Registry Write Protected

[Warren]

I was trying to disable some programs from starting up by editing
registry,
when I noticed that none of my changes are taking effect. I have no
idea
how or when it became locked.

How do you unlock it?


--

Posted via http://computerhelpforums.net Forum to USENET Gateway

 

[MEB]

"Warren" <nospam@nospam.com> wrote in message
news:u0CDAbQnIHA.5472@TK2MSFTNGP03.phx.gbl...
| I was trying to disable some programs from starting up by editing
registry,
| when I noticed that none of my changes are taking effect. I have no
idea
| how or when it became locked.
|
| How do you unlock it?
|

Likely you have some other program that dis-allows modification. That
presumes you DID shutdown and restart after the changes.

Check your Anti-Virus, Anti-SpyWare, and like programs [any tweak
programs
as well], to see if they provide that protection [system and/or file
protection].

Check this key and entries [standard]:
------
REGEDIT4

[HKEY_CLASSES_ROOT\regfile]
@="Registration Entries"

[HKEY_CLASSES_ROOT\regfile\DefaultIcon]
@="C:\\WINDOWS\\regedit.exe,1"

[HKEY_CLASSES_ROOT\regfile\shell]
@=""

[HKEY_CLASSES_ROOT\regfile\shell\open]
@="Mer&ge"

[HKEY_CLASSES_ROOT\regfile\shell\open\command]
@="regedit.exe \"%1\""

[HKEY_CLASSES_ROOT\regfile\shell\print]
@=""

[HKEY_CLASSES_ROOT\regfile\shell\print\command]
@="C:\\WINDOWS\\NOTEPAD.EXE /p %1"

[HKEY_CLASSES_ROOT\regfile\shell\edit]
@="&Edit"

[HKEY_CLASSES_ROOT\regfile\shell\edit\command]
@="C:\\WINDOWS\\NOTEPAD.EXE %1"

--------------

The above can be used to reset regedit to default activities by copying
the
above to a TEXT editor, saving as a .reg, and merging, or by manual
editing.
Manual editing should only be done by parties who understand a single
wrong
entry may cause problems with their computer.

--
MEB http://peoplescounsel.orgfree.com
--
_________


--

Posted via http://computerhelpforums.net Forum to USENET Gateway

 

[Warren]

Thanks MEB,

There was only one small difference, regarding how the right mouse
click
works on reg files ([HKEY_CLASSES_ROOT\regfile\shell]
@=""). I loaded your file anyway. I noticed I could manually change
the
string value from "" to "edit" and confirmed the change in the right
click
context menu of .reg files.

Which means the Registry isn't locked as I thought, instead I'm doing
something wromg in my attempt to prevent programs from starting up. I
am
trying to remove some string entries in the
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] key,
to
prevent those programs from starting up at bootup, but the system won't
let
me. What am I doing wrong ?


"MEB" <meb@not here@hotmail.com> wrote in message
news:%23V$Bg9SnIHA.4504@TK2MSFTNGP06.phx.gbl...
> "Warren" <nospam@nospam.com> wrote in message
> news:u0CDAbQnIHA.5472@TK2MSFTNGP03.phx.gbl...
> | I was trying to disable some programs from starting up by editing
> registry,
> | when I noticed that none of my changes are taking effect. I have
no
idea
> | how or when it became locked.
> |
> | How do you unlock it?
> |
>
> Likely you have some other program that dis-allows modification.
That
> presumes you DID shutdown and restart after the changes.
>
> Check your Anti-Virus, Anti-SpyWare, and like programs [any tweak
programs
> as well], to see if they provide that protection [system and/or file
> protection].
>
> Check this key and entries [standard]:
> ------
> REGEDIT4
>
> [HKEY_CLASSES_ROOT\regfile]
> @="Registration Entries"
>
> [HKEY_CLASSES_ROOT\regfile\DefaultIcon]
> @="C:\\WINDOWS\\regedit.exe,1"
>
> [HKEY_CLASSES_ROOT\regfile\shell]
> @=""
>
> [HKEY_CLASSES_ROOT\regfile\shell\open]
> @="Mer&ge"
>
> [HKEY_CLASSES_ROOT\regfile\shell\open\command]
> @="regedit.exe \"%1\""
>
> [HKEY_CLASSES_ROOT\regfile\shell\print]
> @=""
>
> [HKEY_CLASSES_ROOT\regfile\shell\print\command]
> @="C:\\WINDOWS\\NOTEPAD.EXE /p %1"
>
> [HKEY_CLASSES_ROOT\regfile\shell\edit]
> @="&Edit"
>
> [HKEY_CLASSES_ROOT\regfile\shell\edit\command]
> @="C:\\WINDOWS\\NOTEPAD.EXE %1"
>
> --------------
>
> The above can be used to reset regedit to default activities by
copying
the
> above to a TEXT editor, saving as a .reg, and merging, or by manual
editing.
> Manual editing should only be done by parties who understand a single
wrong
> entry may cause problems with their computer.
>
> --
> MEB http://peoplescounsel.orgfree.com
> --
> _________
>
>
>


--

Posted via http://computerhelpforums.net Forum to USENET Gateway

 

[glee]

What do you mean by "the system won't let me"? Are you getting a
message saying you
are prohibited from performing the action? How exactly is the system
stopping you?

OR, are you just assuming the "system won't let you" because the items
are coming
back into the startup list?

If you just remove an item in the Run key, but don't turn off the
option in the
associated program to "run at startup" (or similar), the entry will
just be added
right back again.

What programs are you trying to remove from startup?
--
Glen Ventura, MS MVP Windows, A+
http://dts-l.net/
http://dts-l.net/goodpost.htm


"Warren" <nospam@nospam.com> wrote in message
news:uQ9WADVnIHA.1768@TK2MSFTNGP05.phx.gbl...
> Thanks MEB,
>
> There was only one small difference, regarding how the right mouse
click
> works on reg files ([HKEY_CLASSES_ROOT\regfile\shell]
> @=""). I loaded your file anyway. I noticed I could manually change
the
> string value from "" to "edit" and confirmed the change in the right
click
> context menu of .reg files.
>
> Which means the Registry isn't locked as I thought, instead I'm doing
> something wromg in my attempt to prevent programs from starting up.
I am
> trying to remove some string entries in the
> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
key, to
> prevent those programs from starting up at bootup, but the system
won't let
> me. What am I doing wrong ?
>
>
> "MEB" <meb@not here@hotmail.com> wrote in message
> news:%23V$Bg9SnIHA.4504@TK2MSFTNGP06.phx.gbl...
>> "Warren" <nospam@nospam.com> wrote in message
>> news:u0CDAbQnIHA.5472@TK2MSFTNGP03.phx.gbl...
>> | I was trying to disable some programs from starting up by editing
>> registry,
>> | when I noticed that none of my changes are taking effect. I have
no
> idea
>> | how or when it became locked.
>> |
>> | How do you unlock it?
>> |
>>
>> Likely you have some other program that dis-allows modification.
That
>> presumes you DID shutdown and restart after the changes.
>>
>> Check your Anti-Virus, Anti-SpyWare, and like programs [any tweak
> programs
>> as well], to see if they provide that protection [system and/or file
>> protection].
>>
>> Check this key and entries [standard]:
>> ------
>> REGEDIT4
>>
>> [HKEY_CLASSES_ROOT\regfile]
>> @="Registration Entries"
>>
>> [HKEY_CLASSES_ROOT\regfile\DefaultIcon]
>> @="C:\\WINDOWS\\regedit.exe,1"
>>
>> [HKEY_CLASSES_ROOT\regfile\shell]
>> @=""
>>
>> [HKEY_CLASSES_ROOT\regfile\shell\open]
>> @="Mer&ge"
>>
>> [HKEY_CLASSES_ROOT\regfile\shell\open\command]
>> @="regedit.exe \"%1\""
>>
>> [HKEY_CLASSES_ROOT\regfile\shell\print]
>> @=""
>>
>> [HKEY_CLASSES_ROOT\regfile\shell\print\command]
>> @="C:\\WINDOWS\\NOTEPAD.EXE /p %1"
>>
>> [HKEY_CLASSES_ROOT\regfile\shell\edit]
>> @="&Edit"
>>
>> [HKEY_CLASSES_ROOT\regfile\shell\edit\command]
>> @="C:\\WINDOWS\\NOTEPAD.EXE %1"
>>
>> --------------
>>
>> The above can be used to reset regedit to default activities by
copying
> the
>> above to a TEXT editor, saving as a .reg, and merging, or by manual
> editing.
>> Manual editing should only be done by parties who understand a
single
> wrong
>> entry may cause problems with their computer.
>>
>> --
>> MEB http://peoplescounsel.orgfree.com
>> --
>> _________
>>
>>
>>
>
>


--

Posted via http://computerhelpforums.net Forum to USENET Gateway

 

[Warren]

Sorry folks, I think I've discovered the culprit. I run Ad-aware
AD-watch
and there's a thousand options in there, one of which was blocking
changes
to the start-up section of the registry. A good security feature, but
.....
drives you crazy when you forget about it.

I figured it out by installing a little proggy called regmon.exe, which
monitors all activity in the Registry. I saw Ad-watch fly by in the
scrolling processes when I tried to edit the registry.


"glee" <glee29@spamindspring.com> wrote in message
news:%23xyl13XnIHA.944@TK2MSFTNGP05.phx.gbl...
> What do you mean by "the system won't let me"? Are you getting a
message
saying you
> are prohibited from performing the action? How exactly is the system
stopping you?
>
> OR, are you just assuming the "system won't let you" because the
items are
coming
> back into the startup list?
>
> If you just remove an item in the Run key, but don't turn off the
option
in the
> associated program to "run at startup" (or similar), the entry will
just
be added
> right back again.
>
> What programs are you trying to remove from startup?
> --
> Glen Ventura, MS MVP Windows, A+
> http://dts-l.net/
> http://dts-l.net/goodpost.htm
>
>
> "Warren" <nospam@nospam.com> wrote in message
> news:uQ9WADVnIHA.1768@TK2MSFTNGP05.phx.gbl...
> > Thanks MEB,
> >
> > There was only one small difference, regarding how the right mouse
click
> > works on reg files ([HKEY_CLASSES_ROOT\regfile\shell]
> > @=""). I loaded your file anyway. I noticed I could manually
change
the
> > string value from "" to "edit" and confirmed the change in the
right
click
> > context menu of .reg files.
> >
> > Which means the Registry isn't locked as I thought, instead I'm
doing
> > something wromg in my attempt to prevent programs from starting up.
I
am
> > trying to remove some string entries in the
> > [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
key,
to
> > prevent those programs from starting up at bootup, but the system
won't
let
> > me. What am I doing wrong ?
> >
> >
> > "MEB" <meb@not here@hotmail.com> wrote in message
> > news:%23V$Bg9SnIHA.4504@TK2MSFTNGP06.phx.gbl...
> >> "Warren" <nospam@nospam.com> wrote in message
> >> news:u0CDAbQnIHA.5472@TK2MSFTNGP03.phx.gbl...
> >> | I was trying to disable some programs from starting up by
editing
> >> registry,
> >> | when I noticed that none of my changes are taking effect. I
have no
> > idea
> >> | how or when it became locked.
> >> |
> >> | How do you unlock it?
> >> |
> >>
> >> Likely you have some other program that dis-allows modification.
That
> >> presumes you DID shutdown and restart after the changes.
> >>
> >> Check your Anti-Virus, Anti-SpyWare, and like programs [any tweak
> > programs
> >> as well], to see if they provide that protection [system and/or
file
> >> protection].
> >>
> >> Check this key and entries [standard]:
> >> ------
> >> REGEDIT4
> >>
> >> [HKEY_CLASSES_ROOT\regfile]
> >> @="Registration Entries"
> >>
> >> [HKEY_CLASSES_ROOT\regfile\DefaultIcon]
> >> @="C:\\WINDOWS\\regedit.exe,1"
> >>
> >> [HKEY_CLASSES_ROOT\regfile\shell]
> >> @=""
> >>
> >> [HKEY_CLASSES_ROOT\regfile\shell\open]
> >> @="Mer&ge"
> >>
> >> [HKEY_CLASSES_ROOT\regfile\shell\open\command]
> >> @="regedit.exe \"%1\""
> >>
> >> [HKEY_CLASSES_ROOT\regfile\shell\print]
> >> @=""
> >>
> >> [HKEY_CLASSES_ROOT\regfile\shell\print\command]
> >> @="C:\\WINDOWS\\NOTEPAD.EXE /p %1"
> >>
> >> [HKEY_CLASSES_ROOT\regfile\shell\edit]
> >> @="&Edit"
> >>
> >> [HKEY_CLASSES_ROOT\regfile\shell\edit\command]
> >> @="C:\\WINDOWS\\NOTEPAD.EXE %1"
> >>
> >> --------------
> >>
> >> The above can be used to reset regedit to default activities by
copying
> > the
> >> above to a TEXT editor, saving as a .reg, and merging, or by
manual
> > editing.
> >> Manual editing should only be done by parties who understand a
single
> > wrong
> >> entry may cause problems with their computer.
> >>
> >> --
> >> MEB http://peoplescounsel.orgfree.com
> >> --
> >> _________
> >>
> >>
> >>
> >
> >
>


--

Posted via http://computerhelpforums.net Forum to USENET Gateway

 

[MEB]

As I said, many programs now offer that type of protection both for
registry
and/or hive entries, and many provide system file
monitoring/protection.
FileMon and RegMon are excellent diagnostic programs for tracing system
activities...

--
MEB http://peoplescounsel.orgfree.com
--
_________


"Warren" <nospam@nospam.com> wrote in message
news:eRPc0OYnIHA.5208@TK2MSFTNGP04.phx.gbl...
| Sorry folks, I think I've discovered the culprit. I run Ad-aware
AD-watch
| and there's a thousand options in there, one of which was blocking
changes
| to the start-up section of the registry. A good security feature,
but
......
| drives you crazy when you forget about it.
|
| I figured it out by installing a little proggy called regmon.exe,
which
| monitors all activity in the Registry. I saw Ad-watch fly by in the
| scrolling processes when I tried to edit the registry.
|
|
| "glee" <glee29@spamindspring.com> wrote in message
| news:%23xyl13XnIHA.944@TK2MSFTNGP05.phx.gbl...
| > What do you mean by "the system won't let me"? Are you getting a
message
| saying you
| > are prohibited from performing the action? How exactly is the
system
| stopping you?
| >
| > OR, are you just assuming the "system won't let you" because the
items
are
| coming
| > back into the startup list?
| >
| > If you just remove an item in the Run key, but don't turn off the
option
| in the
| > associated program to "run at startup" (or similar), the entry will
just
| be added
| > right back again.
| >
| > What programs are you trying to remove from startup?
| > --
| > Glen Ventura, MS MVP Windows, A+
| > http://dts-l.net/
| > http://dts-l.net/goodpost.htm
| >
| >
| > "Warren" <nospam@nospam.com> wrote in message
| > news:uQ9WADVnIHA.1768@TK2MSFTNGP05.phx.gbl...
| > > Thanks MEB,
| > >
| > > There was only one small difference, regarding how the right
mouse
click
| > > works on reg files ([HKEY_CLASSES_ROOT\regfile\shell]
| > > @=""). I loaded your file anyway. I noticed I could manually
change
| the
| > > string value from "" to "edit" and confirmed the change in the
right
| click
| > > context menu of .reg files.
| > >
| > > Which means the Registry isn't locked as I thought, instead I'm
doing
| > > something wromg in my attempt to prevent programs from starting
up. I
| am
| > > trying to remove some string entries in the
| > >
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
key,
| to
| > > prevent those programs from starting up at bootup, but the system
won't
| let
| > > me. What am I doing wrong ?
| > >
| > >
| > > "MEB" <meb@not here@hotmail.com> wrote in message
| > > news:%23V$Bg9SnIHA.4504@TK2MSFTNGP06.phx.gbl...
| > >> "Warren" <nospam@nospam.com> wrote in message
| > >> news:u0CDAbQnIHA.5472@TK2MSFTNGP03.phx.gbl...
| > >> | I was trying to disable some programs from starting up by
editing
| > >> registry,
| > >> | when I noticed that none of my changes are taking effect. I
have
no
| > > idea
| > >> | how or when it became locked.
| > >> |
| > >> | How do you unlock it?
| > >> |
| > >>
| > >> Likely you have some other program that dis-allows
modification.
That
| > >> presumes you DID shutdown and restart after the changes.
| > >>
| > >> Check your Anti-Virus, Anti-SpyWare, and like programs [any
tweak
| > > programs
| > >> as well], to see if they provide that protection [system and/or
file
| > >> protection].
| > >>
| > >> Check this key and entries [standard]:
| > >> ------
| > >> REGEDIT4
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile]
| > >> @="Registration Entries"
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile\DefaultIcon]
| > >> @="C:\\WINDOWS\\regedit.exe,1"
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile\shell]
| > >> @=""
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile\shell\open]
| > >> @="Mer&ge"
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile\shell\open\command]
| > >> @="regedit.exe \"%1\""
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile\shell\print]
| > >> @=""
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile\shell\print\command]
| > >> @="C:\\WINDOWS\\NOTEPAD.EXE /p %1"
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile\shell\edit]
| > >> @="&Edit"
| > >>
| > >> [HKEY_CLASSES_ROOT\regfile\shell\edit\command]
| > >> @="C:\\WINDOWS\\NOTEPAD.EXE %1"
| > >>
| > >> --------------
| > >>
| > >> The above can be used to reset regedit to default activities by
| copying
| > > the
| > >> above to a TEXT editor, saving as a .reg, and merging, or by
manual
| > > editing.
| > >> Manual editing should only be done by parties who understand a
single
| > > wrong
| > >> entry may cause problems with their computer.
| > >>
| > >> --
| > >> MEB http://peoplescounsel.orgfree.com
| > >> --
| > >> _________
| > >>
| > >>
| > >>
| > >
| > >
| >
|
|


--

Posted via http://computerhelpforums.net Forum to USENET Gateway

 

[MEB]

Oops, forgot to add, that by using autoruns, you can selectively disable
or
remove run services and other [far more than MSCONFIG shows], just be
careful what you disable or remove..

--
MEB http://peoplescounsel.orgfree.com
--
_________


--

Posted via http://computerhelpforums.net Forum to USENET Gateway