[Metallica]

Nothing was supposed to change. You were supposed to give me information, so I can try and help you.

Let me know where you find files on your computer with the name regedit.

http://www.youthtech...indows/find.htm

And list them. Do NOT give me a screenshot.

Regards,

[Advertisements]

Heres the files i found

regedit c:\windows
regedit c:\windows\system
regedit c:\windows\options\cabs
regedit c:\windows\help
regedit.cnt c:\windows\help
regedit c:\windows\help
regedit.lgc c:\windows\applog
regedit c:\system.sav\miid

[cristiano_7_manu]

Heres the files i found

regedit c:\windows
regedit c:\windows\system
regedit c:\windows\options\cabs
regedit c:\windows\help
regedit.cnt c:\windows\help
regedit c:\windows\help
regedit.lgc c:\windows\applog
regedit c:\system.sav\miid

[Metallica]

Go into Windows Explorer.
If you don't have a toolbar or shortcut (usually a file folder with
a magnifying glass superimposed over it) to get there, you can

Choose Find from the Start menu
Choose Files and Folders from the side menu
Make sure "C:" is in the Look In box
Type "explorer.exe" in the Named box
Click the Find now button
Double-click "Explorer" when it appears in the lower window
Click OK

In Windows Explorer, choose Folder Options from the Tools menu
(If you have Explorer version 4.0, you won't have a Tools menu --
instead, choose Options from the View menu )

Click on the View tab

Find "Hide File Extensions for Known File Types" and UNcheck its box.

For these two:
regedit c:\windows
regedit c:\windows\system

I would like to know the extension. Afetr you did the above the filenames should show up as regedit.exe or regedit.com
Let me know which is where.

Regards,

[cristiano_7_manu]

c:\windows
c:\windows\system

Edited by cristiano_7_manu, 28 May 2005 - 05:54 AM.

[cristiano_7_manu]

regedit.exe c:\windows
regedit.com c:\windows\system

[Metallica]

• Download the Registry Search Tool.
• Unzip the contents of RegSrch.zip to a convenient location.
• Double-click on RegSrch.vbs.
• If you have an anti-virus installed it might prompt you about a running script. Please ignore this warning and allow the script to run.
• In the "Enter search string (case insensitive) and click OK..." box paste this string:
  • NoChangingWallPaper
• Click "OK" to search the registry for that string.
• Wait for a few minutes while it completes the search.
• Click "OK" to open the results in WordPad.
• Copy and paste the entire results into your next post.

Regards,

[cristiano_7_manu]

I done all the above until i got to searching NoChangingWallPaper
my anti-virus detected a suspicious script, it gave me the option of stopping the script or allow entire script this time, i choose the second option as you said a regedit box msdos command box came up, sayin you have preformed an illegal operation, i then click ok and a windows script host box came up. it said:

script: c\windows\desktop\regsrch.vbs
line : 39
char : 3
error : file not found
code : 800A0035
source: Microsoft vbscript runtime error

[Metallica]

Can you please have your PC scanned here:
http://housecall.trendmicro.com/

Something is very, very wrong with your computer.

Regards,

[cristiano_7_manu]

when the msdos comes up it says the following

the program tried to execute an invalid instruction

Fault location : 0F14:8BE3
Interrupts in service: none

do you know anything about that?

Edited by cristiano_7_manu, 28 May 2005 - 11:08 AM.

[Metallica]

Yes. And I need regedit to work to fix it.

You will have to look in the registry yourself.
Or donwload and install a alternative regsitry editor like:
http://www.resplendence.com/reglite

Anyhow, I will need an export of this registry key:
HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}

If you install Reglite start the program paste that key in the adress bar and click GO the program will look for that key.
If it finds it it will show up in blue in the lefthand-pane.
Rightclick the blue folder symbol and choose Export
Save the file top a location where you can find it back.
Openit in Notepad and post the content of the file.

Regards,

[cristiano_7_manu]

It worked here the contents of the file:

REGEDIT4

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}]
@="Microsoft Local Troubleshooter"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\ProgID]
@="TSHOOT.TSHOOTCtrl.1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\InprocServer32]
@="C:\\WINDOWS\\HELP\\TSHOOT.OCX"
"ThreadingModel"="Apartment"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\ToolboxBitmap32]
@="C:\\WINDOWS\\HELP\\TSHOOT.OCX, 1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\MiscStatus]
@="0"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\MiscStatus\1]
@="131473"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\Control]
@=""

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\TypeLib]
@="{4B106871-DD36-11D0-8B44-00A024DD9EFF}"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\Version]
@="1.0"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\Implemented Categories]

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]

[Metallica]

Excellent.

Keep that file as a backup. Then in Registrar Lite go back to that same key:
HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4B106874-DD36-11D0-8B44-00A024DD9EFF}

Now rightclick the blue folder and choose "Delete"
(should you need the backup, all you need to do is doubleclcik it and confirm you want to merge it with the registry)

Let me know if the regsrch.vbs will work now.

Regards,

[cristiano_7_manu]

there is still a problem with the regsrch.vbs
The same thing happened

[Metallica]

Then let's use RegLite

Start the program in the left hand pane select the HKEY_USERS subset
Then click Search > Search registry > in the top window paste:
NoChangingWallPaper
Check if the Search In windows says HKEY_USERS
Click the magnifying glass at the bottom

In the results window you may see a key like this:
HKEY_USERS\S-1-5-21[long numbers]\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop

select and rightclick it and choose Jump To
Find the NoChangingWallPaper entry and delete it.

Regards,

[cristiano_7_manu]

I searched but found nothing