URGENT: Registry Editor starts with Windows - Why?

Posted on 2002-07-23
Last Modified: 2013-12-28
I have a Windows 98 PC that starts RegEdit when Windows starts. There are no programs in the StartUp folder that would do this, nor are there any that I can see in the Run or RunOnce portions of the Registry. There are no viruses on the computer (Norton AntiVirus scan earlier today) and Norton SystemsWorks did not find and fix this problem (which it has fixed in the past for me on a different PC). Any suggestions? I need them in the next two hours.
Question by:bhlang
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 28

Expert Comment

ID: 7172794
If you run msconfig and look under the startup tab,is there anything listed that could be launching regedit?

Author Comment

ID: 7172803
I don't see anything that says regedit. Here's what the Startup Tab shows:

ScanRegistry   c:\windows\system\scanregw.exe /autorun
TaskMonitor    c:\windows\taskmon.exe
SystemTray     systray.exe
LVL 63

Expert Comment

ID: 7172805
I would disable them one at a time and see if this resolves the problem.

Also check for a wininit.* file anywhere on your machine.

Also if this is new,

 You may try doing a scanreg /fix from a DOS prompt.
Scanreg /opt  also.

You may try doing a scanreg /restore from a DOS prompt
and select a registry date from before the problem started.

I hope this helps !
Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.


Expert Comment

ID: 7172806
Look in the registry at:
File c:\windows\win.ini
  section   run=....
File c:\winstart.bat

Hope this helps.

Author Comment

ID: 7172818

LoadPowerProfile   Rundll32.exe powerprof.dll,LoadCurrentPwrScheme
ConfigSafe         c:\csafe\autochk.exe  <- This is an IBM program
AEZBProc           c:\ibmtools\aptezbtn\aptezbtn.exe
StillImageMonitor  c:\windows\system\stimon.exe
bpcpost.exe        c:\windows\system\bpcpost.exe
EM_EXEC            c:\progra~1\logitech\mousew~1\system\EM_EXEC.exe
Request            c:\windows\options\cabs\request.exe
CriticalUpdate     c:\windows\system\wucrtupd.exe -startup
NAV Agent          c:\progra~1\Norton~1\Norton~2\Navapw32.exe
NProtect           c:\program files\Norton Systemworks\Norton Utilities\Nprotect.exe
LoadPowerProfile   Rundll32.exe powerprof.dll,LoadCurrentPwrScheme
SchedulingAgent    mstask.exe
ScriptBlocking     "C:\program files\common files\symantec shared\Script blocking\sbserv.exe" -reg
CSINJECT.EXE       c:\program files\norton systemworks\norton cleansweep\CSINJECT.EXE
NPROTECT           c:\program files\norton systemworks\norton utilities\NPROTECT.EXE
SymTray - Norton SystemWorks c:\program files\common files\symantec shared\symtray.exe "Norton SystemWorks"
Webshots           c:\progra~1\webshots\websho~1.exe
Lotus Smartcenter  c:\lotus\smartctr\smartctr.exe
CleanSweep SmartSweep-Internet Sweep C:\progra~1\norton~1\norton~3\csinsm32.exe
LVL 59

Expert Comment

ID: 7172866
This line that you quoted above looks suspicious to me:

ScriptBlocking     "C:\program files\common files\symantec shared\Script blocking\sbserv.exe" -reg

Author Comment

ID: 7172909
That is part of Norton AntiVirus. Some virus' are vbs scripts and that blocks them from doing any damage.
LVL 41

Expert Comment

ID: 7172959
what is this one
Request            c:\windows\options\cabs\request.exe

go to start --> run and type msinfo32
go to software environment, startup and see where it is being loaded from

Author Comment

ID: 7172987
It is loaded from Registry (Machine Run)
LVL 41

Accepted Solution

stevenlewis earned 100 total points
ID: 7173022
uncheck it in start -->run type msconfig, go to the startup tab and uncheck it (reboot) and see
did msinfo32 have any mention of regedit?

Author Comment

ID: 7173062
Removed the REQUEST line and it rebooted without bringing up RegEdit.

Thanks everyone for your help.
LVL 41

Expert Comment

ID: 7173085
bhlang Glad we could help
That request line looked suspicious to me, I've never seen it before, and know it isn't a normal startup item

Expert Comment

ID: 7173194
But, you haven't answered the implied question: "Why was it there -- what put it there"?
LVL 41

Expert Comment

ID: 7173231
I don't know what put it there, and frankly I don't care. I don't pretend to know, every piece of software on the planet, and what they all install or not. I do know that request.exe is not a normal startup item, and suspected it was where regedit was being loaded from. My goal here was to stop regedit from being loaded on startup, and we accomplished this. If I chased down every implied question here, I would not have time to do anything else

Expert Comment

ID: 7173249

Seems the question was answered as requested.

E-E Moderator

Featured Post

Enroll in May's Course of the Month

May’s Course of the Month is now available! Experts Exchange’s Premium Members and Team Accounts have access to a complimentary course each month as part of their membership—an extra way to increase training and boost professional development.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
How to use File,History in Excel 2016 for Windows? 5 44
SCOM - Service Restart 1 30
Can't Login to Laptop 18 46
Migrate SQL 2005 DB to SQL 2016 4 32
In this article, I will show you HOW TO: Install VMware Tools for Windows on a VMware Windows virtual machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, using the VMware Host Client. The virtual machine has Windows Server 2016 instal…
The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question