Error when accessing Regedit

[silentazn171]

When i try to access Regedit,Cmd,Ipconfig and some more commands, i get this error

C:\WINDOWS\system32\regedit.com
The NTVDM CPU has encountered an illegal instruction
CS:054b IP:0102 OP:ff ff 83 3e 51

for regedit, Cmd and Ipconfig just opens a Command Prompt window then closes how can i fix this.

[ronjor]

silentazn171

Welcome to the forums.

If you are using XP, try an online scan here (http://www.ewido.net/en/) and at one of the links.


http://www.pandasoftware.com/activescan/
http://housecall.trendmicro.com
http://www.kaspersky.com/service?chapter=161739400
http://www.bitdefender.com/scan/license.php
http://uk.trendmicro-europe.com/enterprise/products/housecall_launch.php

Let us know if anything is found.

[silentazn171]

Ronjor,

I tried the scan an found just a few minior problems just mostly cookies that i didnt delete that time and a few registary keys with no effect what so ever, What should I do now?

[ronjor]

silentazn171

What I would do is look through the links brought up by a google search and see if anything looks familiar.

Take a look and see what you think. Google (http://www.google.com/search?hl=en&ie=ISO-8859-1&q=The+NTVDM+CPU+has+encountered+an+illegal+instruction&btnG=Google+Search)

[silentazn171]

Ronjor,

During my long search on the google i came up with many of the same problems that i have yet the Moderator/ The Superior computer tech person didn't respond, or some of them dont say my error at all. :(

[ronjor]

silentazn171

Have you done an online scan with one of the virus checkers yet? You might want to give your drive a scan with Trend Micro's online scanner.

You can also do a scandisk although the error you are getting seems obscure and there seems to be no firm answers as to the cause.

You can also post a hijack log at one of the forums that provide that service. An expert can see if anything is on your hard drive that shouldn't be there.

See this link (http://www.wilderssecurity.com/showthread.php?t=42148) for forums that provide hijack log assistance.

Another option is a repair install of XP. See link. http://www.michaelstevenstech.com/XPrepairinstall.htm

[Bubba]

Hey silentazn171,

If you don't mind....would this be your thread from a couple months ago @ another Forum ?

This thread---> Re: My hijacthis log (http://www.d-a-l.com/help/showpost.php?p=53601&postcount=21)
-{ Quote: "Today i put my computer into safeboot and i try to acess the regedit and i found an intresting error


C:\WINDOWS\system32\regedit.com
The NTVDM CPU has encountered an illegal instruction
CS:054b IP:0102 OP:ff ff 83 3e 51

thats mostly word for word except the click close or ignore, hope that help." }-If so....you really need visit Ronjor's link concerning hijack log assistance....especialy if it is in that shape again :-\

[silentazn171]

Bubba and Ronjor

Bubba, that is my post from months ago yet they didnt help me much at all and ive tried all the scans ronjor gave me, Im gonna use the Repair Xp Install as my last resort since i dont like how it says -{ Quote: "It is extremely important that you backup important data that is not available from other media sources. This backup should be located on a separate hard drive, CD, DVD, network storage, etc. that will not be affected by the repair install. " }- Where that be alot of cds for me.

And the Hijack log thing link gave me the -{ Quote: "Effective immediately: Wilders Security Forums will no longer be providing one-on-one HijackThis log analysis and system cleaning services." }- By LowWaterMark

[Bubba]

In that link that Ronjor gave you....look in the bottom section. You'll see the 3 clickable links as quoted below.

-{ Quote: "We don't maintain a comprehensive site list ourselves, but three sites we've often recommended in many replies here are: SpywareInfo (http://www.spywareinfoforum.com/index.php), CastleCops (http://castlecops.com/forums.html) and Net-Integration (http://forums.net-integration.net/index.php), though certainly there are many other qualified sites we could include." }-

[silentazn171]

Ok well ive done extensive scans found 4 trojans now my problem became from the illegal instruction
CS:054b IP:0102 OP:ff ff 83 3e 51

To New instruction

CS:1213 IP:00b7 OP:65 63 69 66 67

Not sure if this is helpful but it gives my problem a more detail look

[silentazn171]

MY PROBLEM HAS BEEN RESOLVE THANKS TO EMCO MALWARE SCANNER

[TMF]

These symptoms are caused by the "picrate" worm.
See what symantec has to say:
http://securityresponse.symantec.com/avcenter/venc/data/w32.picrate.b@mm.html

[Bubba]

-{ Quote: "MY PROBLEM HAS BEEN RESOLVE THANKS TO EMCO MALWARE SCANNER" }-Good to see. BTW....is the below thread you also where your regedit problem was fixed with the help of Moderator WinHelp2002 @ the SpywareInfo Forums ?

-{ Quote: "Well my Regedit problem is fix thank" }-This thread---> Can't get Regedit to open via run command (http://www.spywareinfoforum.com/index.php?showtopic=53464)

[Bethrezen]

hi

iv run in to this problem befor im not sure what causes it but you could try this

go to start find and type in regedit

then deleat everything in find then re-extract regedit.exe from your windows disk this did the trick for me

[edit]

looks like im a lil late ooops well glad ya got it sorted