MSConfig and Access Denied

[J Lunis]

XP SR2
Tried to google this but found no answer.
Tried to disable a startup app in MSConfig. When I hit 'Apply' I get
"An access denied error was returned while attempting to change a
service. You may need to log on using an Administrator account to make
the specific changes."
Never had this error until a few days ago.
How do I resolve this?

 

[databaseben]

however, you mentioned "service".

so, it is likely that something
integrated itself a bit deeper in
the o.s..

you shouldn't have any difficulties
modifing msconfig via safemode.

a check would be to ensure that
process/service is not active in
task manager, if so kill it.

another check is your services
via admin tools. you may have
to disable it, if it exists there.

 

[J Lunis]

Thanks for the reply. You are correct, I do have Task
Manager>Processes>service.exe. But I thought this was required. Not
true? what do I lose by doing a 'kill?'

 

[databaseben]

with any process
it could simply lock
up your system. but
rebooting will reload
the processes.

the question is that
particular process and
it legitimacy.

if there is a corresponding
entry in msconfig, then it
is unlikely a genuine process
and is simply disguised as one.

there are a couple of tools
that might help you with further
analysis - just to give you an idea
of what or where that process came
from.

firstly, check out that exact filename
at microsoft.com

secondly, you can use a freeware
called autoruns, avail at microsoft.com
and
another freeware process explorer.

they both work a bit differently, but
will difeently give you alot of information
for "all the processes running"

my firm guess is that if it is in
the msconfig then it is not a process
required by the o.s.

let me know what you conclude...

 

[Ron Martell]

XP SR2
Tried to google this but found no answer.
Tried to disable a startup app in MSConfig. When I hit 'Apply' I get
"An access denied error was returned while attempting to change a
service. You may need to log on using an Administrator account to make
the specific changes."
Never had this error until a few days ago.
How do I resolve this?

That is often an indication that your computer has been infested with
some sort of malware (virus, spyware, trojan, etc.)

See MVP Malke's Malware Removal site
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Good luck

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."

 

[J Lunis]

Thanks to you and Martell for the repsonse. As it happens, I already
had ProcessExplorer installed. It shows services.exe as running but not
service.exe.
Autoruns shows no service.exe.
Task Manager>Processes no longer shows service.exe. Possible I could
have misread it but I am strongly inclined to think I did not.
A search of my HDs for service.exe shows nothing expect PCMService.exe
(Dell) and Zeteraservice.exe(Netgear). No plain service.exe.
Google does have a number of hits showing service.exe as malware. Any
ideas how I can find this file and kill it?

 

[databaseben]

well,
i suppose you should try to
kill the process and see if it
releases the mconfig startup
so you can disable it...

then let us know what happens..