Posted 22 June 2009 - 07:02 PM
I was trying to repair a problem with "fystemRoot" showing up in place of "SystemRoot" in the HKLM\System\ControlSet00#\Services\BITS and \wuauserv \ImagePath values in the registry. The computer is running Windows XP Pro SP2 with 2GB of RAM.
The solutions I found on various sites said that, along with some other steps, I would need to change the "f" to "S" wherever fystemRoot appeared in the registry. From safe mode, I first backed up the system state to an external drive. I then ran regedit, and used <ctrl>F and F3 to search for the string. I found it in the values for both the BITS\ImagePath and wuauserv\ImagePath subkeys in each of the ControlSets, 001 through 004. In all of these locations, I first reset my permissions for the key (e.g., BITS) to full control, and then changed and saved the subkey values. After I rebooted the computer, the corrections were in place in ControlSet003 and ControlSet004. But the entire ControlSet001 and ControlSet002 were gone! That's all of the subkeys, not just the ones I edited! What's more, I still had no BITS service or wuauserv service running.
I restored the system state to take the registry back to its original state, and then tried the whole process again. I got the same results.
My question is, what could I have done with Regedit that would have removed entire keys, and why only two of the four that I edited? Has anybody seen anything like this before? Thanks for whatever you can tell me.
I will continue pursuing my original problem separately.