registry

[louis]

I am running windows me and i would like to access the registry through Start>Run>regedit but every time i do this i get this message

 

This program has performed an illegal operation and will be terminated.Quit all programs,and then restart your computer

 

If the program consistently encounters problems click the start button then select help Troubleshooting and "if you are having trouble running MS-DOS programs".

 

I have tried getting help from this method above but it does not have the answers.PLEASE HELP!

[RandyL]

Hi Louis;

This could be caused by many things. Is there a details button you can click on when you get this error?

 

Some viruses and trojans will stop the registry editor. Do you have an antivirus program that is updated?

 

Good info on the exact error message and that you use Windows Millenium Edition.

 

I usually only see this type of error message on pre-ME systems. Is your ME an upgrade from 98?

 

Hope to hear from you soon;

RandyL

[louis]

hi RandyL,thanks for replying as this is giving me the @#$%.

The details button reveals this;

 

The program tried to execute an invalid instruction

Fault Location:of12:0102

Interupts in service:none

 

The fault location changes every time i try this.I am nearly 100% i dont have a virus or trojan.

This version is not an upgrade.

[RandyL]

Can you run it from safe mode? I still suspect a trojan.

RandyL

[louis]

no i cannot run it in safe mode

[RandyL]

From the Run box try entering regedit.exe or regedit32.exe or %Systemroot%\Regedit.exe

 

From the run box enter cmd or command. At the command prompt type one of the above and hit enter.

 

In folder view untick hide system files. Do a search for regedit.com

Also do a search for regedit.exe

 

Like I said I suspect a trojan. They will often times remove regedit.exe and you will have to extract a fresh copy from the windows installation files or from the original windows cd. I know there is no SFC in Windows ME but it can still be done manually.

 

If regedit.com is found on your system after the file search and hidden files are shown then you positively have a trojan as regedit.com will execute first instead of regedit.exe displaying different error messages.

 

Also see if you can access the task manager (Ctrl+Alt+Delete) and type in msconfig in the Run dialogue box. Sometimes the same trojans will disable those functions too.

 

These type of trojans are most commonly associated with P2P-Peer to Peer-music or file download programs.

 

You didn't mention if you used these type of programs but if you do then it is likely you have a trojan.

 

Do you have an updated antivirus program? Do you use P2P? Do you have an antispyware program?

Have you run scans? If you have did you follow up with disabling and re-enabling System Restore to purge any hidden trojans to keep them from reinstalling from there? Did you remove the P2P program first if you have one?

 

I ask this because if you do use P2P and are not protected this could be a clue as to the lengthly steps needed to remove viruses and repair the system later. Simply accessing regedit is not a cure all if there are underlying issues. It's a dangerous computing world these days.

 

Remove any P2P or spyware/adware programs from the control panel first.

Install, update an antivirus program then run a complete scan.

Install, update adaware and spybot s&d then run a complete scan

Try running Housecall from TrendMicro to do a complete online scan. Lengthly if you have dialup.

Try a trojan remover like The Stinger from Mcafee.

 

Next disable and re-enable System restore to purge any hidden trojans from executing from there.

 

Next reboot then perform all of the above again over and over untill you're sure your system is clean. If at any time you are asked if you want to delete a file "such as a song" that may contain a virus chose yes as this might be part of the problem.

 

There are other programs to clean your system but some don't work with Windows ME and others deliver false positives. So I suggest starting with the ones I mentioned. For other free security programs you can look at one of my pages.

 

http://rsl45.port5.com/ProgramList/ProgramList.html

http://www.freewebtown.com/rsl45/ProgramList/ProgramList.html

 

Like you I used Windows ME for 7 years. I've cleaned up and fixed Windows from 95 to XP. But not having your machine here makes it difficult to guess what's going on.

 

I know I've thrown a lot of information at you but in a couple days I'm going on a vacation and won't be able to reply. So respond quick or wait for me to get back.

 

Hey! I've only taken a vacation 3 times in the last 25 years. Now that I'm retired I thought I would take 1 more. I'll check back with you.

 

RandyL