted from.
Yaru has many other features too. It is a minimal version of a registry viewer designed to try to parse the Windows registry hives and display the results in a tree view GUI. It has a powerful and a fast search too.
It has the ability to take a snapshot of the running hive(s) and examine them. Since the Windows OS locks down the active hives from other processes reading them, Yaru can resort to raw NTFS disk reads to read any of the desired hives. Consequently, this requires the user to run this tool with administrative privileges. While this approach adds complexity to Yaru, it ensures that there is no corruption or changes to the active hive during analysis.
You can get more details about it and download it from here.
Yaru works on Windows 7, Windows Vista and Windows XP. There is also a version available for Linux.