Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: I see a funny registry entry - any way to find out what it is?

15 Oct 2015   #1
riffwraith

W7 64 Ult
 
 
I see a funny registry entry - any way to find out what it is?

Hi all.

I found a funny-looking registry entry earlier. Tho maleware and A/V scans reveal nothing, I am still concerned about this. If I open the binary value, I see gibberish. Is there any way to c&p this to make sense out of it? Any other ideas?

Thanks in advance.


My System SpecsSystem Spec
.
15 Oct 2015   #2
cyclops

Microsoft Windows 7 Ultimate 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Snap a screen shot of it and paste it here, someone is bound to look at it. I could compare it to mine
My System SpecsSystem Spec
16 Oct 2015   #3
riffwraith

W7 64 Ult
 
 

I see a funny registry entry - any way to find out what it is?-reg.jpg

It's the Pencil entry. I googled "pencil entry in registry" and some other like terms, but cam up with nothing. It's in the HCU>SW tree.

Is there any way to paste the data that's in the binary value box? I can copy it, but not paste it.

Thanks!


My System SpecsSystem Spec
.

16 Oct 2015   #4
cyclops

Microsoft Windows 7 Ultimate 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

My HCU>SW tree is too different. I have nothing close to all the programs you have installed, but it has got to have something to do with a graphics type program is my best guess. Good luck
My System SpecsSystem Spec
16 Oct 2015   #5
UsernameIssues

W7 Pro SP1 64bit
 
 

Scroll down the info in that small window and see if there is any text that could give you a clue.


Use Process Monitor to see what app reads that key.

Create a filter for rryWgNuAu8gJHj

I see a funny registry entry - any way to find out what it is?-untitled.png

Set a backing file via Menu > Backing files...

Let Process Monitor gather data while you open and close various apps.

If you need help starting and stopping the data collection, search Google for some Process Monitor videos.


My System SpecsSystem Spec
16 Oct 2015   #6
jumanji

Windows 7 Home Premium 32 bit
 
 

Pencil seems to be related to some drawing program. It could be a GIMP plugin. Generally it may be associated with any photo drawing program. You may have to look into any such programs you may have installed. (There is also a program called Pencil by Evolus but you would have known it if you had installed it.) - just my quick research. Nothing authoritative .
My System SpecsSystem Spec
16 Oct 2015   #7
riffwraith

W7 64 Ult
 
 

Thanks for the replies!

Quote   Quote: Originally Posted by cyclops View Post
My HCU>SW tree is too different.
I figured as much; thanks anyway.


Quote   Quote: Originally Posted by UsernameIssues View Post
Use Process Monitor to see what app reads that key.
Good idea - thanks. Unfortunately, procmon does not work here. In an effort to find out why, I did a search and the only useful result I got was this:

http://serverfault.com/questions/341043/process-monitor-fails-to-start-on-a-64-bit-computer

So, I installed Visual Studio 2010 (took almost an hour ) and now I can open the exe. BUT - I don't get the instructions in that link. In the resource tree, expand the "BINRES" node... huh??? Where is the resource tree? How do I expand the "BINRES" node? Did a search there as well, but didn't come up with anything worthwhile. So, I tried an app I already have called resourcehacker, but can't extract the .exe... not to sure I want to start d/l-ing other 3rd party apps I am not familiar with just to try and get that .exe


Quote   Quote: Originally Posted by jumanji View Post
Pencil seems to be related to some drawing program.
Could be, but I really have no ideas as to what.

Good ideas - keep 'em comin'!

Cheers.
My System SpecsSystem Spec
16 Oct 2015   #8
UsernameIssues

W7 Pro SP1 64bit
 
 

Try the exe in the attached zip.
My System SpecsSystem Spec
16 Oct 2015   #9
riffwraith

W7 64 Ult
 
 

Quote   Quote: Originally Posted by UsernameIssues View Post
Try the exe in the attached zip.
That works, thanks!

So, before I even tried creating a filter, I did a search for that string in PM, and found:

I see a funny registry entry - any way to find out what it is?-reg.jpg

So it seems as tho this is tied to my sequencer, Cubase. Which, of course, is a wanted and legit app.

Weird, that entry does not show up in my Vista registry, where I have the same version of Cubase installed. I guess it's ok then... maybe I will email tech support and dbl-check.

Thanks for the help!


My System SpecsSystem Spec
16 Oct 2015   #10
UsernameIssues

W7 Pro SP1 64bit
 
 

Glad that you found the app :-)

Process Monitor is a nice tool to have around.
My System SpecsSystem Spec
Reply

 I see a funny registry entry - any way to find out what it is?




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Can you copy a WinXP Pro registry entry into Win 7 registry
Hello, Background: 1. I have a program I use always, I have the install disks and can install it on Win 7 Pro x64. It is a 32 bit program. However, this program had a critical patch issued as a download way back when and this patch cannot be installed on the 7 system, because the installer is...
General Discussion
CCleaner: Registry Entry: PN_Shield:Max ?
When I run CCleaner, often I get this entry that says "Obsolete Software Key": PN_Shield:Max Even when I delete the key, it usually ends up back in the Registry. I did a G**gle search for the term, but did not turn up anything helpful. Does anyone know what application/process is creating...
System Security
An entry in registry missing
I want gain an access to com ports and require changed in registry entry of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\PNP0501 but it seems the folder is not there. I have tried regcleaner and reg fix did not help. thanks
Drivers
How can i create this registry entry? (regarding sdelete)
And run the following reg-file. Code: Windows Registry Editor Version 5.00 @="\"C:\\Program files\\sdelete.exe\" \"%1\"" This will create a right click menu for all files. ______________ I have placed the sdelete folder in C program files but im not sure what to do after that. Thanks...
General Discussion
Cannot delete Registry entry
After trying to recover from severe malware infection, I ran Spybot S&D. It removed several Registry entries but one it could not. I tried manually but it could not be removed. It is located at Hkey-users\S-1-5-21-200258984-2800820833-1255355968\Software\DataMngr. It has subdirectories "Files",...
System Security
What is the strange registry entry and how can I delete it?
I have the following registry key that appears to do nothing but keeps re-creating itself: HKEY_CURRENT_USER\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon This key contains a Shell value that points to an empty directory on my system: C:\Users\Birk\AppData\Local\bc53345c\X If I...
Software


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 17:31.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App