Registry Finder found more than 10,000 keys with an invalid
RegEdit permissions dialogs for most, probably all, of these keys showed an owner such as this: "Account Unknown(S-1-5-21-2736614755-4186107725-1336004102-1003)" or this "Account Unknown(S-1-5-21-2736614755-4186107725-1336004102-1009)."
I can no longer demonstrate the issue on my system. I corrected the ownership as follows:
*** Made a custom registry backup from Registry Finder.
*** Deleted all the invalid owner keys with Registry Finder.
*** Restored the backup.
*** Repeated the procedure until Registry Finder found no errors.
Here are the messages from the procedure and a screenshot of the Backup Tool:
Messages:
Registry Finder:
= = = = = = = = = = = =
: HKEY_CURRENT_USER analyzed.
: HKEY_USERS analyzed.
: HKEY_CURRENT_USER analyzed.
: HKEY_LOCAL_MACHINE analyzed.
: Done!
: Failed to remove "HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\perflib\009\"! Windows core returned the following error: "The handle is invalid."
: All done! 109.31 KB of data was removed (274 registry entries and 141 keys).
: HKEY_LOCAL_MACHINE analyzed.
: HKEY_LOCAL_MACHINE analyzed.
: Done!
: HKEY_LOCAL_MACHINE analyzed.
: Done!
: All done! 2.60 MB of data was removed (6193 registry entries and 6351 keys).
: HKEY_LOCAL_MACHINE analyzed.
: All done! 31.78 KB of data was removed (57 registry entries and 96 keys).
: HKEY_LOCAL_MACHINE analyzed.
: HKEY_CLASSES_ROOT analyzed.
: HKEY_LOCAL_MACHINE analyzed.
: Done!
: Done!
: All done! 2.75 MB of data was removed (4242 registry entries and 7066 keys).
: HKEY_CURRENT_CONFIG analyzed.
: HKEY_USERS analyzed.
: HKEY_CURRENT_USER analyzed.
: HKEY_CLASSES_ROOT analyzed.
: HKEY_LOCAL_MACHINE analyzed.
: All done! 33.61 KB of data was removed (60 registry entries and 98 keys).
: HKEY_CLASSES_ROOT analyzed.
= = = = = = = = = = = =
Backup Tool:
= = = = = = = = = = = =
: Backup "HKLM no owner? 68 of 3712 lines" restored.
: Backup "HKLM no owner? All 31 of 31 lines (3600+ now have an owner (?))" restored.
: Backup "HKLM no Owner? All 3362 of 3362 lines ..." restored.
: Backup "HKLM no Owner? All 3362 of 3362 lines ..." restored.
: Backup "HKLM no owner? All 34 of 34 lines" restored.
: Backup "HKCR no owner? Back 2017 of 4202 lines" restored.
: Backup "HKCR no owner? Front 2185 of 4202 lines" restored.
: Backup "HKCR no owner? All 36 of 36 lines" restored.
= = = = = = = = = = = =
