"Error 5: Acces is Denied" on an admin account.

[gamerunknown]

I've had access is denied warnings on open office for a while but paid them no heed, but when I noticed that my Online Armour wasn't installing, I realised that most exes I've downloaded wouldn't install. I also get a message with "You may not have the appropriate permissions to access the item", which I really should on an admin account.

Anybody willing to guide me through a long and torturous process with little reward except text on a screen?

[Detomah]

I use MS Office personally, so don't have an idea's regarding Open Office and how it works. I'm sure there are plenty of other people on Total Format who do use Open Office though, so i'd say just have a little patience and i'm sure someone would be able to help you solve your problem if Google doesn't sort it for you.

[gamerunknown]

Thanks for your support Detomah, glad to see I didn't totally mess up my opening post. It was pretty early in the morning for me...

Though I did see I left out some key information - all executables will give a similar warning when I try to run them, even files like Online Armour. I actually just googled the error message and a thread which had "Loganzo" troubleshooting popped up. My situation is a little different to his so I wasn't able to apply the same fix, but I thought the methodology was great for this type of problem, so I thought I'd give it a shot.

[Detomah]

Okay... Lets see if we can get you sorted then.

Firstly, you have been able to run a virus checker type program? Cutting out the obvious possibility of it being a virus is always a good place to start. If the answer to this is no, make sure you run a virus checker before going any further.

The reason i'd actually say you are having this kind of problem is down to a corrupt registry file, so with that, i'd say have a look this:

CCleaner - Home

It's freeware, so doesn't cost anything, but it can be dangerous if used wrong, so please be extremely careful should you use it, as deleting something you need could stop your computer working properly. Make sure you read the instructions and make sure you take any options possible for backing up the registry and the likes.

If anyone else has any other initial idea's or thinks running a registry cleaner is too risky, please say so quickly.

[teflon]

Upgrade to Windows XP or Vista.

[meow]

you can get access denied even if you are logged onto an administrative account.
the problem arises when the owner of the file has been changed and the permissions to allow change of ownership have been removed.
for some reason an administrator cant even change the owner, however you can do it from safe mode which just requires a reboot.

I had several files left over from an anti virus install which would always cause errors in a disk usage utility.

I guess its maybe deliberate to offer protection to anti virus programs so that viruses cant change the permissions on the anti virus programs and stop them from working.

[Ixpah]

Administrator (or users in the Administrators group) don't automatically get permissions to access all files. It all depends on what is in the DACL/MACL for the directory/file.

I guess you are downloading the files as one user and switching to an admin user to install the files?

[gamerunknown]

To Detomah: CCleaner I saw pop up in the other thread I think, so I thought I should give it a try. It actually installed and I used all the preconfigured options. Firefox was fine when I posted the thread, though I had the same problems with the exes. Then I logged in yesterday and all the browsers except for internet explorer wouldn't connect to the page and my windows live messenger gave the message that my machine didn't have an IP. I thought it was either a problem with the router or in assigning a DNS, but my internet explorer works, I can sign on with my Wii and on the PC my router is attached too. I had AVG, but that appears to have disappeared somehow. I'm not sure if I'd be able to reinstall it if I downloaded it again.

To Teflon: I've followed up a few forum postings and the end result is almost always a repair/reinstall. I only have XP Pro, so I'll give that another try before buying another OS. Though I'll have to find my compact flash to save a few important documents and some screenshots.

To meow: would I be able to access exe files from safe mode?

To Ixpah: Nope, all on the same account, though I guess something about the account changed for it to no longer be recognised.

[Detomah]

I have to admit, by the sounds of how pickled your machine is coming across as, a format and clean install would probably be the simplest solution. If you've nothing really important on your machine that means reinstalling would be a complete nightmare, it may be the best approach to simply stick your docs and stuff on a disk and do a format and clean install.

The way I see it personally... If the computer is so knackered that i've ended up taking multiple days to get anywhere near fixing it and even after that it's still not properly right... Format and reinstall.

Anyway...

If you haven't got a virus killer in place and fully covering your machine, i'd serious make that a priority to do and do a full scan, whether you decide to do a format and reinstall or manage to fix whats going on there now.

Exe files have to be able to function in safe mode, otherwise you'd not be able to run diagnostic programs and the likes.

Have you heard of the program HijackThis ? Trend Micro HijackThis - Free software downloads and reviews - CNET Download.com

Download it, run the program (hopefully it'd let you) and paste the log to this thread please, it's a program that shows what system stuff and programs and the likes are running on your machine... There's clearly something dodgy going on on your machine, a hijack this log may show up some dodgy activity. (PLEASE REMOVE YOUR IP ADDRESS AND PERSONAL INFO THOUGH, for privacy purposes)

Are you on a wireless network by any chance?

[gamerunknown]

I am on a wireless network and an unsecured one at that.

I've set a password and tried setting it to require a code, but for some reason that caused the router to reset or problems connecting.

Here's the hjt log (May have been an older version)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:48:56, on 08/02/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
I:\WINDOWS\System32\smss.exe
I:\WINDOWS\system32\csrss.exe
I:\WINDOWS\system32\winlogon.exe
I:\WINDOWS\system32\services.exe
I:\WINDOWS\system32\lsass.exe
I:\WINDOWS\system32\svchost.exe
I:\WINDOWS\system32\svchost.exe
I:\WINDOWS\System32\svchost.exe
I:\WINDOWS\system32\svchost.exe
I:\WINDOWS\system32\svchost.exe
I:\WINDOWS\system32\svchost.exe
I:\Program Files\Tall Emu\Online Armor\oasrv.exe
I:\WINDOWS\system32\spoolsv.exe
I:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
I:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
I:\Program Files\Bonjour\mDNSResponder.exe
I:\Program Files\Java\jre6\bin\jqs.exe
I:\Program Files\Kontiki\KService.exe
I:\Program Files\McAfee\SiteAdvisor\McSACore.exe
I:\WINDOWS\system32\nvsvc32.exe
I:\Program Files\Tall Emu\Online Armor\oacat.exe
I:\Program Files\Viewpoint\Common\ViewpointService.exe
I:\PROGRA~1\AVG\AVG8\avgrsx.exe
I:\PROGRA~1\AVG\AVG8\avgemc.exe
I:\WINDOWS\System32\alg.exe
I:\WINDOWS\system32\wuauclt.exe
I:\WINDOWS\Explorer.EXE
I:\Program Files\Windows Live\Messenger\msnmsgr.exe
I:\Documents and Settings\gamerunown\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
I:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
I:\Program Files\Xfire\xfire.exe
I:\WINDOWS\system32\wbem\wmiprvse.exe
I:\Documents and Settings\gamerunown\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - I:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
R3 - URLSearchHook: AOLSearchHook Class - {54EB34EA-E6BE-4CFD-9F4F-C4A0C2EAFA22} - I:\Program Files\AIM Search\AOLSearch.dll
O2 - BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - I:\PROGRA~1\ArcSoft\MEDIAC~1.5FO\STREAM~1\ARCURL~1.DLL
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - I:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: AOL Search Enhancement - {54EB34EA-E6BE-4CFD-9F4F-C4A0C2EAFA22} - I:\Program Files\AIM Search\AOLSearch.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - I:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - I:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - I:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - i:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - I:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - I:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: AIM Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - I:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - i:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE I:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [msnmsgr] "I:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Google Update] "I:\Documents and Settings\gamerunown\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Xfire.lnk = I:\Program Files\Xfire\xfire.exe
O4 - Global Startup: Belkin Wireless USB Utility.lnk = I:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
O8 - Extra context menu item: &AIM Search - i:\program files\aol\aim toolbar 5.0\resources\en-us\local\search.html
O9 - Extra button: AIM Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - I:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupda...5035/CTPID.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - I:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - i:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - I:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: avgrsstarter - I:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - I:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - I:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - I:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - I:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - I:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: iPod Service - Apple Inc. - I:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - I:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: KService - Kontiki Inc. - I:\Program Files\Kontiki\KService.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - I:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - I:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Online Armor Helper Service (OAcat) - Tall Emu - I:\Program Files\Tall Emu\Online Armor\oacat.exe
O23 - Service: Online Armor (SvcOnlineArmor) - Tall Emu - I:\Program Files\Tall Emu\Online Armor\oasrv.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - I:\Program Files\Viewpoint\Common\ViewpointService.exe

--
End of file - 6843 bytes

Hope that helps.

[Detomah]

Firstly.....

Unsecured network = computer takeover waiting to happen. Not being able to secure it isn't an option. It should be the first thing you do above anything else. Basically your asking for trouble straight off by not being on a secured connection.

Secondly....

Your using XP SP2 for Windows and IE6 SP2. Updating to the latest version is an absolute necessity. There's stuff in SP3 regarding security and the likes that is essential. Now either this means your using non-official products and so can't update to the latest version, or you have updates turned off. If it's non-official thing, i'd suggest you go get original products, if it;s the latter, i would normally suggest you update straight away, however I think in this case you may need to do a format and reinstall, as gawd knows what could be lurking on your machine.

I'm almost certain your machine has become compromised and taken over at some point and files and permissions changed. I think you've been messing around with far too many tools to try and fix the problems your machine has though. When you have problems like this you should choose one place to be helped and should stick with it and only try one thing at a time.

I'm going to wait and see what some others on here say about your HJthis log, but from what I can see, I think your AVG has been compromised as well as possibly your java installation. If i'm right, formatting may be your only option, as i've no idea what has all been pickled on your machine, besides telling you it's not well.

What I will say though...

To do if you do format and reinstall before doing anything else:

Format machine
Install Windows
Secure network
Install latest versions of chosen Firewall and Virus Killer, other spybot tools, etc.
Update MS products to latest versions to avoid exploits

In otherwords, having secure up to date software on your machine means your far less likely to suffer problems of the virus/hacking/hijacking nature.