Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986 Description of the Microsoft Windows registry
When you try to run the Sysinternals FileMon and RegMon utilities from inside the Microsoft SoftGrid Virtual Environment, you receive the following error message:
Error Loading FILEMON/REGMON: The system cannot find the file specified Make sure that your account has the load driver and debug privileges and that Filemon/Regmon is not already running.
Version 6.07 and later versions of the FileMon and RegMon utilities use a service that is embedded into the executable file. Because the FileMon and RegMon utilities start in the Virtual Environment and the local Service Control Manager (Services.exe) cannot access the Virtual Environment, the FileMon and RegMon utilities do not start.
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.
To work around this problem, use Process Monitor instead of the FileMon and the RegMon utilities. For more information about Process Monitor, visit the following Web site:
If you prefer to use the FileMon and the RegMon utilities, follow these steps.
Create a .reg file. To do this, follow these steps:
Start a text editor such as Notepad.
Paste one of the following code examples into a new document, depending on the version of FileMon and RegMon.
FileMon and RegMon 7.01 and 7.02
Windows Registry Editor Version 5.00[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Filemon701]"Type"=dword:00000001"ErrorControl"=dword:00000001"Start"=dword:00000003"ImagePath"="\\??\\c:\\windows\\system32\\drivers\\filem701.sys"[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Regmon701]"Type"=dword:00000001"ErrorControl"=dword:00000001"Start"=dword:00000003"ImagePath"="\\??\\c:\\windows\\system32\\drivers\\regsys701.sys"
FileMon and RegMon version 6.x
Windows Registry Editor Version 5.00[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Filemon]"Type"=dword:00000001"ErrorControl"=dword:00000001"Start"=dword:00000003"ImagePath"="\\??\\c:\\windows\\system32\\drivers\\filem.sys"[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Regmon]"Type"=dword:00000001"ErrorControl"=dword:00000001"Start"=dword:00000003"ImagePath"="\\??\\c:\\windows\\system32\\drivers\\regsys.sys"
Note On a Microsoft Windows 2000-based computer, replace "windows" with "winnt" in the .reg file.
Import the .reg file into the local registry.
Note If you import the .reg file into the Virtual Registry, this problem still occurs. You must import the .reg file into the local registry.
As soon as you run the FileMon or RegMon utilities outside the Virtual Environment, these registry keys are deleted. Before you run the FileMon or RegMon utilities within the Virtual Environment, you must add them again to the registry.