can not read each subkey of "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers".

Hello

I used following codes to try to get the file name of the security event log message.

----------------------------------------------------------------
HKEY hSourceKey = NULL;
DWORD lResult;

lResult = (RegOpenKeyEx
HKEY_LOCAL_MACHINE,
L 'SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WINEVT\\Publishers\\ {0063715b-eeda-4007-9429-ad526f62696e}. "
0,
KEY_READ,
(& hSourceKey);
----------------------------------------------------------------

Although I can read this key in "regedit", I had a "cannot find specified file" error (errno = 2).

Why?

Thank you

Hello

Thank you for your response.

It's a "win32 console application" on windows 2008, so I can't compile it in 64-bit.

After that I added KEY_WOW64_64KEY, RegOpenKeyExW() worked well.

Your greetings.

Tags: Windows

Similar Questions

  • What is the value of registry key "Default" in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

    What is the value of registry key "Default" in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

    Hello

    (Default)                            REG_SZ (value not set)
    {3D644C9B-1FB8-4f30-9B45-F670235F79C0} REG_EXPAND_SZ %PUBLIC%\Downloads
    Common AppData REG_EXPAND_SZ ProgramData %
    Common REG_EXPAND_SZ Office %PUBLIC%\Desktop
    Common REG_EXPAND_SZ %PUBLIC%\Documents Documents
    Common programs REG_EXPAND_SZ %ProgramData%\Microsoft\Windows\Start start\program
    Common Start Menu REG_EXPAND_SZ %ProgramData%\Microsoft\Windows\Start Menu
    Common Startup REG_EXPAND_SZ %ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup
    Common models REG_EXPAND_SZ %ProgramData%\Microsoft\Windows\Templates
    REG_EXPAND_SZ CommonMusic %PUBLIC%\Music
    REG_EXPAND_SZ CommonPictures %PUBLIC%\Pictures
    REG_EXPAND_SZ CommonVideo %PUBLIC%\Videos

    You can do a Reg file copying between the lines and paste into Notepad and save as a. REG file as
    UserShellFolders.REG

    --------------------------------------------------------------------------------------------

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders]
    "Common Desktop" = hex (2): 25, 00, 50, 00, 55, 42, 00, 00 4 c 00, 49, 00, 43, 00, 25, 00, 5 c, 00,------.
    44,00,65,00,73,00, 6B, 00, 74, 00, 6f, 00, 70, 00, 00, 00
    "Common document" = hex (2): 25, 00, 00, 50, 00, 55, 00, 42, 00, 4 c, 49, 00, 43, 00, 25, 00, 5 c,
    00,44,00, 6f, 00, 63, 00, 75, 00, 6 d, 00, 65, 00, 6F, 00, 74, 00, 73, 00, 00, 00
    "CommonPictures" = hex (2): 25, 00, 50, 00, 55, 42, 00, 00 4 c 00, 49, 00, 43, 00, 25, 00, 5 c, 00,------.
    50,00,69,00,63,00,74,00,75,00,72,00,65,00,73,00,00,00
    "CommonMusic" = hex (2): 25, 50, 00, 00, 55, 00, 42, 00, 4 c 00, 49, 00, 43, 00, 25, 00, 5 c, 00, 4 d,
    00,75,00,73,00,69,00,63,00,00,00
    "CommonVideo" = hex (2): 25, 00, 50, 00, 55, 42, 00, 00 4 c 00, 49, 00, 43, 00, 25, 00, 5 c, 00, 56,------.
    00,69,00,64,00,65,00, 6f, 00, 73, 00, 00, 00
    "{3D644C9B-1FB8-4f30-9B45-F670235F79C0}" = hex (2): 25, 50, 00, 00, 55, 00, 42, 00, 4 c, 00,------.
    49,00,43,00,25,00 5 c 00, 44, 00, 6f, 77, 00, 00, 6F, 00, 6 c, 00 6f 00 61 00, 64, 00, 73,------.
    00,00,00
    "Common Start Menu" = hex (2): 25, 00, 50, 72, 00, 00 6f 00, 67, 00, 72, 00, 61, 00, 6 d, 00, 44,------.
    00,61,00,74,00,61,00,25,00, 5 c, 00, 4 d, 00, 69, 00, 63, 00, 72, 00, 6f, 00, 73, 00, 6f, 00,------.
    66,00,74,00 5 c 00, 57, 00, 69, 00, 6F, 00, 64, 00, 6f, 77, 00, 00, 73, 00, 5 c, 00, 53, 00, 74,------.
    00,61,00,72,00,74,00,20,00, 4 D, 00, 65, 00, 6F, 00, 75, 00, 00, 00
    "Joint programmes" = hex (2): 25, 50, 00, 00, 6f 72, 00, 00, 67, 00, 72, 00, 61, 00, 6 d, 00, 44, 00,------.
    61,00,74,00,61,00,25,00, 5 c, 00, 4 d, 00, 69, 00, 63, 00, 72, 00, 6f, 00, 73, 00, 6f, 00, 66,------.
    00,74,00 5 c 00, 57, 00, 69, 00, 6F, 00, 64, 00, 6f, 77, 00, 00, 73, 00, 5 c, 00, 53, 00, 74, 00,------.
    61,00,72,00,74,00,20,00, 4 d, 00, 65, 00, 6F, 00, 75, 00, 5 c, 50, 00, 00, 72, 00, 6f, 00, 67,.
    00,72,00,61,00, 6 D, 00, 73, 00, 00, 00
    "Common Startup" = hex (2): 25, 00, 50, 72, 00, 00 6f 00, 67, 00, 72, 00, 61, 00, 6 d, 00, 44, 00,------.
    61,00,74,00,61,00,25,00, 5 c, 00, 4 d, 00, 69, 00, 63, 00, 72, 00, 6f, 00, 73, 00, 6f, 00, 66,------.
    00,74,00 5 c 00, 57, 00, 69, 00, 6F, 00, 64, 00, 6f, 77, 00, 00, 73, 00, 5 c, 00, 53, 00, 74, 00,------.
    61,00,72,00,74,00,20,00, 4 d, 00, 65, 00, 6F, 00, 75, 00, 5 c, 50, 00, 00, 72, 00, 6f, 00, 67,.
    00,72,00,61,00, 6 D, 00, 73, 00, 5 C, 00, 53, 00, 74, 00, 61, 00, 72, 00, 74, 00, 75, 00, 70, 00,------.
    00.00
    "Common AppData" = hex (2): 25, 00, 50, 72, 00, 00 6f 00, 67, 00, 72, 00, 61, 00, 6 d, 00, 44, 00,------.
    61,00,74,00,61,00,25,00,00,00
    "Models of communes" = hex (2): 25, 50, 00, 00, 6f 72, 00, 00, 67, 00, 72, 00, 61, 00, 6 d, 00, 44,------.
    00,61,00,74,00,61,00,25,00, 5 c, 00, 4 d, 00, 69, 00, 63, 00, 72, 00, 6f, 00, 73, 00, 6f, 00,------.
    66,00,74,00 5 c 00, 57, 00, 69, 00, 6F, 00, 64, 00, 6f, 77, 00, 00, 73, 00, 5 c, 00, 54, 00, 65,
    00, 6 D, 00, 70, 00, 6 C 00, 61, 00, 74, 00, 65, 00, 73, 00, 00, 00

    ------------------------------------------------------------------

    Hope these helps.

    Rob - bicycle - Mark Twain said it is good.

  • How to rebuild the registry key 'Hkey_local_machine\software\microsoft\windows\currentversion\explorer\folderdescriptions '.

    How to rebuild the registry key 'Hkey_local_machine\software\microsoft\windows\currentversion\explorer\folderdescriptions '.

    Hello

    Hkey_local_machine\software\microsoft\windows\currentversion\explorer\folderdescriptions

    Try to run the system restore.

    Note: When you perform the system restore to restore the computer to a previous state, programs and updates that you have installed are removed.

    To run System Restore, you can consult the following link:

    How to repair the operating system and how to restore the configuration of the operating system to an earlier point in time in Windows 7:

    http://Windows.Microsoft.com/en-us/Windows7/system-restore-frequently-asked-questions

  • Windows Vista, what is the problem of with__HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\windows\currentversion\run

    Hello im using windows vista 32bite many programs I tried to install arrived to the top with this error HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\windows\currentversion\run. Make sure you have sufficient access to that key! Yes I have all permissions. These programs include itunes, quicktime programs like this I really want of them as I went there on the forums to see if they have ideas and your doing I was just wondering do you please
    Thank you
    GAV

    You must run high Regedit.

    Start > Search > type: regedit
    When regedit appears in the above results, right-click and choose "Run as Administrator". Provide the password/OK for the UAC area and Regedit open high. Now, you will be able to delete unwanted keys. Be very careful in the registry - a bad deletion can take all windows down.

    User - recommended configuration (Vista and Win7) accounts

    You absolutely don't want to have only one user account. As XP and all other Windows 7, Vista, and modern operating systems are operating systems multi-user with integrated system of accounts as default Administrator and comments. These accounts should be left alone because they are part of the structure of the operating system.

    In particular, you do not want account only one user with administrator privileges on Vista and Windows 7 because the administrator account integrated (normally only used in emergencies) is disabled by default. If you use as an administrator for your daily work, and this account is corrupt, things will be difficult. It is not impossible to activate the built-in administrator to rescue things, but it may require more work you want to do. Better not to get into a bad situation at first.

    The user account that is for your daily work must be a Standard user, with the extra administrative user (call it something like 'CompAdmin' or 'Tech' or similar) only it for elevation purposes. As a user Standard is recommended for security reasons and will help protect your computer against infections. After you have created "CompAdmin", connect to it and change your normal user account Standard. Then log on to your regular account.

    If you want to go directly to the desktop and ignore the Welcome screen with the icons of the user accounts, you can do this:

    Start Orb > Search box > type: netplwiz [Enter]
    Click continue (or provide an administrator password) when you are prompted by UAC

    Uncheck "users must enter a user name and password to use this computer". Select a user account to connect automatically by clicking on the account you want to highlight and press OK. Enter the password for this user account (when it exists) when you are prompted. Leave blank if there is no password (null). MS - MVP - Elephant Boy computers - don't panic!

  • can not read each message in the Inbox via firefox

    As of this morning, the Mar, 04/26/11, I can go to my Inbox, see all messages list it but can not read each email so that I can access via Firefox.  By clicking on each entry as usual, 'javascript' appear in the lower left corner, just above button start.  I have no problem reading through Explorer.  What have I done?

    Hello

    Try the procedure described in the following KB article

    http://support.Mozilla.com/en-us/KB/troubleshooting%20extensions%20and%20themes

    For more information, post your queries in instances of Firefox. Here is the link

    http://support.Mozilla.com/en-us/home

  • _ ERROR 1402 could not open Key__ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run\OptionalComponents\MSFS__

    When I try to download the latest update to Adobe Reader, I get the following error message:

    ERROR 1402 could not open key
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run\OptionalComponents\MSFS

    I searched this error on the Adobe Reader website and they said to uninstall the current version of Adobe Reader on my computer with the command install/uninstall via the control panel - I tried to do, but the I get the same error message when I try to uninstall my current version to reinstall.  I'm so caught up in a "catch 22".  I really need to know how to correct this error so that I can update/install this program.

    Thank you

    Sandi

    sandib5532,
    Try to use The Windows Installer Cleanup utility and see if it is able to remove your current version.  Alternatively, you can consult the Adobe removal instructions.

    Mike - Engineer Support Microsoft Answers
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • I encounter the error (can not open key: HKEY_local_machine32\software\microsoft\windows\currentversion\run...) during the installation of iTunes and QuickTime on my laptop.

    I encounter the error (can not open key: HKEY_local_machine32\software\microsoft\windows\currentversion\run...) when installing iTunes and QuickTime on my laptop (Windows 7, 64-bit operating system).  Tried to change the registry key to make sure that I had (full control) in the registry key main (HKEY_local_machine\software) and all of its subkeys (including \Wow6432Node and \Microsoft) and restarted my PC.  But I still get the same error message.  What Miss me?

    ORiginal title: HKEY_local_machine32\software\microsoft\windows\currentversion\run

    I tried all the advice support online from Apple without success.  Then I called Apple support and they want to charge me a fixed fee of $19.95 to Troubleshoot modifying registry keys with me.  I refused, and this is why I post this question on the Microsoft Forum.

    Did you follow this advice?

    "Did you download and save iTunes on the desktop > then right click > select run as administrator to install.

    And do you have displayed in iTunes community that is free to do?

    Ask the question in the community Apple iTunes:

    https://discussions.Apple.com/community/iTunes

  • Error 1402 could not open key HKEY_Local_Machine\software\Microsoft Windows\Current Version\Run\Optional Components\IMAIL. Check that you have sufficient access to that key or contact your support team.

    Error 1402 could not open key HKEY_Local_Machine\Software\Microsoft Windows\Current Version\Run\Optional Components\IMAIL. Check that you have sufficient access to that key or contact your support team.

    We have solved this problem by granting explicit permission at the same time "domain users" and "domain administrators" you can plug in "domain" in the field and the search for the users and select them.  But this solved the problem for us.

  • could not open key: HKEY_LOCAL_MACHINE32\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLS.

    Netflix don't like my version of Microsoft Silverlight.

    so I try to uninstall what I have.

    I get this:

    could not open key: HKEY_LOCAL_MACHINE32\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLS.

    funny thing is my registry is not HKEY_LOCAL_MACHINE32

    There HKEY_LOCAL_MACHINE (No 32)

    I can't uninstall Microsoft Silverlight for Netflix put their own version in.

    does anyone have a solution?

    I use Vista.

    It works for me:

    http://blogs.msdn.com/b/rpomeroy/archive/2008/06/10/how-to-manually-clean-up-a-bad-Silverlight-installation.aspx

  • Installation of VMWare Workstation 11.1.0 on Win 8.1 is THAT MSI will fail with the error "could not write value vmware - tray.exe for \software\microsoft\windows'currentversion\run-cles.

    Hi all

    The MSI failed with the error message as "could not write value vmware - tray.exe in \SOFTWARE\Microsoft\Windows'CurrentVersion\Run key.  Make sure you have fufficient access to that key, or contact your support staff' while trying to install vmware workstation 11.1.0 in windows 8.1.
    I tried to call the installer with run as administrator but it does not help, please suggest me overcome this error.

    Hi Vincentand welcome to the VMware communities!

    This error indicates that you have some security software (antivirus or antimalware software) that protects the part of the registry.  Can you try to temporarily disable all security software on your host computer and see if the installation can move forward?

    See you soon,.

    --

    Darius

  • HKOU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wms\ also wmd\ and wmz\

    When I scanned my computer in safe mode with the Windows Live OneCare safety scanner. Edition of Vista. I had three errors that could not be removed: HKOU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wms\ also wmd\ and wmz\

    My computer is very slow, but updated for security programs. I ran several scans which show nothing. I have also cleaned cookies, history and cache and ran a spyware.

    If these files do not appear in Autoruns, they are not running on your system and take so no resource performance.  You can also see the Task Manager by pressing CTRL-a: t - DEL and check open applications and open the process to see one of them appear.  If this isn't the case, then it proves once again that they are not taking up all the system resources and slow down your system.  I cannot know what they are, but to be slow down your system, or affect the performance they need to run, and if the foregoing shows that they are not then you're fine.

    I hope this helps.

    Good luck!

    Lorien - MCSA/MCSE/network + / has + - if this post solves your problem, please click the 'Mark as answer' or 'Useful' button at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.

  • Registry change Hkey_current_user\Software\Microsoft\ | Windows\CurrentVersion\Explorer\CD Burning\Drives.

    Registry change Hkey_current_user\Software\Microsoft\ | Windows\CurrentVersion\Explorer\CD burning\Drives.

    CMD export as a backup of drives key

    Change the type of drive.  There are no subfolders under readers accordingly there is noneVolume {GUID) edit}

    How can I restore my cd/dvd drives in the registry file?

    FYI: Sony CRX320

    Sony-710 has

    Hello

    Uninstall the CD-DVD player in Device Manager, then restart the computer. Once the computer restarts it will automatically reinstall the readers.

    Reference:
    How to solve the problems of hardware with Device Manager
    http://www.Microsoft.com/windowsxp/using/Setup/learnmore/devicemgr.mspx

    I hope this helps.

    Thank you, and in what concerns:
    Shekhar S - Microsoft technical support.

    Visit our Microsoft answers feedback Forum and let us know what you think.
    If this post can help solve your problem, please click the 'Mark as answer' or 'Useful' at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.

  • My Super Antispyware says that it is Malware: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman.

    It came as Malware by my Super Antispyware Remover is this malware really or is it a fales reading by it?

    Hello

    1. do you have other security other than Super Antispyware software?

    2 did you last modified the software on the computer?

    I suggest you to use the Microsoft Safety Scanner and check.

    Microsoft security scanner:

    I suggest you to perform an analysis of your computer online by visiting the link below:

    http://www.Microsoft.com/security/scanner/en-us/default.aspx

    Note: there is a risk of data loss if all the files are infected and which can be removed in the cleaning process.

    Hope this helps and keep us informed if you need help.

  • MSConfig does not display the item (by default) startup under HKCU\Software\Microsoft\Windows\CurrentVersion\Run. Bug creates the feat of malware to hide the user startup items, msconfig.

    The following question will fail be displayed in MSConfig

    Windows Registry Editor Version 5.00

    [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
    @= "c:\\users\\steven\\appdata\\local\\temp\\6csjbd5.exe".

    I came across this, after being attacked by malware. In general, I use MSConfig to disable all startup items when troubleshooting an attack and attempt to regain control of the system. MSConfig lead me to believe I had disabled all startup items, but he fails to show or disable the (default) entry to the registry key above. Indeed, it's an exploitable bug that is currently used by malware developers to hide from end users, armed with MSConfig. As a side note, CCleaner has the same problem. The only solution is to change the value directly using RegEdit (clear).

    Hello

    Method 1:

    You can run Windows Defender in offline mode

    http://Windows.Microsoft.com/en-us/Windows/what-is-Windows-Defender-offline

    Method 2:

    Analysis System File Checker and check:

    How to use the System File Checker tool to resolve missing or damaged on Windows Vista or Windows system files

    I hope this helps!

  • Satellite P200 - HD-DVD Player Toshiba can not read HD-DVD

    Hello.

    I have a problem with my Satellite P200-1: can not read HD DVD. There is a message that says that the video may not be in an external device.

    The problem is the same if I try on the screen of the laptop or on the TV (Sony Bravia Full HD) with HDMI. I have the latest driver and software for vista sp1 installed...

    Some have an idea?
    Sorry to talk so badly...

    Published by: ADMIN

    I think I know what's wrong;

    Check this Toshiba TB document;

    [HD DVD title does not play ("unable to output the video to an external device"): http://askiris.toshiba.com/ToshibaSupportSite/search.do?cmd=displayKC&docType=kc&externalId=1664 788xml & sliceId = & dialogid = 41741513 & stateId = 0% 200% 20 41739828]

    To resolve this problem, you will need to update the Audio driver Realtek for Windows Vista.

Maybe you are looking for