139. Registry Cleaner: access violation while examining a probable false positive situation in a four line list. {.} 686 x64 w7
*Reg Clnr violation.zip
These were the four lines. Invalid file or directory reference
HKCR\CLSID\{DFA14C43-F385-4170-99CC-1B7765FA0E4A}\InProcServer32\ @ C:\Windows\SysWOW64\wpcumi.dll 22.01.2010, 16 99 File or directory "C:\Windows\SysWOW64\wpcumi.dll" does not exist C:\Windows\SysWOW64\wpcumi.dll
HKCR\Wow6432Node\CLSID\{DFA14C43-F385-4170-99CC-1B7765FA0E4A}\InProcServer32\ @ C:\Windows\SysWOW64\wpcumi.dll 22.01.2010, 16 99 File or directory "C:\Windows\SysWOW64\wpcumi.dll" does not exist C:\Windows\SysWOW64\wpcumi.dll
HKLM\software\classes\CLSID\{DFA14C43-F385-4170-99CC-1B7765FA0E4A}\InProcServer32\ @ C:\Windows\SysWOW64\wpcumi.dll 22.01.2010, 16 99 File or directory "C:\Windows\SysWOW64\wpcumi.dll" does not exist C:\Windows\SysWOW64\wpcumi.dll
HKLM\software\classes\Wow6432Node\CLSID\{DFA14C43-F385-4170-99CC-1B7765FA0E4A}\InProcServer32\ @ C:\Windows\SysWOW64\wpcumi.dll 22.01.2010, 16 99 File or directory "C:\Windows\SysWOW64\wpcumi.dll" does not exist C:\Windows\SysWOW64\wpcumi.dll
This is what a custom program backup did.Windows Registry Editor Version 5.00
; File created by TBackupTool
; Component version: 1.4.2
; Component used by: jv16 PowerTools 2010
; Program version: 2.0.0.686
; File Description: DFA14C43-F385-4170-99CC-1B7765FA0E4A
; Date: 22.01.2010
; Time: 14
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
This is what the registry actually contained for the CLSID (a consolidation of 5 separate RegEdit exports). DFA14C43-F385-4170-99CC-1B7765FA0E4A.regWindows Registry Editor Version 5.00
@="C:\\Windows\\System32\\wpcumi.dll"
"ThreadingModel"="Apartment"
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
"ThreadingModel"="Apartment"
@="C:\\Windows\\System32\\wpcumi.dll"
"ThreadingModel"="Apartment"
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
"ThreadingModel"="Apartment"
"ThreadingModel"="Apartment"
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
This is a backup created by Delete.Windows Registry Editor Version 5.00
; File created by TBackupTool
; Component version: 1.4.2
; Component used by: jv16 PowerTools 2010
; Program version: 2.0.0.686
; File Description: DFA14C43-F385-4170-99CC-1B7765FA0E4A
; Date: 22.01.2010
; Time: 14
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
@="C:\\Windows\\System32\\wpcumi.dll"
C:\Windows\SysWOW64\wpcumi.dll does not exist.
C:\Windows\System32\wpcumi.dll does exist.
There are multiple bugs in this case. To summarize:
*** Some items in the GUI differ from the registry content.
*** The custom backup is incorrect. That is, it wold not restore what the program would remove. It also contains a minor name=value error, harmless in this case.
*** The program removes a reference to an existent system32 dll which is not even shown in the GUI.
*** The backup with fix or delete seems to vary randomly. Some of the variations would not restore the prior state.
Here are several of the variations:
Windows Registry Editor Version 5.00
; File created by TBackupTool
; Component version: 1.4.2
; Component used by: jv16 PowerTools 2010
; Program version: 2.0.0.686
; File Description: DFA14C43-F385-4170-99CC-1B7765FA0E4A
; Date: 22.01.2010
; Time: 14
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
==================================================
Windows Registry Editor Version 5.00
; File created by TBackupTool
; Component version: 1.4.2
; Component used by: jv16 PowerTools 2010
; Program version: 2.0.0.686
; File Description: DFA14C43-F385-4170-99CC-1B7765FA0E4A
; Date: 22.01.2010
; Time: 14
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
@="C:\\Windows\\System32\\wpcumi.dll"
====================================================
Windows Registry Editor Version 5.00
; File created by TBackupTool
; Component version: 1.4.2
; Component used by: jv16 PowerTools 2010
; Program version: 2.0.0.686
; File Description: DFA14C43-F385-4170-99CC-1B7765FA0E4A - aaa
; Date: 22.01.2010
; Time: 16
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
@="C:\\Windows\\System32\\wpcumi.dll"
=====================================================
Windows Registry Editor Version 5.00
; File created by TBackupTool
; Component version: 1.4.2
; Component used by: jv16 PowerTools 2010
; Program version: 2.0.0.686
; File Description: jv16 PowerTools 2010 - Registry Cleaner
; Date: 22.01.2010
; Time: 16
@="C:\\Windows\\SysWOW64\\wpcumi.dll"
@="C:\\Windows\\System32\\wpcumi.dll"
=====================================================
Windows Registry Editor Version 5.00
; File created by TBackupTool
; Component version: 1.4.2
; Component used by: jv16 PowerTools 2010
; Program version: 2.0.0.686
; File Description: DFA14C43-F385-4170-99CC-1B7765FA0E4A - ccc
; Date: 22.01.2010
; Time: 19
@="C:\\Windows\\SysWow64\\wpcumi.dll"
@="C:\\Windows\\System32\\wpcumi.dll"