corrupted registry value's under hkey_classes_root\clsid

  • Thread starter Thread starter Mathijs Drubbel
  • Start date Start date
M

Mathijs Drubbel

I the last couple off days i have seen a lot of computers
with what looks like corrupted registry value's

Mostly in the following key:
HKEY_CLASSES_ROOT\CLSID\{00020420-0000-0000-C000-
000000000046}
Normally there are under the key Inprocserver32 two value's
(Default) REG_SZ 'Oleaut32.dll'
(ThreadingModel) REG_SZ 'Both'

But I now have a third on that says:

(Inprocserver32) REG_MULTI_SZ 't3UA*-K5g()H30(Hh-
RQLocalUIComponents>8t_(u]$&...........'

Has anybody seen that and know's where the line comes from?

On some computers I have more then ten of those lines in
the registry

It gives a lot of problems
- Find command does not work
- Images in IE or not displayed
- Open in a new windows does not work
- Handheld's cannot symchronize anymore
- CD Burns programs gives error's
- Attachmate (terminal emulator) gives problems
- Windows Installer does not work anymore

And the list goes on.

I can solve the problems by removing all the corupted keys
and use the "regsvr32 Oleaut32.dll" command, but I really
have to find the underlying problem.

If anybody has seen it and knows what it causes you can
mail me, or post here.

Thanks in advance,

Mathijs Drubbel
HP (technical Support Engineer)

Here is a example of the reg key as an exported .reg file

ÿþW i n d o w s R e g i s t r y E d i t o r V e r s
i o n 5 . 0 0




[ H K E Y _ C L A S S E S _ R O O T \ C L S I D \ { 0 0 0
2 0 4 2 0 - 0 0 0 0 - 0 0 0 0 - C 0 0 0 - 0 0 0 0 0 0 0 0
0 0 4 6 } \ I n p r o c S e r v e r 3 2 ]

@ = " o l e a u t 3 2 . d l l "

" T h r e a d i n g M o d e l " = " B o t h "

" I n p r o c S e r v e r 3 2 " = h e x ( 7 ) : 7 4 , 0
0 , 3 3 , 0 0 , 5 5 , 0 0 , 4 1 , 0 0 , 2 a , 0 0 , 2 d ,
0 0 , 4 b , 0 0 , 3 5 , 0 0 , 6 7 , 0 0 , \

2 8 , 0 0 , 2 9 , 0 0 , 4 8 , 0 0 , 3 3 , 0 0 , 3 0 ,
0 0 , 2 8 , 0 0 , 4 b , 0 0 , 6 8 , 0 0 , 2 d , 0 0 , 5
2 , 0 0 , 5 1 , 0 0 , 4 c , 0 0 , 6 f , \

0 0 , 6 3 , 0 0 , 6 1 , 0 0 , 6 c , 0 0 , 5 5 , 0 0 ,
4 9 , 0 0 , 4 3 , 0 0 , 6 f , 0 0 , 6 d , 0 0 , 7 0 , 0
0 , 6 f , 0 0 , 6 e , 0 0 , 6 5 , 0 0 , \

6 e , 0 0 , 7 4 , 0 0 , 7 3 , 0 0 , 3 e , 0 0 , 3 8 ,
0 0 , 7 4 , 0 0 , 5 f , 0 0 , 2 8 , 0 0 , 7 5 , 0 0 , 5
d , 0 0 , 2 4 , 0 0 , 2 6 , 0 0 , 6 7 , \

0 0 , 2 8 , 0 0 , 3 5 , 0 0 , 7 0 , 0 0 , 3 3 , 0 0 ,
3 0 , 0 0 , 2 8 , 0 0 , 4 b , 0 0 , 6 8 , 0 0 , 2 d , 0
0 , 5 2 , 0 0 , 5 1 , 0 0 , 0 0 , 0 0 , \

0 0 , 0 0
 
--------------------
From: "Mathijs Drubbel" <[email protected]>
Subject: corrupted registry value's under hkey_classes_root\clsid
Date: Tue, 10 Feb 2004 09:44:28 -0800
Newsgroups: microsoft.public.win2000.registry

I the last couple off days i have seen a lot of computers
with what looks like corrupted registry value's
Mostly in the following key:
HKEY_CLASSES_ROOT\CLSID\{00020420-0000-0000-C000-
000000000046}
Normally there are under the key Inprocserver32 two value's
(Default) REG_SZ 'Oleaut32.dll'
(ThreadingModel) REG_SZ 'Both'
But I now have a third on that says:
(Inprocserver32) REG_MULTI_SZ 't3UA*-K5g()H30(Hh-
RQLocalUIComponents>8t_(u]$&...........'
Has anybody seen that and know's where the line comes from?
On some computers I have more then ten of those lines in
the registry
It gives a lot of problems
- Find command does not work
- Images in IE or not displayed
- Open in a new windows does not work
- Handheld's cannot symchronize anymore
- CD Burns programs gives error's
- Attachmate (terminal emulator) gives problems
- Windows Installer does not work anymore
And the list goes on.
I can solve the problems by removing all the corupted keys
and use the "regsvr32 Oleaut32.dll" command, but I really
have to find the underlying problem.
If anybody has seen it and knows what it causes you can
mail me, or post here.
Thanks in advance,
Mathijs Drubbel
HP (technical Support Engineer)
Here is a example of the reg key as an exported .reg file
ÿþW i n d o w s R e g i s t r y E d i t o r V e r s
i o n 5 . 0 0



[ H K E Y _ C L A S S E S _ R O O T \ C L S I D \ { 0 0 0
2 0 4 2 0 - 0 0 0 0 - 0 0 0 0 - C 0 0 0 - 0 0 0 0 0 0 0 0
0 0 4 6 } \ I n p r o c S e r v e r 3 2 ]

@ = " o l e a u t 3 2 . d l l "

" T h r e a d i n g M o d e l " = " B o t h "

" I n p r o c S e r v e r 3 2 " = h e x ( 7 ) : 7 4 , 0
0 , 3 3 , 0 0 , 5 5 , 0 0 , 4 1 , 0 0 , 2 a , 0 0 , 2 d ,
0 0 , 4 b , 0 0 , 3 5 , 0 0 , 6 7 , 0 0 , \

2 8 , 0 0 , 2 9 , 0 0 , 4 8 , 0 0 , 3 3 , 0 0 , 3 0 ,
0 0 , 2 8 , 0 0 , 4 b , 0 0 , 6 8 , 0 0 , 2 d , 0 0 , 5
2 , 0 0 , 5 1 , 0 0 , 4 c , 0 0 , 6 f , \

0 0 , 6 3 , 0 0 , 6 1 , 0 0 , 6 c , 0 0 , 5 5 , 0 0 ,
4 9 , 0 0 , 4 3 , 0 0 , 6 f , 0 0 , 6 d , 0 0 , 7 0 , 0
0 , 6 f , 0 0 , 6 e , 0 0 , 6 5 , 0 0 , \

6 e , 0 0 , 7 4 , 0 0 , 7 3 , 0 0 , 3 e , 0 0 , 3 8 ,
0 0 , 7 4 , 0 0 , 5 f , 0 0 , 2 8 , 0 0 , 7 5 , 0 0 , 5
d , 0 0 , 2 4 , 0 0 , 2 6 , 0 0 , 6 7 , \

0 0 , 2 8 , 0 0 , 3 5 , 0 0 , 7 0 , 0 0 , 3 3 , 0 0 ,
3 0 , 0 0 , 2 8 , 0 0 , 4 b , 0 0 , 6 8 , 0 0 , 2 d , 0
0 , 5 2 , 0 0 , 5 1 , 0 0 , 0 0 , 0 0 , \

0 0 , 0 0
--

The following article talks a little bit about this value and indicates it is added by the installation software of third party
products. Has anything been installed on all of these systems lately?

329134 - Print or Edit Dialog Boxes May Not Appear in Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;[LN];329134

Regmon, suggested by Dave Patrick in your other post would allow you to see what is touching/creating this value. How
ever if it is being added when something is being installed something like Regsnap would most likely be more useful for
taking a snapshot of the registry before and after the installation and then comparing to see if the install created this value.

Bill Peele
Microsoft Enterprise Support

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the
terms specified at http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread
from which they originated.
 
--------------------
From: "Mathijs Drubbel" <[email protected]>
Subject: corrupted registry value's under hkey_classes_root\clsid
Date: Tue, 10 Feb 2004 09:44:28 -0800
Newsgroups: microsoft.public.win2000.registry

I the last couple off days i have seen a lot of computers
with what looks like corrupted registry value's
Mostly in the following key:
HKEY_CLASSES_ROOT\CLSID\{00020420-0000-0000-C000-
000000000046}
Normally there are under the key Inprocserver32 two value's
(Default) REG_SZ 'Oleaut32.dll'
(ThreadingModel) REG_SZ 'Both'
But I now have a third on that says:
(Inprocserver32) REG_MULTI_SZ 't3UA*-K5g()H30(Hh-
RQLocalUIComponents>8t_(u]$&...........'
Has anybody seen that and know's where the line comes from?
On some computers I have more then ten of those lines in
the registry
It gives a lot of problems
- Find command does not work
- Images in IE or not displayed
- Open in a new windows does not work
- Handheld's cannot symchronize anymore
- CD Burns programs gives error's
- Attachmate (terminal emulator) gives problems
- Windows Installer does not work anymore
And the list goes on.
I can solve the problems by removing all the corupted keys
and use the "regsvr32 Oleaut32.dll" command, but I really
have to find the underlying problem.
If anybody has seen it and knows what it causes you can
mail me, or post here.
Thanks in advance,
Mathijs Drubbel
HP (technical Support Engineer)
Here is a example of the reg key as an exported .reg file
ÿþW i n d o w s R e g i s t r y E d i t o r V e r s
i o n 5 . 0 0



[ H K E Y _ C L A S S E S _ R O O T \ C L S I D \ { 0 0 0
2 0 4 2 0 - 0 0 0 0 - 0 0 0 0 - C 0 0 0 - 0 0 0 0 0 0 0 0
0 0 4 6 } \ I n p r o c S e r v e r 3 2 ]

@ = " o l e a u t 3 2 . d l l "

" T h r e a d i n g M o d e l " = " B o t h "

" I n p r o c S e r v e r 3 2 " = h e x ( 7 ) : 7 4 , 0
0 , 3 3 , 0 0 , 5 5 , 0 0 , 4 1 , 0 0 , 2 a , 0 0 , 2 d ,
0 0 , 4 b , 0 0 , 3 5 , 0 0 , 6 7 , 0 0 , \

2 8 , 0 0 , 2 9 , 0 0 , 4 8 , 0 0 , 3 3 , 0 0 , 3 0 ,
0 0 , 2 8 , 0 0 , 4 b , 0 0 , 6 8 , 0 0 , 2 d , 0 0 , 5
2 , 0 0 , 5 1 , 0 0 , 4 c , 0 0 , 6 f , \

0 0 , 6 3 , 0 0 , 6 1 , 0 0 , 6 c , 0 0 , 5 5 , 0 0 ,
4 9 , 0 0 , 4 3 , 0 0 , 6 f , 0 0 , 6 d , 0 0 , 7 0 , 0
0 , 6 f , 0 0 , 6 e , 0 0 , 6 5 , 0 0 , \

6 e , 0 0 , 7 4 , 0 0 , 7 3 , 0 0 , 3 e , 0 0 , 3 8 ,
0 0 , 7 4 , 0 0 , 5 f , 0 0 , 2 8 , 0 0 , 7 5 , 0 0 , 5
d , 0 0 , 2 4 , 0 0 , 2 6 , 0 0 , 6 7 , \

0 0 , 2 8 , 0 0 , 3 5 , 0 0 , 7 0 , 0 0 , 3 3 , 0 0 ,
3 0 , 0 0 , 2 8 , 0 0 , 4 b , 0 0 , 6 8 , 0 0 , 2 d , 0
0 , 5 2 , 0 0 , 5 1 , 0 0 , 0 0 , 0 0 , \

0 0 , 0 0
--

The following article talks a little bit about this value and indicates it is added by the installation software of third party
products. Has anything been installed on all of these systems lately?

329134 - Print or Edit Dialog Boxes May Not Appear in Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;[LN];329134

Regmon, suggested by Dave Patrick in your other post would allow you to see what is touching/creating this value. How
ever if it is being added when something is being installed something like Regsnap would most likely be more useful for
taking a snapshot of the registry before and after the installation and then comparing to see if the install created this value.

Bill Peele
Microsoft Enterprise Support

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the
terms specified at http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread
from which they originated.
 
In said:
I the last couple off days i have seen a lot of computers
with what looks like corrupted registry value's

Mostly in the following key:
HKEY_CLASSES_ROOT\CLSID\{00020420-0000-0000-C000-
000000000046}
Normally there are under the key Inprocserver32 two value's
(Default) REG_SZ 'Oleaut32.dll'
(ThreadingModel) REG_SZ 'Both'

But I now have a third on that says:

(Inprocserver32) REG_MULTI_SZ 't3UA*-K5g()H30(Hh-
RQLocalUIComponents>8t_(u]$&...........'

Has anybody seen that and know's where the line comes from?

On some computers I have more then ten of those lines in
the registry

It gives a lot of problems
- Find command does not work
- Images in IE or not displayed
- Open in a new windows does not work
- Handheld's cannot symchronize anymore
- CD Burns programs gives error's
- Attachmate (terminal emulator) gives problems
- Windows Installer does not work anymore

And the list goes on.

I can solve the problems by removing all the corupted keys
and use the "regsvr32 Oleaut32.dll" command, but I really
have to find the underlying problem.
Click to expand...



My W2k stand-alone has that value and none of your listed problems.
I have no solution for you, but here is what I can see, just for
reference.

HKEY_CLASSES_ROOT\CLSID\{00020422-0000-0000-C000-000000000046}
\InprocServer32\
[default]=oleaut32.dll
InprocServer32=Xx^{D9K.,99_gVN`Pi}dMainApp>M5KDYSUnf(HA*L[xeX)y
Threading Model=Both

I am understandably curious to hear more.
That KBA 329134 mentioned by Bill implies "safe to delete". The
valuname "InprocServer32", not the whole key.
W2K, IE 5.5, SP3, then SP4. No IE 6.x
 
In said:
I the last couple off days i have seen a lot of computers
with what looks like corrupted registry value's

Mostly in the following key:
HKEY_CLASSES_ROOT\CLSID\{00020420-0000-0000-C000-
000000000046}
Normally there are under the key Inprocserver32 two value's
(Default) REG_SZ 'Oleaut32.dll'
(ThreadingModel) REG_SZ 'Both'

But I now have a third on that says:

(Inprocserver32) REG_MULTI_SZ 't3UA*-K5g()H30(Hh-
RQLocalUIComponents>8t_(u]$&...........'

Has anybody seen that and know's where the line comes from?

On some computers I have more then ten of those lines in
the registry

It gives a lot of problems
- Find command does not work
- Images in IE or not displayed
- Open in a new windows does not work
- Handheld's cannot symchronize anymore
- CD Burns programs gives error's
- Attachmate (terminal emulator) gives problems
- Windows Installer does not work anymore

And the list goes on.

I can solve the problems by removing all the corupted keys
and use the "regsvr32 Oleaut32.dll" command, but I really
have to find the underlying problem.
Click to expand...



My W2k stand-alone has that value and none of your listed problems.
I have no solution for you, but here is what I can see, just for
reference.

HKEY_CLASSES_ROOT\CLSID\{00020422-0000-0000-C000-000000000046}
\InprocServer32\
[default]=oleaut32.dll
InprocServer32=Xx^{D9K.,99_gVN`Pi}dMainApp>M5KDYSUnf(HA*L[xeX)y
Threading Model=Both

I am understandably curious to hear more.
That KBA 329134 mentioned by Bill implies "safe to delete". The
valuname "InprocServer32", not the whole key.
W2K, IE 5.5, SP3, then SP4. No IE 6.x
 
Back
Top