Solved

Registry recovery

Posted on 2004-08-18
2
1,450 Views
Last Modified: 2010-04-13
Problem description:
Running Windows 2000 SP4

In the course of attempting to establish a network connection between computers, I seem to have corrupted the registry at least. The system starts up fine, if slowly. Here are some of the symptoms:
1.      Control panel> printers is empty
2.      Control panel > Network & dial-up connections is empty.
3.      Opening any folder Explorer gives a message from AdShield before opening: Error 0x800706b5 reading the block list. AdShield is an advertisement blocking utility.
4.      Opening a file in Word gives this message: “This document could not be registered. It will not be possible to create links from other documents to this document.” several times.
5.      PowerPoint will not open a file, nor will Access. Outlook seems to work, although there is no internet connection.
6.      Looking at Control Panel>Admin Tools>Component Services>Event Viewer>System I see:
The errors are nearly all from Service Control Manager events 7001 and 7022
Information events from Tcpip event 4201
At startup first came Error from sparrow Event 4
then information from Tcpip event 4201
then information from eventlog events 6009, 6005
(Some of these events at startup will have come from Outlook trying to fetch mail, since network communication no longer available.)
7.      Looking at Control Panel> Admin Tools>Component Services>Event Viewer>Application I see:
Information from ptssvc event 105
Information from NProtectService event 3
8.      Tried to add a printer, got error message Printer operation cannot continue due to lack of resources. The print subsystem is unavailable.
9.      Tried to run the Network Connection Wizard. It hangs up at its start screen. Task manager reports it not responding. I killed it.
10.      Tried to copy a file folder from one drive to another. Drag and drop does not work. Right button copy and paste does not work.
11.      Found instructions to correct the MSOffice registry: start Office setup with /y switch. Results in error; “Invalid command line parameters.”  Even setup.exe without parameters refuses to run.

If in fact restoring the registry is in order, I am not clear on the best way to do it C:\WINNT\repair\RegBack has files only a month old and I have an ERD of the same date.  There have been very few changes in the system since that backup.  Perhaps a MS Windows critical update or two. Do I simply substitute the backup files for their counterparts in C:\WINNT\system32\config? If so which ones are likely the problem?
0
Comment
Question by:Dmetzstein
  • 2
2 Comments
 
LVL 44

Expert Comment

by:CrazyOne
ID: 11836396
Ummm I would first look into viruses

Double Check for viruses
Online Scanners

 Norton Web Services  
Virus Detection provides an analysis of your results and offers suggestions for further action. It does not examine compressed files or fix infected files.

When Symantec receives notification about a new virus, we develop and post a solution as quickly as possible. We are committed to providing swift responses to all virus threats, including Trojan horses.
http://security.symantec.com/sscv6/vc_about.asp?ax=0&langid=ie&venid=sym&plfid=23&pkj=BSZNTGXIBVEMBQAUWZK

======================
 Trend Micro HouseCall        
http://housecall.antivirus.com/housecall/start_corp.asp

======================
eTrust Online antivirus scanner
http://www3.ca.com/virusinfo/virusscan.aspx
======================

PC Pitstop Virus Scan
When the download completes, you will receive an ActiveX security dialog for the PC Pitstop virus scanner. Click Yes to install the scanner and proceed to the virus scan.

If you are currently running an antivirus package such as Norton Antivirus, it may detect our own virus detection file as a virus. If this occurs and you wish to use our scanner, please (temporarily) disable any active background virus checking software before scanning, or add our signature file (PAV.SIG) to the scanner's file exclusion list
http://www.pcpitstop.com/antivirus/AVLoad.asp
0
 
LVL 44

Accepted Solution

by:
CrazyOne earned 250 total points
ID: 11836402
Note the following approcah will not replace any system files.

Can you boot to your Win2000 CD? If so then when it finally boots At the "Welcome to Setup" screen, press F10, or press R to repair, and then C to start the Recovery Console this will allow you to use the command line. From here do something like the following. Or if the file system is FAT32 you can use a Win98 bootdisk to do this. www.bootdisk.com

COPY /Y C:\WINNT\repair\RegBack\TheParticularHive C:\WINNT\system32\config\

This will replace the registry hive to the last time that hive was bacped up. Hopefully you didn't backup the registry at the time the problems started to happen.

Following is a list of the files that are the registry hives. I would suggest starting with the SYSTEM hive and then reboot and if the problem still persists do the SOFTWARE hive next. Note these files don't have a file extension on them

DEFAULT
SAM
SECURITY
SOFTWARE
SYSTEM

For the SYSTEM hive you could try the following before doing the copy method.

ren c:\WINNT\system32\config\SYSTEM SYSTEM.bak
ren c:\WINNT\system32\config\SYSTEM.alt SYSTEM

I would suggest to first BACKUP these hives from the C:\WINNT\system32\config\ to folder of your making or choice just don't back them up to the C:\WINNT\repair\RegBack\ folder.  

You will probably need to reapply any services patches that you have previously installed.
0

Featured Post

Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
This article explains how to prepare an HTML email signature template file containing dynamic placeholders for users' Azure AD data. Furthermore, it explains how to use this file to remotely set up a department-wide email signature policy in Office …
This video discusses moving either the default database or any database to a new volume.
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now