Regedit



Newport
07-09-2005, 11:50 PM
Hi

When I use regedit from RUN, I got an error message:

" 16 bit MS-DOS Subsystem
C:\windows\system32\regedit.com
The NTVDM CPU has encountered an illegal instruction, CS:0f47 IP:0117
OP:0f 7a 77 41 24 Choose 'close' to terminate the application."

But if a I do a search of regedit.com it wont find it, if the search is for
regedit alone it can find it and it does works.

What can I do ?

TIA

Rick \Nutcase\ Rogers
07-09-2005, 11:50 PM
Hi Newport,

regedit should be a .exe file, not a .com file. The fact that it is coming
up and causing an error indicates a possibility of infection. Try searching
for regedit.com in Safe mode (in normal mode it may be masked).

How to start in Safe mode:
http://www.rickrogers.org/fixes.htm#Safe%20mode

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org

"Newport" <xxxxxx@txxxxx.xx> wrote in message
news:429a3427$0$3111$8fcfb975@news.wanadoo.fr...
> Hi
>
> When I use regedit from RUN, I got an error message:
>
> " 16 bit MS-DOS Subsystem
> C:\windows\system32\regedit.com
> The NTVDM CPU has encountered an illegal instruction, CS:0f47 IP:0117
> OP:0f 7a 77 41 24 Choose 'close' to terminate the application."
>
> But if a I do a search of regedit.com it wont find it, if the search is
> for regedit alone it can find it and it does works.
>
> What can I do ?
>
> TIA
>

Earl Caravelle II
07-09-2005, 11:50 PM
Hi Rick

I did that and can not find the file, I just check also te command CMD in
RUN and the problem is the same, then cmd command is a .com extention
I have run anti-spy soft and nothing.

TIA


"Rick "Nutcase" Rogers" <rick@mvps.org> wrote in message
news:uGU53CKZFHA.1544@TK2MSFTNGP10.phx.gbl...
> Hi Newport,
>
> regedit should be a .exe file, not a .com file. The fact that it is coming
> up and causing an error indicates a possibility of infection. Try
> searching for regedit.com in Safe mode (in normal mode it may be masked).
>
> How to start in Safe mode:
> http://www.rickrogers.org/fixes.htm#Safe%20mode
>
> --
> Best of Luck,
>
> Rick Rogers, aka "Nutcase" - Microsoft MVP
> http://mvp.support.microsoft.com/
> Associate Expert - WindowsXP Expert Zone
> www.microsoft.com/windowsxp/expertzone
> Windows help - www.rickrogers.org
>
> "Newport" <xxxxxx@txxxxx.xx> wrote in message
> news:429a3427$0$3111$8fcfb975@news.wanadoo.fr...
>> Hi
>>
>> When I use regedit from RUN, I got an error message:
>>
>> " 16 bit MS-DOS Subsystem
>> C:\windows\system32\regedit.com
>> The NTVDM CPU has encountered an illegal instruction, CS:0f47 IP:0117
>> OP:0f 7a 77 41 24 Choose 'close' to terminate the application."
>>
>> But if a I do a search of regedit.com it wont find it, if the search is
>> for regedit alone it can find it and it does works.
>>
>> What can I do ?
>>
>> TIA
>>
>
>

Rick \Nutcase\ Rogers
07-09-2005, 11:51 PM
Hi,

Command is a .com file
Cmd is a .exe file

Can your run regedit.exe?

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org

"Earl Caravelle II" <caravelle-ii@terra.es> wrote in message
news:429ab4d2$0$18643$14726298@news.sunsite.dk...
> Hi Rick
>
> I did that and can not find the file, I just check also te command CMD in
> RUN and the problem is the same, then cmd command is a .com extention
> I have run anti-spy soft and nothing.
>
> TIA
>
>
> "Rick "Nutcase" Rogers" <rick@mvps.org> wrote in message
> news:uGU53CKZFHA.1544@TK2MSFTNGP10.phx.gbl...
>> Hi Newport,
>>
>> regedit should be a .exe file, not a .com file. The fact that it is
>> coming up and causing an error indicates a possibility of infection. Try
>> searching for regedit.com in Safe mode (in normal mode it may be masked).
>>
>> How to start in Safe mode:
>> http://www.rickrogers.org/fixes.htm#Safe%20mode
>>
>> --
>> Best of Luck,
>>
>> Rick Rogers, aka "Nutcase" - Microsoft MVP
>> http://mvp.support.microsoft.com/
>> Associate Expert - WindowsXP Expert Zone
>> www.microsoft.com/windowsxp/expertzone
>> Windows help - www.rickrogers.org
>>
>> "Newport" <xxxxxx@txxxxx.xx> wrote in message
>> news:429a3427$0$3111$8fcfb975@news.wanadoo.fr...
>>> Hi
>>>
>>> When I use regedit from RUN, I got an error message:
>>>
>>> " 16 bit MS-DOS Subsystem
>>> C:\windows\system32\regedit.com
>>> The NTVDM CPU has encountered an illegal instruction, CS:0f47 IP:0117
>>> OP:0f 7a 77 41 24 Choose 'close' to terminate the application."
>>>
>>> But if a I do a search of regedit.com it wont find it, if the search is
>>> for regedit alone it can find it and it does works.
>>>
>>> What can I do ?
>>>
>>> TIA
>>>
>>
>>
>
>

Earl Caravelle II
07-09-2005, 11:51 PM
Yes, I can

--

Earl Caravelle II

Budweiser: Helping ugly people have sex since 1876
"Rick "Nutcase" Rogers" <rick@mvps.org> wrote in message
news:uoowo1QZFHA.1092@tk2msftngp13.phx.gbl...
> Hi,
>
> Command is a .com file
> Cmd is a .exe file
>
> Can your run regedit.exe?
>
> --
> Best of Luck,
>
> Rick Rogers, aka "Nutcase" - Microsoft MVP
> http://mvp.support.microsoft.com/
> Associate Expert - WindowsXP Expert Zone
> www.microsoft.com/windowsxp/expertzone
> Windows help - www.rickrogers.org
>
> "Earl Caravelle II" <caravelle-ii@terra.es> wrote in message
> news:429ab4d2$0$18643$14726298@news.sunsite.dk...
>> Hi Rick
>>
>> I did that and can not find the file, I just check also te command CMD in
>> RUN and the problem is the same, then cmd command is a .com extention
>> I have run anti-spy soft and nothing.
>>
>> TIA
>>
>>
>> "Rick "Nutcase" Rogers" <rick@mvps.org> wrote in message
>> news:uGU53CKZFHA.1544@TK2MSFTNGP10.phx.gbl...
>>> Hi Newport,
>>>
>>> regedit should be a .exe file, not a .com file. The fact that it is
>>> coming up and causing an error indicates a possibility of infection. Try
>>> searching for regedit.com in Safe mode (in normal mode it may be
>>> masked).
>>>
>>> How to start in Safe mode:
>>> http://www.rickrogers.org/fixes.htm#Safe%20mode
>>>
>>> --
>>> Best of Luck,
>>>
>>> Rick Rogers, aka "Nutcase" - Microsoft MVP
>>> http://mvp.support.microsoft.com/
>>> Associate Expert - WindowsXP Expert Zone
>>> www.microsoft.com/windowsxp/expertzone
>>> Windows help - www.rickrogers.org
>>>
>>> "Newport" <xxxxxx@txxxxx.xx> wrote in message
>>> news:429a3427$0$3111$8fcfb975@news.wanadoo.fr...
>>>> Hi
>>>>
>>>> When I use regedit from RUN, I got an error message:
>>>>
>>>> " 16 bit MS-DOS Subsystem
>>>> C:\windows\system32\regedit.com
>>>> The NTVDM CPU has encountered an illegal instruction, CS:0f47
>>>> IP:0117 OP:0f 7a 77 41 24 Choose 'close' to terminate the application."
>>>>
>>>> But if a I do a search of regedit.com it wont find it, if the search is
>>>> for regedit alone it can find it and it does works.
>>>>
>>>> What can I do ?
>>>>
>>>> TIA
>>>>
>>>
>>>
>>
>>
>
>

Rick \Nutcase\ Rogers
07-09-2005, 11:51 PM
Hi Earl,

Start/run cmd.exe

Then run

copy C:\Windows\system32\regedit.exe C:\Windows\system32\regedit.com

See if it allows the overwrite. If it does not ("access violation" or "in
use" message probably), then the file already exists and is active. Going
back to the original response, this would indicate a virus. Make sure you
have folder options set to see files/folders with the system and hidden
attributes before you resume the search (easiest to detect and remove in
Safe mode where it likly will not be active).

Go to the Control Panel/Folder Options, and on the View tab, set the options
so you can see hidden and system files. Specifically:

Enable (check) "Display the contents of system folders"
Enable (check) "Show hidden files and folders"
Disable (uncheck): "Hide protected operating system files (recommended)"

I also recommend that you disable (uncheck) "hide extensions for known file
types", especially in this case.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org

"Earl Caravelle II" <caravelle-ii@terra.es> wrote in message
news:429aff09$0$18643$14726298@news.sunsite.dk...
> Yes, I can
>
> --
>
> Earl Caravelle II
>
> Budweiser: Helping ugly people have sex since 1876
> "Rick "Nutcase" Rogers" <rick@mvps.org> wrote in message
> news:uoowo1QZFHA.1092@tk2msftngp13.phx.gbl...
>> Hi,
>>
>> Command is a .com file
>> Cmd is a .exe file
>>
>> Can your run regedit.exe?
>>
>> --
>> Best of Luck,
>>
>> Rick Rogers, aka "Nutcase" - Microsoft MVP
>> http://mvp.support.microsoft.com/
>> Associate Expert - WindowsXP Expert Zone
>> www.microsoft.com/windowsxp/expertzone
>> Windows help - www.rickrogers.org
>>
>> "Earl Caravelle II" <caravelle-ii@terra.es> wrote in message
>> news:429ab4d2$0$18643$14726298@news.sunsite.dk...
>>> Hi Rick
>>>
>>> I did that and can not find the file, I just check also te command CMD
>>> in RUN and the problem is the same, then cmd command is a .com extention
>>> I have run anti-spy soft and nothing.
>>>
>>> TIA
>>>
>>>
>>> "Rick "Nutcase" Rogers" <rick@mvps.org> wrote in message
>>> news:uGU53CKZFHA.1544@TK2MSFTNGP10.phx.gbl...
>>>> Hi Newport,
>>>>
>>>> regedit should be a .exe file, not a .com file. The fact that it is
>>>> coming up and causing an error indicates a possibility of infection.
>>>> Try searching for regedit.com in Safe mode (in normal mode it may be
>>>> masked).
>>>>
>>>> How to start in Safe mode:
>>>> http://www.rickrogers.org/fixes.htm#Safe%20mode
>>>>
>>>> --
>>>> Best of Luck,
>>>>
>>>> Rick Rogers, aka "Nutcase" - Microsoft MVP
>>>> http://mvp.support.microsoft.com/
>>>> Associate Expert - WindowsXP Expert Zone
>>>> www.microsoft.com/windowsxp/expertzone
>>>> Windows help - www.rickrogers.org
>>>>
>>>> "Newport" <xxxxxx@txxxxx.xx> wrote in message
>>>> news:429a3427$0$3111$8fcfb975@news.wanadoo.fr...
>>>>> Hi
>>>>>
>>>>> When I use regedit from RUN, I got an error message:
>>>>>
>>>>> " 16 bit MS-DOS Subsystem
>>>>> C:\windows\system32\regedit.com
>>>>> The NTVDM CPU has encountered an illegal instruction, CS:0f47
>>>>> IP:0117 OP:0f 7a 77 41 24 Choose 'close' to terminate the
>>>>> application."
>>>>>
>>>>> But if a I do a search of regedit.com it wont find it, if the search
>>>>> is for regedit alone it can find it and it does works.
>>>>>
>>>>> What can I do ?
>>>>>
>>>>> TIA
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>


Regedit