China DOS Union

How can I compress or copy them while Windows XP is running normally?

I've been looking for a simple backup method for the registry. If I directly COPY or compress them, it says the files are in use. What program needs to be terminated to cancel this prompt so the operation can proceed normally?

Files:
C:\WINDOWS\system32\config>dir
Volume in drive C has no label.
Volume Serial Number is 7C82-39EC

Directory of C:\WINDOWS\system32\config

2008-07-09 16:57 <DIR> .
2008-07-09 16:57 <DIR> ..
2008-09-29 15:14 65,536 AppEvent.Evt
2008-09-29 15:14 524,288 DEFAULT
2008-07-09 16:58 65,536 default.sav
2008-09-29 15:14 262,144 SAM
2008-08-12 20:17 65,536 SecEvent.Evt
2008-09-29 15:14 262,144 SECURITY
2008-09-29 15:14 18,612,224 SOFTWARE
2008-07-09 16:58 1,060,864 software.sav
2008-09-29 15:14 65,536 SysEvent.Evt
2008-09-29 23:11 3,670,016 SYSTEM
2008-07-09 16:58 401,408 system.sav
2008-07-09 17:05 <DIR> systemprofile
2008-07-09 16:58 262,144 userdiff
12 File(s) 25,317,376 bytes


C:\WINDOWS\system32\config>taskkill /f /im "explorer.exe"
SUCCESS: The process "explorer.exe" with PID 136 has been terminated.

:\WINDOWS\system32\config>copy . d:\
\AppEvent.Evt
\DEFAULT
The process cannot access the file because it is being used by another process.
\default.sav
\SAM
The process cannot access the file because it is being used by another process.
\SecEvent.Evt

[ Last edited by qwertl on 2008-9-30 at 00:19 ]

unlocker

I see it's SYSTEM

Haven't ended it... don't know what the consequences would be...

Suggest testing it in a virtual machine