Darkeforce
Sun Mar 16 18:48:01 PDT 2008
> > > > > "Darkeforce" wrote:
> > > > >
> > > > > > Whenever I try to run the disk defragmenter, I get an error that says Access
> > > > > > is Denied. There is only one user on the computer; I'm the administrator. How
> > > > > > can I be denied from using that utility when I have full authorization to do
> > > > > > everything on the computer?
> > > > > >
> > > > > > Windows XP SP2
> > > > >
> > > > >
> > > > > Why you want to defrag and did you run Disk CleanUp before defrag your HDD?.
> > > > > Run the Disk Cleanup and scan for malware and viruses on this machine then
> > > > > Start In Safe Mode and Defrag your system.
> > > > > Here some info on how to repair Defrag if it damaged:
> > > > > Open a run command and register these DLLs:
> > > > > regsvr32 msxml3.dll
> > > > > regsvr32 dfrgui.dll
> > > > > regsvr32 dfrgsnap.dll
> > > > >
> > > > > = Open Windows Explorer and locate this path;
> > > > > C:\Windows\inf =in the right Pane/Window select dfrg.inf and right click on
> > > > > it and select install
> > > >
> > > > I did all these, and it failed to fix the problem. When I try to run
> > > > Defragmenter from Accessories/System Tools I still get:
> > > >
> > > > C:\WINDOWS\SYSTEM32\dfrg.msc
> > > > Access is denied
> > > >
> > > > > =Open a run command and type in:
> > > > > services.msc
> > > >
> > > > I cannot run this either. It says Access is denied as well
> > > >
> > > > > Locate this service and make sure it is started Automatic:
> > > > > DCOM Server Process Launcher
> > > > > Reboot your Machine and see if you can Defrag, best if you start it in safe
> > > > > Mode.
> > > >
> > > > I still get an Access is denied error in safe mode.
> > > >
> > > > > Repair Disk Defragmenter in Windows 2000/XP
> > > > >
http://smallvoid.com/tweak/winnt/install.html#DEFRAG
> > > > > Note you mean the Scannow command from the run command is:
> > > > > sfc /scannow click [OK] and let it run.
> > > > > HTH.
> > > > > nass
> > > > > ---
> > > > >
http://www.nasstec.co.uk
> > > >
> > > > I can't follow most of what it says on that page and the linked pages.
> > > >
> > > > Just to note, though. I can use defrag.exe from the C:\ prompt; at least it
> > > > successfully did an analysis.
> > >
> > > Okay, can you please state what version of XP Operating system you have, is
> > > it XP Home Edition or XP Professional?, and how many users on this machine
> > > and do they have Admin privileges?.
> > > What security software you have installed and does the machine perform well
> > > other than the Defrag issue?.
> > > HTH.
> > > nass
> > > ----
> > >
http://www.nasstec.co.uk
> > >
> >
> > XP Home Edition 5.1, Build 2600, Version 2002 SP2
> > There are no other users, as I stated in the first message.
> > I have Sympatico Security Manager installed for Antivirus, Firewall and
> > Anti-Spyware.
> > I have ran Spybot S&D and AdAware recently, and removed some spyware
> > I have ran two different Virus Scans, and I am in the process of running a
> > third even now. Viruses have been removed by previous virus scans.
> >
> > The system is sluggish, even after the spyware and viruses have been
> > removed, and the Disk Defragmenter problem persisted. A specific problem I
> > noted was a tendency to hang when I selected single-line text-fields of forms.
> >
> >
> > Several system tools have been giving me the following error when I close
> > them as well:
> >
> > "The instruction at "0x022a2ee5" referenced memory at "0xdd28ffff". The
> > memory could not be "read".
> > Click on OK to terminate the program"
>
>
>
> Go through these Cleaning steps:
> 1... Click start >> Control Panel >> Double Click Network and Internet
> Connections >> Double click Internet Options, on the IE Properties window
> you will see these Options:
> General | Security | Privacy | Content | Connections | Programs
> | Advanced .
>
> Click on General Tab (1st Tab on the left) and you will see a Button called
> [ Clear History ..] click on it to clear your History caches, then click on
> [Delete Files..] to delete Internet Files created over the time, click on [
> Delete Cookies...] to delete your cookies left by visiting websites.
>
> Then click on Advanced tab and scroll down to under the Browsing Option:
> [&] Browsing
> [ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
> = Then try to Disable the Add-Ons on your Browser somehow installed on your
> browser, On how to disable the Add-ons follow this:
> Click on Programs Tab and then click the Manage Add-Ons Button there Disable
> the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
> later and see which is the culprit .
> How to manage Add-Ons:
>
http://support.microsoft.com/kb/883256
> Scan for malware from here:
> SuperAntispyware - Free
>
http://www.superantispyware.com/superantispywarefreevspro.html
> RootkitRevealer v1.71
> By Bryce Cogswell and Mark Russinovich
>
http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx
>
> Run a scan from here on-line:
>
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
>
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
> Download Avast Cleaner (off-line scanner) from here:
>
http://www.avast.com/eng/avast-virus-cleaner.html
>
> Lots of tools to download and disinfect your machine (off-line scanner):
>
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
>
> After the scan run disk clean-up on your drive and run this command:
> sfc /scannow click [OK] and let it run till it finish and reboot your
> machine.
Above steps done, although "sfc /scannow" messed with my display settings,
requiring me to reinstall my display drivers
> Open a Notepad, customize or minimize to the taskbar as you will need it
> later for this step to copy the error message on it.
> Open a run command and type in:
> eventvwr.msc click [OK] you will get the Event viewer control Panel.
Cannot run eventvwr.msc. It says access is denied. It seems that I cannot
access any resource on my computer that is *.msc
> click on each of these:
> Application
> System
> Security
> Look in the right Pane/window for error message with red (X) or Yellow
> exclamation mark /!\ , double click each one to get more info about the
> causer.
> On the Event error properties message you will see:
> Up Arrow
> Down arrow
> Two pages
> Click on the two pages to copy the error message then bring up the Notepad
> you opened earlier and right click on the first line and select Paste from
> the list, this will paste the error message on a Notepad.
> Please don't duplicate the error message one of each kind will be sufficient.
> HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
>
http://support.microsoft.com/kb/308427/en-us
>
> About the Error message:"The instruction at "0x022a2ee5" referenced memory
> at "0xdd28ffff". The memory could not be "read".
> Click on OK to terminate the program". It could be a result of Bad BHO
> installed from the infection or a RAM stick gone bad or a corrupt/damaged
> program on your machine, so try to test the RAM by unzipping the Memory test
> Zip file from the link below on a CD and test it.
>
> You may have a bad RAM try to test your RAM by running Memory test by
> downloading this tool and unzip it and make a floppy or CD/DVD and run it on
> Reboot.
>
http://oca.microsoft.com/en/windiag.asp.
> You may need to reposition/reset the RAM sticks in their slots.
>
>
> Download the Hijackthis and send the report to one of
> many
> forums for analysis and troubleshooting:
> When all else fails, HijackThis v2.0.2
> (
http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
> the preferred tool to use.
> It will help you to both identify and remove any hijackware/spyware. Post
> your log to:
>
http://www.spywareinfo.com/~merijn/downloads.html
>
http://aumha.net/viewforum.php?f=30,
>
http://castlecops.com/forum67.html,
>
http://forums.subratam.org/index.php?showforum=7
>
http://www.bleepingcomputer.com/tutorials/tutorial42.html
>
http://www.bleepingcomputer.com/forums/
> Or other appropriate
> forums for expert analysis, not here.
> Can you please send me a copy at to_you_rossREMOVETHIS@yahoo.co.uk , remove
> the obvious to email me.
> Let us know your progress.
Posting results now. I will update this when I get any results. Any
suggestions you might have with my inability to run *.msc programs would be
greatly appreciated, though.