Discussion in 'Windows Desktop Systems' started by Jewelzz, Sep 24, 2006.
My registery won't stay open How do I fix it?
You mean, you open up "regedit", in the run area....and it opens, and then crashes, dosen't open at all.....stays open for like 2 seconds, and just closes without any messages?
Opens then closes, no messages
Rather odd, I would post a HJT log.
Anything in event viewer?
May also be worth trying to login with another profile to see if it's specific to your own user profile.
I don't see anything in the event viewer and there's only one profile on this PC.
Does Task Manager and/or command prompt (start > run > cmd) work?
If none of them work a restriction has perhaps been placed on these items and running this file should fix it.
Lift Restrictions - TM, Regedit and CMD
Task Manager and the cmd prompt both work fine
I'd try that program anyways, see if it fixes it.
I know I had a similiar problem on a friend's computer. But it also affected Task Manager, and msconfig. turns out it was some sort of virus or something that was called scvhost (not SVChost as it should be).
There are about 5 or 6 svchost.exe's running
That's not surprising. I have 8 svchost.exe's.
Something stood out to me, though.
There's no logical reason I can see for Messenger to be in the System32 directory since it should be in 'Program Files' under it's own sub-dir. So from there it led me to:
http://www.sophos.com/security/analyses/w32rbotjz.html. For more links check do a Google search for "MSNMSGR.EXE" and reference to it being dropped in the System32 directory.
Check it out. Hopefully it will help you. If not, my apologies.
Well I have both Windows Messenger and Live Messenger. Windows Messenger is in C:\Program Files\Messenger and the other is C:\Program Files\MSN Messenger so rotjong may be on to something.
EDIT: Windows Messenger is even in the list under the suspected entry.
search for regedit, copy it to c:\
rename it to regedit.cmd (may have to show hidden file types in folder options) see if it stays open with the new .cmd on it
an old trick, so may not work.
agreed, shouldnt be in the system32 folder, its telling it to start with no path so it will default to system32, and its already telling the legit verson to start, so it must be the problem.
will have to safe mode to shift those !
Followed what rotjong posted, up to a point. Nothing was in the registry but I did end the program MSNMSGR.EXE then deleted it out of the system32 folder, well deleted first then was able to open regedit. Kudos and reps to you all for replying and helping.
Glad this helped.
There are a number of references online to this file in the System32 directory and having problems opening regedit and msconfig but I really didn't find an answer as to what it was.
What is C:\Program Files\BigFix\BigFix.exe ?
click it, you know you wanna.
It's Big and it fixes everything.
Might just solve all my problems then eh?
Glad to see it got sorted, and nice catch to rotjong.
Jewelz, fwiw, even if there is only one user profile you could still create another at the drop of a hat for testing. Obviously in this case it may not have applied, unless the file was tied to your profile only which I doubt.
I know I can create another profile, just being lazy :s
The PC is a Gateway EP, BixFix has something to do with them, their spying on me