Forum Home
Press F1
 
Thread ID: 63447 2005-11-10 02:48:00 Msconfig utility FrankS (257) Press F1
Post ID Timestamp Content User
403185 2005-11-10 02:48:00 Running XP with SP2 and all updates, 750mb RAM, 40GB hard drive with about 60% free space.

Msconfig Access Denied Error

Run Msconfigcleanup to remove
C:\PROGRA~1\Adobe\ACROBAT~4\Reader\READER~1.EXE
After removing went to Start | Run | msconfig | OK and got
“An Access Denied Error was returned while attempting to change a service. You may need to log on using an Administrator Account to make the specific changes”
Both accounts available have Administrators authority
FINDINGS
MS Article 314448 describes this fault, advises problem corrected in Service Pack 1 with msconfig.exe v5.1.2600.28 dated 6/2/02
Did search for msconfig.exe and found
C:\Windows\Prefetch\msconfig.exe ?????.pf (did’nt note ???? details)
C:\Windows\Service Pack Files\i386\msconfig.exe v5.1.2600.2180 dated 27/11/2004
C:\Windows\PC HEALTH\HELP CTR\Binaries\msconfig.exe v5.1.2600.2180 dated 26/11/2004
Found the Service Pack exe opened to normal window but PC HEALTH produced the Access Denied Error message
With all security progs ( Norton AV2004, Zone Alarm Anti Spyware, AdAware, Spybot, Spyware Blaster) updated got clean bill plus a Hijack run showed nothing.
Run System restore and brought back the ACROBAT listing in Msconfigcleanup.
Search of PC World PressF1 gave same problem by Internet.cam on 8.8.05, don’t have Acronis True image
Checked Admin Tools /Event Viewer logs, no listing for Access Denied Error.
Msconfig.exe in Service Pack opened to normal window
Ditto in PC HEALTH opened with Access Denied Error.
Renamed Msconfig.exe in PC HEALTH and copied msconfig.exe from Service Pack to PC HEALTH . opened msconfig.exe in PC HEALTH and got same Access Denied.
Went to Start | Run | msconfig and got msconfig could not be found ? registry altered.
Have a copy of Registry for 27/10/05 but loathe to use it as it may not cure the Access Denied but will create other problems.

Subject to any comments will have to use the Service Pack msconfig.exe on the rare occasions it is needed.
FrankS (257)
403186 2005-11-10 03:03:00 try the file associatoin fix i posted here:

pressf1.pcworld.co.nz
drcspy (146)
403187 2005-11-10 04:50:00 Wow, I had been tryin to remember what the name of that program was for so long... Lol I boot annoyance i had to fix... CorbinH (37)
403188 2005-11-11 06:25:00 Thanks drcspy for file association bat but there is no problem with other exe files.
Early this year I installed another hard drive and copied the C drive to a partition H as a backup. Today went to H and both the Service Pack and PC HEALTH copies of msconfig.exe opened to the full window. Replaced the current C PC HEALTH msconfig.exe with the H PC HEALTH msconfig.exe but when opened in C got the Access Denied Error. All msconfig.exe are same version but are dated either 26/11/04 or 27/11/04. Only other thing found is that with moving files around have ended up with about 6 msconfig.exe Prefetch files. Have deleted these as Windows will recreate another one at next opening of msconfig.exe.
Conclusion is that in the current C Registry something was altered between early this year and a few days ago that triggers the Access Denied Error. Have jv16 Power Tools, will see if this produces anything.
FrankS (257)
403189 2005-11-11 06:33:00 If Msconfig doesnt work, does regedit and the task manager work/open/run??

Use ccleaner, and then go to tools/startup and then delete the entries u want to delete, for the time being.
Speedy Gonzales (78)
403190 2005-11-11 06:40:00 good questions........there's a virus that disables most of them......another thing.....it's only a workaround but you can get a program called.....startup control panel.....it'll do exactly what msconfig does as regards startup listings anyway drcspy (146)
403191 2005-11-11 06:40:00 you could try 'hijack this' also and perhaps post the log here....... drcspy (146)
403192 2005-11-11 23:59:00 Regedit and Task Manager both working OK
Have run jvc16 Power Tools registry tools to no effect
Have run CCleaner including Issues to no effect
Opening msconfig with Service Pack msconfig.exe produces
Prefetch\msconfig.exe0043FD31.pf but Start/Run/msconfig gives "Cannot find" message. Propose leave msconfig alone until it is essential to alter.
Below is Hihackthis log as requested.

Logfile of HijackThis v1.99.1
Scan saved at 12:41:08 p.m., on 12/11/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Iomega\AutoDisk\ADService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb0 4.exe
C:\KMaestro\Key_e.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\FreeMem Professional\fmempro.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Hijack This\hijackthis\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.xtra.co.nz
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
N3 - Netscape 7: user_pref("browser.startup.homepage", "www.xtra.co.nz/home"); (C:\Documents and Settings\FrankS\Application Data\Mozilla\Profiles\default\cr05fdh3.slt\prefs.j s)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%206%5 Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\FrankS\Application Data\Mozilla\Profiles\default\cr05fdh3.slt\prefs.j s)
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\ Yahoo! \Companion\Installs\cpn\ycomp5_5_7_0.d ll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\ Yahoo! \Companion\Installs\cpn\ycomp5_5_7_0.d ll
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [ADUserMon] C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
O4 - HKLM\..\Run: [KeyMaestro] C:\KMaestro\KMaestro.exe
O4 - HKLM\..\Run: [WheelMouse] C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [Deskup] C:\Program Files\Iomega\DriveIcons\deskup.exe /IMGSTART
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb0 4.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKCU\..\Run: [FreeMem Pro] "C:\Program Files\FreeMem Professional\fmempro.exe" autostart
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - update.microsoft.com
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - (no file)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Iomega Active Disk (_IOMEGA_ACTIVE_DISK_SERVICE_) - Iomega Corporation - C:\Program Files\Iomega\AutoDisk\ADService.exe
FrankS (257)
403193 2005-11-12 00:13:00 That log looks OK, but this can be ticked

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

I wouldnt run 2 firewalls at the same time. They'll clash.

Uninstall Nortons, or Zonealarm.

Not too sure what this is:

C:\KMaestro\Key_e.EXE

Unless its for your mouse. But thats in another folder.
Speedy Gonzales (78)
403194 2005-11-12 05:36:00 Thanks Speedy
Will tick the 04 item
Have run Nortons and Zone Alarm for some years so will leave alone
KMaestro is most likely an earlier mouse, will check further
Did a check with a Hijackthis log from 18 months ago, noted Messenger\msmsgs.exe is running although this is unchecked in msconfig/Services plus Windows Messenger / Tools / Options / "Run the program when Windows starts" is unchecked. Did a google on msmsgs.exe, talk about confusing information, msmsgs.exe is located in Progams/Messenger (plus as expected in Service Pack, Prefetch and 1386\MMSSETUP.CAB). Presume the two 09 items are running Messenger regardless of the above settings.
FrankS (257)
1 2