"An Access Denied error..."

[Cindycactus]

I am using Windows XP Home Sp 3. I went into the System Configuration
Utility and to Startup. I wanted to check what programs were running
that I could stop so as to speed up my computer. The only thing I
unchecked was the Google Tool Bar. When I closed out I got this
message:

"An Access Denied Error was returned while attempting to change a service.
You may need to log on using an Administrator account to make the specified
Changes."

I am the only one who uses this computer and I was logged on as
Administrator.I restarted the computer and signed in as usual then tried
again but I get the same message.

Can anyone tell me how to resolve this. Thank you.

 

[Pegasus [MVP]]

I am using Windows XP Home Sp 3. I went into the System Configuration
Utility and to Startup. I wanted to check what programs were running
that I could stop so as to speed up my computer. The only thing I
unchecked was the Google Tool Bar. When I closed out I got this
message:

"An Access Denied Error was returned while attempting to change a service.
You may need to log on using an Administrator account to make the
specified
Changes."

I am the only one who uses this computer and I was logged on as
Administrator.I restarted the computer and signed in as usual then tried
again but I get the same message.

Can anyone tell me how to resolve this. Thank you.

Let's see your real status. Log on, then do this:
- Click Start / Run / cmd{OK}
- Type these commands:
net user "%UserName%" > c:\user.txt{Enter}
notepad c:\user.txt{Enter}
- Copy the text you see, then paste it into your reply.

 

[Cindycactus]

Let's see your real status. Log on, then do this:
- Click Start / Run / cmd{OK}
- Type these commands:
net user "%UserName%" > c:\user.txt{Enter}
notepad c:\user.txt{Enter}
- Copy the text you see, then paste it into your reply.

 

[Cindycactus]

Thank you for responding. I typed the commands you suggested and when
notepad opened it was blank.

 

[Pegasus [MVP]]

Thank you for responding. I typed the commands you suggested and when
notepad opened it was blank.

This means that you mistyped something.

 

[Cindycactus]

Sorry about that. This is what was on notepad.

User name Owner
Full Name Thelma
Comment
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 3/29/2009 4:20 PM
Password expires Never
Password changeable 3/29/2009 4:20 PM
Password required No
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory
Last logon 3/29/2009 8:42 PM

Logon hours allowed All

Local Group Memberships *Administrators
Global Group memberships *None
The command completed successfully.

 

[Pegasus [MVP]]

Sorry about that. This is what was on notepad.

User name Owner
Full Name Thelma
Comment
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 3/29/2009 4:20 PM
Password expires Never
Password changeable 3/29/2009 4:20 PM
Password required No
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory
Last logon 3/29/2009 8:42 PM

Logon hours allowed All

Local Group Memberships *Administrators
Global Group memberships *None
The command completed successfully.

Ok, your current account is indeed an Administrator's account, as you
claimed. It could be that something, perhaps some malware, changed the
permission structure of the registry key you're trying to modify. You can
find out like so:
- Click Start / Run / regedit{OK}
- Navigate to this location:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- Locate the Google Tool Bar item on the right half of the screen.
- Double-click it.
- I assume that the file name you see has a ".exe" extension. Change it to
".bad", then click OK.

This is a crude but effective way of disabling the Google Tool Bar at
startup time. You can reverse the change any time you like.

If you get an "Access denied" error when changing the extension to ".bad"
then you need to modify the permission structure of the "Run" key. Post
again if this happens.

Note that disabling the Google Tool Bar is unlikely to have a noticeable
effect on the startup speed of your PC.

 

[PA Bear [MS MVP]]

Disable Google Toolbar (and Google Updater) via IE Tools | Manage add-ons,
Cindy.

 

[John John - MVP]

This problem is also known to be caused by certain HP drivers, if you
have an HP printer you may want to look into this:

http://www.pchell.com/support/msconfig_access_denied_error.shtml

John

 

[Cindycactus]

Thanks John John. I have a Lexmark printer but a Compaq Computer. I have
tried all the suggestions but the message still comes up. I am searching for
malware now. Appreciate all the help.

 

[Pegasus [MVP]]

Did you try the registry hack I suggested? If so, what happened?

 

[Cindycactus]

Thank all of you for your help. Yes I did try the registry hack you
suggested, Pegasus, and when I got to "run" Google tool bar was not there. I
did go to tools on Internet EXplorer and disabled Google tool bar as Papa
suggested. Then I ran Malwarebytes and it found and removed two Registry
Keys Infected.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntivirusDiableNotify
(Disabled.SecurityCenter) -> Bad: (1) Good (0) -> Quarantined and deleted

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDiableNotify
(Disabled.SecurityCenter) -> Bad: (1) Good (0) -> Quarantined and deleted

I am still getting the Access Denied when I open System Config Utility.

Thank you for your help. If you have any more suggestions......

Oh and John John, I have a Lexmark printer.

 

[Jose]

Let's see your real status. Log on, then do this:
- Click Start / Run / cmd{OK}
- Type these commands:
  net user "%UserName%" > c:\user.txt{Enter}
  notepad c:\user.txt{Enter}
- Copy the text you see, then paste it into your reply.

Here is a link that tells you how to uninstall the Google Tool Bar
with IE or Firefox. Maybe try them first.

http://www.google.com/support/toolbar/bin/answer.py?hl=en&answer=9231

Why would anyone install the Goole Tool Bar in the first place? How
would it help my browsing?

If you are trying to just turn off the Google Tool Bar, why don't you
just turn it off in your Browser, under View, Toolbars - then uncheck
Google Toolbar? If you check it and uncheck it does it show up and go
away properly?

I don't see Google Tool Bar in my msconfig, but I don't use it anyway,
so I turned it on thorough the Toolbar options. I still don't see it
in msconfig.

If you think the Google Tool Bar is slowing you down, why do you think
that?

In msconfig, do you see something that says exactly "Google Tool
Bar?" What shows up under the Command and Location columns for what
you are trying to turn off?

What anti virus software are you using (ZA, McAfee, Norton, etc.).

What browser are you using? If you are using Internet Explorer, why,
oh why are you doing that? Switch to Firefox and try that. You can
still use IE if you want. I don't see anything Google related under
my IE Add-on options.

I have never downloaded the Google Tool bar, but if it was downloaded
and installed, did you check Add/Remove Programs to see if it is there
for removal?

Do you see something called Google Tool Bar running under the Services
option (not msconfig)? Can you turn it off there and set it to manual
or disabled?

If non of this works, start at the top again after booting in Safe
Mode to see if you can turn it off or get rid of it.

Let us know what works.

 

[Cindycactus]

Yes Pegasus, I did try your directions for the Registry hack and when I got
to run Google tool bar was not there.
I followed PA Bear suggestion to disable Google tool bar in IE.
John John I have a Lexmark Printer. Last night I ran Malwarebytes and it
found and removed two Infected Registry Keys.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntivirusDisableNotify
(Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted
successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify
(Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted
successfully.

Thank you for your help. Any more suggestions would be appreciated.

 

[Jose]

Let's see your real status. Log on, then do this:
- Click Start / Run / cmd{OK}
- Type these commands:
  net user "%UserName%" > c:\user.txt{Enter}
  notepad c:\user.txt{Enter}
- Copy the text you see, then paste it into your reply.

Oh yeah, if you are running your browser while trying to uncheck the
Google Tool Bar, try it without running your browser.

I think the GTB gets installed as a program and can be uninstalled
through Add/Remove Programs and hopefully does not require any
registry hacking.

You can always reinstall it later.

 

[Pegasus [MVP]]

Thank all of you for your help. Yes I did try the registry hack you
suggested, Pegasus, and when I got to "run" Google tool bar was not there.
I
did go to tools on Internet EXplorer and disabled Google tool bar as Papa
suggested. Then I ran Malwarebytes and it found and removed two Registry
Keys Infected.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security
Center\AntivirusDiableNotify
(Disabled.SecurityCenter) -> Bad: (1) Good (0) -> Quarantined and deleted

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDiableNotify
(Disabled.SecurityCenter) -> Bad: (1) Good (0) -> Quarantined and deleted

I am still getting the Access Denied when I open System Config Utility.

Thank you for your help. If you have any more suggestions......

I think I should have asked this question in the first place: What exactly
are the details you see in msconfig.exe against theGoogle bar? Is it a
registry location? Which one? Is it a folder? Which one?

 

[Jose]

I think I should have asked this question in the first place: What exactly
are the details you see in msconfig.exe against theGoogle bar? Is it a
registry location? Which one? Is it a folder? Which one?

You can turn it on and off from the browser options, but that will not
remove it.

The Google support page linked to above says to remove the Google
Toolbar through Add/Remove programs, not by editing the registry or
changing anything in msconfig. Even if you did those things, it would
still not remove the program itself.

We don't know if that (or anything else above) has been tried yet.