Regedit

[Newport]

Hi

When I use regedit from RUN, I got an error message:

" 16 bit MS-DOS Subsystem
C:\windows\system32\regedit.com
The NTVDM CPU has encountered an illegal instruction, CS:0f47 IP:0117
OP:0f 7a 77 41 24 Choose 'close' to terminate the application."

But if a I do a search of regedit.com it wont find it, if the search is for
regedit alone it can find it and it does works.

What can I do ?

TIA

 

[Rick \Nutcase\ Rogers]

Hi Newport,

regedit should be a .exe file, not a .com file. The fact that it is coming
up and causing an error indicates a possibility of infection. Try searching
for regedit.com in Safe mode (in normal mode it may be masked).

How to start in Safe mode:
http://www.rickrogers.org/fixes.htm#Safe mode

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

 

[Earl Caravelle II]

Hi Rick

I did that and can not find the file, I just check also te command CMD in
RUN and the problem is the same, then cmd command is a .com extention
I have run anti-spy soft and nothing.

TIA

 

[Earl Caravelle II]

Yes, I can

 

[Rick \Nutcase\ Rogers]

Hi,

Command is a .com file
Cmd is a .exe file

Can your run regedit.exe?

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

 

[Rick \Nutcase\ Rogers]

Hi Earl,

Start/run cmd.exe

Then run

copy C:\Windows\system32\regedit.exe C:\Windows\system32\regedit.com

See if it allows the overwrite. If it does not ("access violation" or "in
use" message probably), then the file already exists and is active. Going
back to the original response, this would indicate a virus. Make sure you
have folder options set to see files/folders with the system and hidden
attributes before you resume the search (easiest to detect and remove in
Safe mode where it likly will not be active).

Go to the Control Panel/Folder Options, and on the View tab, set the options
so you can see hidden and system files. Specifically:

Enable (check) "Display the contents of system folders"
Enable (check) "Show hidden files and folders"
Disable (uncheck): "Hide protected operating system files (recommended)"

I also recommend that you disable (uncheck) "hide extensions for known file
types", especially in this case.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org