Can't delete MVRegclean key from registry

[zak_711]

Hi. I have tried the latest version of this soft and now I have a big problem. I can't delete its reg entry. I have just tried PsExec but nothing happens, neither with right clic. When i try to delete the key the editor gives me an error. VritualRotot is the sandbox of Comodo Firewall.
Could any help me?
Thanks

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Control]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\EnableFullPage]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\EnableFullPage\.mfp]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\EnableFullPage\.spl]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\EnableFullPage\.swf]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Implemented Categories]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus\1]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Programmable]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Control]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Programmable]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\Interface]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\TypeLib]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0\0]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0\0\win32]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0\FLAGS]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0\HELPDIR]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0\0]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0\0\win32]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0\FLAGS]

[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0\HELPDIR]

[joby_toss]

Boot in Safe mode and delete it.

[zak_711]

Just tried ( admin ); nothing.

[webfork]

Is this a problem with the software? Should we add a disclaimer/warning to the MV Regclean entry?

I've had problems with this software in the past, as noted in the comments.

[zak_711]

I have a new information; the problem seems to be here on RegworkShop opinion:
[HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot\MVREGCLEAN.EXE\MACHINE\Software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
Note that this key, out of the sandbox, is used by flashplayer only and I can't delete it.

[SYSTEM]

Try launching the registry editor as SYSTEM. SYSTEM is a built-in user account of Windows that has even higher privileges than administrators. (Yes, that's where my nickname comes from.)

You can do that with Process Hacker. Start PH and select File -> Run As.... Enter "regedit" as the program and choose the user account "NT AUTHORITY\SYSTEM". See the screenshot below.



After clicking OK, you have a registry editor window with maximum privileges and should be able to delete the key.

[ChemZ]

Have been using MVRegClean for a while now and haven't ran into any noticeable problems. Though it doesn't surprise me when people have audio/mouse/login problems after using one of these registry cleaner.

Also haven't noticed any registry entires either.

[zak_711]

Just tried; the usual message: error while eliminating the key (and any subkey).
I was able to run regedit only as "New credential" and not as "Service"; obviously I ran PH with kph.sys

Does any know about the last window of gmer where I could run the reg Editor?

[dot]

But those registry keys belong to the Comodo firewall/sandbox. I'd deactivate the Comodo firewall (sandbox) completely and any service it might be using (after disconnecting the computer from the Internet) and then try deleting the keys again, also by changing again the privileges in the left pane of Regedit.

I'm using an older verson of MVRegclean with no problem at all and not a single registry key of it anywhere in the registry.

[zak_711]

Damn, it doesn' t work! It looks very very strange as the key is empty; however there is another user "CREATOR OWNER" that has "Special Permits"; does any know what it could be?

If I boot from another disk with another OS could I open the Reg Editor of the first ( current ) disk? Thanks.

[dot]

Maybe "RegDelNull" (by Mark Russinovich of Sysinternals) might work. It can delete registry keys that got null characters (not visible in Regedit) in their name:

http://support.microsoft.com/kb/2021860

[zak_711]

Could you suggest me, please, the correct syntax for this key ? It gives me "Scan complete" only and then if i write regdelnull path -s it gives me the "nag screen".

[dot]

The program scans the registry for key with null entries and offers them for deletion. Here's more help: sysinternal forum. If it doesn't list your keys then those keys don't have null characters.

[zak_711]

I just know about sysinterinals forum; but as you can see in the first post the key doesn't have any value; it has only regsz(s) NOT DEFINED ...

I think this key will remain a mystery; how ever I want to clarify that this is the last version, 6.0, not 5.9; moreover i discovered just now that v 6.0 is a payware!

[dot]

Never used a sandbox. I thought the very purpose of a sandbox is to leave no traces of any software in the system (and the registry). Maybe try your luck at a Comodo forum.