Corrupted registry key

[Ben-Zion Joselson]

I have noticed that my Configsafe utility, that keeps
backing up the registry and selected system files every
week, has been regularly issuing the following error
message for a very long time:

Error accessing registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Perflib\00D,
creating snapshot, function RegQueryInfoKey returned a
2.

I inquired with Configsafe and got this reply:

Error 2 is key not found. There is normally filtering for
the perflib key, but that filter may miss the 00D entry.
I'm not sure why the OS is claiming the other keys don't
exist. On Win2K those error messages are informational and
will not effect the ability to perform a restore.

I have decided to leave it at that, and I suppose there
should be no harm if you, too, ignore your backup agent
complaints on this obscure registry key.

 

[stanlin]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Perflib\009

I found the solution to the problem:

the basic problem:
1. you cant change permissions on the security of the perflib\009
folder in regedt32.exe
2. you cant change any values in the 009 folder

the solution:
change the file and security permissions of
%systemroot%\system32\perfc009.dat and perfh009.dat
-> they should not be read-only, and your user should have security
permissions to edit them

the explanation:
somehow, the registry values in the 009 folder correspond directly to
those dat files, so you need access to modify them in order to change
the registry values. i believe this would work in the same manner for
007 or other folders, if those are your problem.


feel free to email me, i banged my head against this stupid problem for
an entire week.

Hi Marc,

unfortunately I have not been able to solve the problem, yet. Let's
keep
each other informed as soon as one of us is able to solve it ;-)

Markus