The registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mssmbios\Data|BiosData is monified


  • We are running Windows 2003 SP2. We have TripWire install on the server. I am getting the following message from Tripwire: Element HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mssmbios\Data|BiosData is Modified

    I am trying to find out what  the ramifications would be if these keys were (deleted/re-permissioned) I am not going to change anything but perhaps a software on the server is trying to do that.



    Wednesday, July 14, 2010 6:21 PM


  • Hi Rauloso,


    In order to narrow down the problem, please answer the questions below.


    1.       Is the message saying that the registry key is modified an error message that block the installation of Tripwire?

    2.       Can you successfully install the TripWire on server?


    At system startup, the Microsoft SMBIOS driver collects the information about the system hardware and stores it in memory allocated by the driver and in the registry at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Mssmbios\Data.


    I’m not sure why the installation of Tripwire will need to modify the registry related to system hardware. You may contact Tripwire for further support on this.


    However, the modification of Registry could cause serious problem. Please always backup the registry before you modify it.


    How to back up and restore the registry in Windows



    Karen Ji




    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ” This posting is provided "AS IS" with no warranties, and confers no rights.
    • Marked as answer by Karen Ji Monday, July 19, 2010 1:35 AM
    Thursday, July 15, 2010 9:18 AM