Re: Locked reg key

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Alex Clark wrote:

Sheesh, even this didn't do the trick - although I'm uncertain as to
RegDelNull's effectiveness here. I ran it on HKCR and HKLM and it
reported no null keys (even with the recursive option enabled). I
then ran RootKitRevealer and that *did* warn me of two keys with
nulls in them inside the HKLM hive, so apparently RegDelNull didn't
do a great job of searching.

I haven't used RegDelNull often enough to become expert in its use. I
do remember that it is picky regarding command-line syntax and
parameters. If, for example, the hierarchical path for a registry key
includes spaces, you'll have to double-quote the string for identifying
that path as a parameter.

If you use the tool correctly and it reports no embedded nul registry
keys then it could be something still left running on your host that is
protecting the registry. Have you yet tried rebooting into Safe Mode
for Windows and then do the registry edits?

I then ran RootKitRevealer and that *did* warn me of two keys with
nulls in them inside the HKLM hive ...

I take it that the registry keys with embedded nulls that were reported
by Rootkit Revealer were not the same ones that you are trying to
delete.
.

Relevant Pages

  • Re: Running programs as administrator
    ... If it is only access to the registry that is the problem and if the keys ... in HKLM so this is pretty safe. ... CorelDraw might have a XP patch to fix this problem. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to work around UAC?
    ... In these situations, and with UAC active, our DLLs no longer ... have access to our software's registry keys. ... your DLLs DO have access to HKLM - but read only. ...
    (microsoft.public.platformsdk.security)
  • Re: Dave, Oops, Misspoketh- I think I found it and deleted it. Plez chek me out.
    ... registry and that HKLM meant the registry local machine ... keys. ...
    (microsoft.public.win2000.registry)
  • Re: SMS 2.0 Component Errors - Pre Upgrade
    ... It's possible that the registry is corrupt, ... The other suggestion is try an upgrade instead of site reset. ... ACLRESET will fix the permissions but will not fix the keys. ... SMS Inventory Data Loader has moved this file to ...
    (microsoft.public.sms.admin)
  • Re: Non admin users cant do things they need to do
    ... You mean they are along with the registry entires? ... i added the keys below to the registry (as administrator) logged off, ... can set the time then they can fake out system event logs by changing ...
    (microsoft.public.windowsxp.embedded)