Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

I CANT EXPLAIN IT![RESOLVED]


  • This topic is locked This topic is locked

#31
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
Nothing was supposed to change. You were supposed to give me information, so I can try and help you.

Let me know where you find files on your computer with the name regedit.

http://www.youthtech...indows/find.htm

And list them. Do NOT give me a screenshot. :tazz:

Regards,
  • 0

Advertisements


#32
cristiano_7_manu

cristiano_7_manu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
Heres the files i found

regedit c:\windows
regedit c:\windows\system
regedit c:\windows\options\cabs
regedit c:\windows\help
regedit.cnt c:\windows\help
regedit c:\windows\help
regedit.lgc c:\windows\applog
regedit c:\system.sav\miid
  • 0

#33
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
Go into Windows Explorer.
If you don't have a toolbar or shortcut (usually a file folder with
a magnifying glass superimposed over it) to get there, you can

Choose Find from the Start menu
Choose Files and Folders from the side menu
Make sure "C:" is in the Look In box
Type "explorer.exe" in the Named box
Click the Find now button
Double-click "Explorer" when it appears in the lower window
Click OK

In Windows Explorer, choose Folder Options from the Tools menu
(If you have Explorer version 4.0, you won't have a Tools menu --
instead, choose Options from the View menu )

Click on the View tab

Find "Hide File Extensions for Known File Types" and UNcheck its box.

For these two:
regedit c:\windows
regedit c:\windows\system

I would like to know the extension. Afetr you did the above the filenames should show up as regedit.exe or regedit.com
Let me know which is where.

Regards,
  • 0

#34
cristiano_7_manu

cristiano_7_manu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
c:\windows
c:\windows\system

Edited by cristiano_7_manu, 28 May 2005 - 05:54 AM.

  • 0

#35
cristiano_7_manu

cristiano_7_manu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
regedit.exe c:\windows
regedit.com c:\windows\system
  • 0

#36
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
  • Download the Registry Search Tool.
  • Unzip the contents of RegSrch.zip to a convenient location.
  • Double-click on RegSrch.vbs.
  • If you have an anti-virus installed it might prompt you about a running script. Please ignore this warning and allow the script to run.
  • In the "Enter search string (case insensitive) and click OK..." box paste this string:
    • NoChangingWallPaper
  • Click "OK" to search the registry for that string.
  • Wait for a few minutes while it completes the search.
  • Click "OK" to open the results in WordPad.
  • Copy and paste the entire results into your next post.
Regards,
  • 0

#37
cristiano_7_manu

cristiano_7_manu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
I done all the above until i got to searching NoChangingWallPaper
my anti-virus detected a suspicious script, it gave me the option of stopping the script or allow entire script this time, i choose the second option as you said a regedit box msdos command box came up, sayin you have preformed an illegal operation, i then click ok and a windows script host box came up. it said:

script: c\windows\desktop\regsrch.vbs
line : 39
char : 3
error : file not found
code : 800A0035
source: Microsoft vbscript runtime error
  • 0

#38
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
Can you please have your PC scanned here:
http://housecall.trendmicro.com/

Something is very, very wrong with your computer.

Regards,
  • 0

#39
cristiano_7_manu

cristiano_7_manu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
when the msdos comes up it says the following

the program tried to execute an invalid instruction

Fault location : 0F14:8BE3
Interrupts in service: none

do you know anything about that?

Edited by cristiano_7_manu, 28 May 2005 - 11:08 AM.

  • 0

#40
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
Yes. And I need regedit to work to fix it. :tazz:

You will have to look in the registry yourself.
Or donwload and install a alternative regsitry editor like:
http://www.resplendence.com/reglite

Anyhow, I will need an export of this registry key:
HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}

If you install Reglite start the program paste that key in the adress bar and click GO the program will look for that key.
If it finds it it will show up in blue in the lefthand-pane.
Rightclick the blue folder symbol and choose Export
Save the file top a location where you can find it back.
Openit in Notepad and post the content of the file.

Regards,
  • 0

Advertisements


#41
cristiano_7_manu

cristiano_7_manu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
It worked here the contents of the file:

REGEDIT4

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}]
@="Microsoft Local Troubleshooter"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\ProgID]
@="TSHOOT.TSHOOTCtrl.1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\InprocServer32]
@="C:\\WINDOWS\\HELP\\TSHOOT.OCX"
"ThreadingModel"="Apartment"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\ToolboxBitmap32]
@="C:\\WINDOWS\\HELP\\TSHOOT.OCX, 1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\MiscStatus]
@="0"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\MiscStatus\1]
@="131473"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\Control]
@=""

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\TypeLib]
@="{4B106871-DD36-11D0-8B44-00A024DD9EFF}"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\Version]
@="1.0"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\Implemented Categories]

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]
  • 0

#42
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
Excellent. :tazz:

Keep that file as a backup. Then in Registrar Lite go back to that same key:
HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}

Now rightclick the blue folder and choose "Delete"
(should you need the backup, all you need to do is doubleclcik it and confirm you want to merge it with the registry)

Let me know if the regsrch.vbs will work now.

Regards,
  • 0

#43
cristiano_7_manu

cristiano_7_manu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
there is still a problem with the regsrch.vbs
The same thing happened
  • 0

#44
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
Then let's use RegLite

Start the program in the left hand pane select the HKEY_USERS subset
Then click Search > Search registry > in the top window paste:
NoChangingWallPaper
Check if the Search In windows says HKEY_USERS
Click the magnifying glass at the bottom

In the results window you may see a key like this:
HKEY_USERS\S-1-5-21[long numbers]\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop

select and rightclick it and choose Jump To
Find the NoChangingWallPaper entry and delete it.

Regards,
  • 0

#45
cristiano_7_manu

cristiano_7_manu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
I searched but found nothing
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP