Missing Folder (second try)

  • Thread starter Thread starter Mike
  • Start date Start date
M

Mike

Please read through the following, then my follow-up. That
should clear things up.

Mike wrote in
After cleaning a worm, I found that the runservices folder
is missing from my currentversion. (Maybe I deleted it,
but I don't think so). Things seem to work OK, but
subsequent virus fixes ask me to delete certain keys from
this folder. Is it there but hidden? How do i recreate it?
Do I need to worry about it?

Please reply to my email: (e-mail address removed)

All replies posted to the group.

What OS? SP? "runservices" may not even be used in your
OS. IIRC
no NTx OS use this key. It's a Win9x-only key I believe
but have not
checked this in a while.

What is "currentversion"?
Specify fully qualified paths in the future. Such as:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersio
n
\RunServices\
..

OK
1. This is a win2000 newsgroup, so I thought that might
answer the first question, but my OS is WIN2000
professional.

2. My runservices folder is missing from this path:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersio
n
\RunServices\

3. The folder was there before I started the worm kill. I
checked. Now it is gone, but I KNOW I did not delete the
folder.

4. MY PC seems to run OK. Virus fixes want me to delete
keys from this folder, but it is not there now. Is it
hidden? How do I recreate it? Do I need to worry about it?

Again, Thanks....Mike
 
Mike wrote in
Please read through the following, then my follow-up. That
should clear things up.

Mike wrote in

All replies posted to the group.

What OS? SP? "runservices" may not even be used in your
OS. IIRC
no NTx OS use this key. It's a Win9x-only key I believe
but have not
checked this in a while.

What is "currentversion"?
Specify fully qualified paths in the future. Such as:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersio
n
\RunServices\
.

OK
1. This is a win2000 newsgroup, so I thought that might
answer the first question, but my OS is WIN2000
professional.

XP and W2K3 are sometimes covered here as well and there might be
differences between them (depending on the question of course). Best
(IMO) is to always specify as much as possible.
2. My runservices folder is missing from this path:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersio
n
\RunServices\

Okay. I have such a KEY (not a "folder", only _looks_ like a folder
in the GUI tools) and it is empty. Further, the MS KB article
http://support.microsoft.com/default.aspx?scid=kb;en-us;137367
states the this key is unused in the NTx OSs. AFAIK that is correct
and therefore the missing key will not be a problem.
3. The folder was there before I started the worm kill. I
checked. Now it is gone, but I KNOW I did not delete the
folder.

4. MY PC seems to run OK. Virus fixes want me to delete
keys from this folder, but it is not there now. Is it
hidden? How do I recreate it? Do I need to worry about it?

You need to bear in mind that some "manual removal" instructions
include information that may not apply to you. Often they do not
have entirely separate instructions for each OS but rather include
all the values possible.

I presume that since the "RunServices" Key is not used, then it will
not cause any problems. However, if all you want to do is to re-
create the key, this can be done in several ways. One is:
Run regedit.exe
Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
\CurrentVersion
Ensure that "CurentVersion" is selected (highlighted) in the left
pane, then r-click it and select New -> Key from the menu. Type in
"RunServices" (without the quotes) and press Enter.

Always backup the entire registry before making alterations.
Routine full registry backups are essential.

Running the "Backup" (ntbackup.exe) tool and making either
a System State backup or
a ERD (and check the box "Also backup the registry to...")
will backup the OS's system registry to %systemroot%\repair\Regback\

Using the second option will also backup your account Profile's
registry hive files.

You may be interested in a utiltiy named ERUNT as another means to
backup the registry and even keep several versions. Google it.
 
Back
Top