regedit problem

[rg123]

Hello,
when i go to the start run dialog box and type regedit it does
not open any more here is what i see
C:\WINNT\system32\regedit.com
The NTVDMCPU has encountered an illegal instruction.
CS:00cf IP0656 OP:fe ae 06 d9 02 choose close

any help would be great i cant figure it out.

 

[Michael T]

Haven't seen this one before, but it makes me wonder if your error is due to
memory access problems.

If so, you can run a diagnostic at http://oca.microsoft.com/en/windiag.asp

But first I would run Disk Cleanup.
Start > All Programs > Accessories > System Tools > Disk Cleanup

Finally, there are some Google 'hits' for similar problems at
http://www.google.com/search?hl=en&...red+an+illegal+instruction&btnG=Google+Search

Good luck.

 

[Jerry]

REGEDIT is an EXE, not COM file and is supposded to be in \windows. (At
least in XP - this is an XP newsgroup afterall.)

 

[John Coode]

Hello,
when i go to the start run dialog box and type regedit it does
not open any more here is what i see
C:\WINNT\system32\regedit.com
The NTVDMCPU has encountered an illegal instruction.
CS:00cf IP0656 OP:fe ae 06 d9 02 choose close

any help would be great i cant figure it out.

The real XP registry editor is called REGEDIT.EXE and is located in the
%systemroot% directory (\windows or possibly \winnt) not in system32.
Also Regedit is a 32-bit program and so should not need NTVDM to run.
Unless you have renamed and moved it, I would suspect that you have a virus.

 

[Michael T]

Good catch guys (Jerry & John). I too don't know why he is referencing a -
non-XP folder for Regedit.

Looks like he may be running Win2k and posted in the wrong forum.

 

[Rick]

From what you have posted, you are not running Windows XP. You need to
figure out what OS you're running, maybe a version of NT? And then find
the appropriate group to address your question.

 

[rg123]

The real XP registry editor is called REGEDIT.EXE and is
located in the
%systemroot% directory (windows or possibly winnt) not in
system32.
Also Regedit is a 32-bit program and so should not need NTVDM
to run.
Unless you have renamed and moved it, I would suspect that you
have a virus.

i am running win xp home edition and know that it should be an exe
file thats why i posted what i see it doesnt make sense to me was
hoping maybe someone seen before

 

[Michael T]

Did you install XP over Win2K?

i am running win xp home edition and know that it should be an exe
file thats why i posted what i see it doesnt make sense to me was
hoping maybe someone seen before

--
Posted using the http://www.windowsforumz.com interface, at author's
request
Articles individually checked for conformance to usenet standards
Topic URL:
http://www.windowsforumz.com/Help---Support-regedit-problem-ftopict375125.html
Visit Topic URL to contact author (reg. req'd). Report abuse:
http://www.windowsforumz.com/eform.php?p=1222274

 

[Michael T]

Have you done a virus scan?

At least one virus (W32.Sircam.Worm@mm) installs sirc32.exe which *may* lead to finding Regedit.com on your computer.

Not sure if this worm will find its way onto a Windows XP system, but there's a removal tool at
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

Still not sure why you are finding the bogus pathname C:\WINNT\system32, as there is typically no C:\WINNT folder on an XP system.

 

[Michael T]

i am running win xp home edition and know that RegEdit.com should be an
EXE
file thats why i posted what i see it doesnt make sense to me was
hoping maybe someone seen before

Did you ever install The Registry Guide for Windows. It was formerly named
RegEdit.com?
http://www.winguides.com/registry/

 

[rg123]

Did you install XP over Win2K?


 > > rg123 wrote:
  > > > Hello,
  > > > when i go to the start run dialog box
and type regedit
 > > it does
  > > > not open any more here is what i see
  > > > C:WINNTsystem32regedit.com
  > > > The NTVDMCPU has encountered an illegal
instruction.
  > > > CS:00cf IP0656 OP:fe ae 06 d9 02 choose
close
  > > >
  > > > any help would be great i cant figure it
out.
  > > >
 > > The real XP registry editor is called REGEDIT.EXE
and is
 > > located in the
 > > %systemroot% directory (windows or possibly winnt)
not in
 > > system32.
 > > Also Regedit is a 32-bit program and so should not
need NTVDM
 > > to run.
 > > Unless you have renamed and moved it, I would
suspect that you
 > > have a virus.

nope i didn’t its straight from the box that way windows xp home
edition i think it has something to do with that root directory %
whatever it is but cannot figure it out the computer run fines no
glitches just when i want to open regedit from the run dialog box i
get what i type down there this all happened after my daughter used
the computer so basically i havent a clue as to how it got that way
but none the less although it is operating fine its bothering me
knowing that it isnt right i can acess the registry through the
c:\winnt but shouldnt have to

 

[Michael T]

nope i didn't its straight from the box that way windows xp home
edition i think it has something to do with that root directory %
whatever it is but cannot figure it out the computer run fines no
glitches just when i want to open regedit from the run dialog box i
get what i type down there this all happened after my daughter used
the computer so basically i havent a clue as to how it got that way
but none the less although it is operating fine its bothering me
knowing that it isnt right i can acess the registry through the
c:\winnt but shouldnt have to

Have you considered searching for Regedit.com to see if is actually on your
PC?

If found, I would renamed it to Regedit.bak (of course Regedit.exe must have
been found also). Then try running Regedit from Start > Run.

 

[rg123]

Have you considered searching for Regedit.com to see if is
actually on your
PC?

If found, I would renamed it to Regedit.bak (of course
Regedit.exe must have
been found also). Then try running Regedit from Start > Run.

i did not find regedit .com but when i tried the run dialog tonight
this is what the dos window said that came up
C:\WINNT\system32\regedit.com

I did not recieve this C:\WINNT\system32\regedit.com The NTVDMCPU
has encountered an illegal instruction. this time just what the dos
window said

on the search for regedit this is what i find

regedit in c:\I386 application 131 kb file version 5.1.2600.1106
created on 8/29/2002 7:00am

regedit in c:\WINNT application 143 kb file version 5.1.2600.2180
created on 8/04/2004 3:56 am

regedit in C:\WINNT\ServicePackFiles\i386 application 143 kb file
version 5.1.2600.2180 created on 8/04/2004 3:56 am

REGEDIT.EXE-0587F369.pf in C:\WINNT\Prefetch pf file 15kb
REGEDIT.EXE-0FA8F8FC.pf in C:\WINNT\Prefetch pf file 16kb
REGEDIT.EXE-1296D1F9.pf in C:\WINNT\Prefetch pf file 17kb

i dont know what the pf files are but i see 2 of these 3 regedit that
was found were created at the same time same size same version it has
to be more than a coincendence

thx for all the help u been giving me i appericate it.

 

[Spidermomma]

Hello,
when i go to the start run dialog box and type regedit it
does not open any more here is what i see
C:WINNTsystem32regedit.com
The NTVDMCPU has encountered an illegal instruction.
CS:00cf IP0656 OP:fe ae 06 d9 02 choose close

any help would be great i cant figure it out.

Hi,
I have the same problem..
It’s a laptop with a clean Xp installation.

However, my laptop was infected with w32/Mugly.M a.k.a Picrate.C
and in the description of this virus it is said that it messes with
the access to regedit and some other programs...
I can acces regedit(.EXE) if I access it directly from c:windows, so
the problem is the link, and not the program itself.

Something else; the virus was found in the system32 folder , but when
I search the PC (also hiddenfiles) there is no such folder!!!

I am thinking that, although the virus was removed, the mess it left
is a greater problem to deal with...

 

[Spidermomma]

Hi,
I have the same problem..
It's a laptop with a clean Xp installation.

However, my laptop was infected with w32/Mugly.M a.k.a
Picrate.C
and in the description of this virus it is said that it messes
with the access to regedit and some other programs...
I can acces regedit(.EXE) if I access it directly from
c:windows, so the problem is the link, and not the program
itself.

Something else; the virus was found in the system32 folder ,
but when I search the PC (also hiddenfiles) there is no such
folder!!!

I am thinking that, although the virus was removed, the mess
it left is a greater problem to deal with...

I found my system32 folder (could noy find it with windows explorer,
but total commander did the trick)

found these files:
cmd.com
netstat.com
ping.com
regedit.com
taskkill.com
tasklist.com
tracert.com

I removed them all and all the problems are solved. I also removed the
file file.zip, which was the virus

I also want to say thay both symantec and avg did NOT find the virus,
but pandasoftware did...