How can I compress or copy these files under XP? - China DOS Union Forum

How can I compress or copy them while Windows XP is running normally?

I've been looking for a simple backup method for the registry. If I directly COPY or compress them, it says the files are in use. What program needs to be terminated to cancel this prompt so the operation can proceed normally?

Files:
C:\WINDOWS\system32\config>dir
Volume in drive C has no label.
Volume Serial Number is 7C82-39EC

Directory of C:\WINDOWS\system32\config

2008-07-09 16:57 <DIR> .
2008-07-09 16:57 <DIR> ..
2008-09-29 15:14 65,536 AppEvent.Evt
2008-09-29 15:14 524,288 DEFAULT
2008-07-09 16:58 65,536 default.sav
2008-09-29 15:14 262,144 SAM
2008-08-12 20:17 65,536 SecEvent.Evt
2008-09-29 15:14 262,144 SECURITY
2008-09-29 15:14 18,612,224 SOFTWARE
2008-07-09 16:58 1,060,864 software.sav
2008-09-29 15:14 65,536 SysEvent.Evt
2008-09-29 23:11 3,670,016 SYSTEM
2008-07-09 16:58 401,408 system.sav
2008-07-09 17:05 <DIR> systemprofile
2008-07-09 16:58 262,144 userdiff
12 File(s) 25,317,376 bytes

C:\WINDOWS\system32\config>taskkill /f /im "explorer.exe"
SUCCESS: The process "explorer.exe" with PID 136 has been terminated.

:\WINDOWS\system32\config>copy . d:\
\AppEvent.Evt
\DEFAULT
The process cannot access the file because it is being used by another process.
\default.sav
\SAM
The process cannot access the file because it is being used by another process.
\SecEvent.Evt

[ Last edited by qwertl on 2008-9-30 at 00:19 ]

Floor1　qwertl	Posted 2008-09-30 00:15
中级用户　Posts 243　Credits 461
How can I compress or copy them while Windows XP is running normally? I've been looking for a simple backup method for the registry. If I directly COPY or compress them, it says the files are in use. What program needs to be terminated to cancel this prompt so the operation can proceed normally? Files: C:\WINDOWS\system32\config>dir Volume in drive C has no label. Volume Serial Number is 7C82-39EC Directory of C:\WINDOWS\system32\config 2008-07-09 16:57 <DIR> . 2008-07-09 16:57 <DIR> .. 2008-09-29 15:14 65,536 AppEvent.Evt 2008-09-29 15:14 524,288 DEFAULT 2008-07-09 16:58 65,536 default.sav 2008-09-29 15:14 262,144 SAM 2008-08-12 20:17 65,536 SecEvent.Evt 2008-09-29 15:14 262,144 SECURITY 2008-09-29 15:14 18,612,224 SOFTWARE 2008-07-09 16:58 1,060,864 software.sav 2008-09-29 15:14 65,536 SysEvent.Evt 2008-09-29 23:11 3,670,016 SYSTEM 2008-07-09 16:58 401,408 system.sav 2008-07-09 17:05 <DIR> systemprofile 2008-07-09 16:58 262,144 userdiff 12 File(s) 25,317,376 bytes C:\WINDOWS\system32\config>taskkill /f /im "explorer.exe" SUCCESS: The process "explorer.exe" with PID 136 has been terminated. :\WINDOWS\system32\config>copy . d:\ \AppEvent.Evt \DEFAULT The process cannot access the file because it is being used by another process. \default.sav \SAM The process cannot access the file because it is being used by another process. \SecEvent.Evt [ Last edited by qwertl on 2008-9-30 at 00:19 ]

Floor2　slore	Posted 2008-09-30 00:34
铂金会员　Posts 2,478　Credits 5,212
unlocker I see it's SYSTEM Haven't ended it... don't know what the consequences would be... Suggest testing it in a virtual machine