Access is Denied for Services and Event Viewer

When I try to access the Services and Event Viewer task in the Administrative
Tools Folder, I get the message "Access is Denied". Would you know how to
fix this problem. The last time I used these tasks was last month when I did
the Microsoft Patch Update. I check the Security setting on these files and
it show that the local Admin and Domain Admin has Full Rights.

Dear Customer,

Thank you for posting in newsgroup.

Before we move on, I would like to confirm with you some information first.

Please check what the current user account is when the error message
occures. Is it the member of the Guests (including local and domain guests)
group? Does the issue occur if he log on as the built-in Administrator?

Based on the experience, the error message maybe due to lose of the COM
security settings. If possible, please follow the steps to check if it will
be helpful.

Suggestion:
=====================

1. Open Component Services (Start -> Programs -> Administrative Tools ->
Component Services)
2. Drill down to My Computer under Component Services and right click to
select Properties.
3. Click the COM Security Tab
4. Click the Edit Limits button in the Launch and Activation Permissions
group box.
5. Add the user "Everyone" to the top window
6. Allow Access all 4 options: Local Launch, Remote Launch, Local
Activation, Remote Activation

If it doesn't work, we need to collect some trace information of the error
message by using Process Monitor.

Steps:
==========

1. Download process monitor from the link given here
http://technet.microsoft.com/en-us/s.../bb896645.aspx

2. Run the process monitor on the problematic server

3. Start Process Monitor. You will see File/Registry activity is being
captured.
Press Ctrl+E to stop logging data.
Press Ctrl+X to clear the currently captured data.
Under Process Monitor, press Ctrl+E to start gathering data.

4. Now try to reproduce the issue.

Try to Open Services console (services.msc) and Event Viewer (eventvwr) in
Administrative Tools to make it prompt up with "Access is Denied" error
message.

5. Under Process Monitor, Press Ctrl+E to stop capturing.

6. Please save the captured data from Process Monitor to a file (File->Save)
and send me this file for further analysis.

7. Meanwhile, please take a screenshot of the error message and then send it
to me.

Note: you may send the file and screenshot to tfwst@microsoft.com

Thanks for the co-operation.

David Shen
Microsoft Online Technical Support


"Chipmunk" wrote:

> When I try to access the Services and Event Viewer task in the Administrative
> Tools Folder, I get the message "Access is Denied". Would you know how to
> fix this problem. The last time I used these tasks was last month when I did
> the Microsoft Patch Update. I check the Security setting on these files and
> it show that the local Admin and Domain Admin has Full Rights.

David,

Were you able to locate the problem using the Process Monitor Log file I
sent you?

Alvin

"David Shen" wrote:

> Dear Customer,
>
> Thank you for posting in newsgroup.
>
> Before we move on, I would like to confirm with you some information first.
>
> Please check what the current user account is when the error message
> occures. Is it the member of the Guests (including local and domain guests)
> group? Does the issue occur if he log on as the built-in Administrator?
>
> Based on the experience, the error message maybe due to lose of the COM
> security settings. If possible, please follow the steps to check if it will
> be helpful.
>
> Suggestion:
> =====================
>
> 1. Open Component Services (Start -> Programs -> Administrative Tools ->
> Component Services)
> 2. Drill down to My Computer under Component Services and right click to
> select Properties.
> 3. Click the COM Security Tab
> 4. Click the Edit Limits button in the Launch and Activation Permissions
> group box.
> 5. Add the user "Everyone" to the top window
> 6. Allow Access all 4 options: Local Launch, Remote Launch, Local
> Activation, Remote Activation
>
> If it doesn't work, we need to collect some trace information of the error
> message by using Process Monitor.
>
> Steps:
> ==========
>
> 1. Download process monitor from the link given here
> http://technet.microsoft.com/en-us/s.../bb896645.aspx
>
> 2. Run the process monitor on the problematic server
>
> 3. Start Process Monitor. You will see File/Registry activity is being
> captured.
> Press Ctrl+E to stop logging data.
> Press Ctrl+X to clear the currently captured data.
> Under Process Monitor, press Ctrl+E to start gathering data.
>
> 4. Now try to reproduce the issue.
>
> Try to Open Services console (services.msc) and Event Viewer (eventvwr) in
> Administrative Tools to make it prompt up with "Access is Denied" error
> message.
>
> 5. Under Process Monitor, Press Ctrl+E to stop capturing.
>
> 6. Please save the captured data from Process Monitor to a file (File->Save)
> and send me this file for further analysis.
>
> 7. Meanwhile, please take a screenshot of the error message and then send it
> to me.
>
> Note: you may send the file and screenshot to tfwst@microsoft.com
>
> Thanks for the co-operation.
>
> David Shen
> Microsoft Online Technical Support
>
>
> "Chipmunk" wrote:
>
> > When I try to access the Services and Event Viewer task in the Administrative
> > Tools Folder, I get the message "Access is Denied". Would you know how to
> > fix this problem. The last time I used these tasks was last month when I did
> > the Microsoft Patch Update. I check the Security setting on these files and
> > it show that the local Admin and Domain Admin has Full Rights.

Hi Alvin,

Sorry for my delay.

From the detailed research on the process monitor log file, I found a lot
of "NAME NOT FOUND" error message when the system try to access these
files. This maybe the reason for the issue. As I noticed that one of the
community member had the same issue as yours and he has fixed the problem
by import the two registry onto the problematic computer. Thanks a lot for
member's sharing.

If you don't mind, I can send you the 2 registry keys, you may import them
on the problematic computer to see if it helps for you.

Thanks.

David Shen
Microsoft Online Partner Support

[rdkonde]

hi david,
this is rahul from hol info, im here as server engr facing same problem.
plz send me same regestry entries to change.

rdkonde@gmail.com

im waiting.

Hello Customer,

Since this may be a general issue, here I uploaded the 2 registry keys as
the attachments onto the queue so that all the community members can get
benefit from it if they come to issue.

Please note: the attachments only can be accessed when we browse the queue
via Outlook Express. Please access the following queue via Outlook Express
to download the 2 registry keys.

Microsoft.public.windows.server.general

Meanwhile, I will also send them to your e-mail.

Thanks for the understandings.

David Shen
Microsoft Online Partner Support

David,

I am having this problem also but when I configure Windows Mail I can only
see the last weeks worth of postings.
--
Kent


"David Shen [MSFT]" wrote:

> Hello Customer,
>
> Since this may be a general issue, here I uploaded the 2 registry keys as
> the attachments onto the queue so that all the community members can get
> benefit from it if they come to issue.
>
> Please note: the attachments only can be accessed when we browse the queue
> via Outlook Express. Please access the following queue via Outlook Express
> to download the 2 registry keys.
>
> Microsoft.public.windows.server.general
>
> Meanwhile, I will also send them to your e-mail.
>
> Thanks for the understandings.
>
> David Shen
> Microsoft Online Partner Support

Hi Kent,

Sorry for the inconvenience to you.

Please send a mail to tfwst@microsoft.com, and I will reply you with the 2
registry keys via that mail.

Thanks for the understandings.

David Shen
Microsoft Online Technical Support

Hi Kent,

I have sent the 2 registry keys to you, please import them to the
problematic computers to see if it helps.

Thanks.

David Shen
Microsoft Online Technical Support

Hi customer,

As some of you maybe not see and get these 2 registry files when you access
this newsgroup via the webpage form. For the convenience of those who
cannot get the 2 registry files, please refer to the following steps to
create the 2 registry key file locally.

Steps:

1. Open the Notepad.exe

2. copy and paste the following context in it

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\.msi]
@="Msi.Package"

[HKEY_CLASSES_ROOT\Msi.Package]
"EditFlags"=hex:00,00,10,00
"FriendlyTypeName"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52
,\

00,6f,00,6f,00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,\

32,00,5c,00,6d,00,73,00,69,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,33,00,34,\
00,00,00
@="Windows Installer Package"

[HKEY_CLASSES_ROOT\Msi.Package\DefaultIcon]
@="C:\\WINDOWS\\System32\\msiexec.exe,0"

[HKEY_CLASSES_ROOT\Msi.Package\shell]
@="Open,Repair,Uninstall"

[HKEY_CLASSES_ROOT\Msi.Package\shell\Open]
@="&Install"
"MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00
,\

6f,00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\
00,6d,00,73,00,69,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,33,00,36,00,00,00

[HKEY_CLASSES_ROOT\Msi.Package\shell\Open\command]
@=hex(2):22,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,7
4,\

00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,\

73,00,69,00,65,00,78,00,65,00,63,00,2e,00,65,00,78,00,65,00,22,00,20,00,2f,\
00,69,00,20,00,22,00,25,00,31,00,22,00,20,00,25,00,2a,00,00,00

[HKEY_CLASSES_ROOT\Msi.Package\shell\Repair]
@="Re&pair"
"MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00
,\

6f,00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\
00,6d,00,73,00,69,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,33,00,37,00,00,00

[HKEY_CLASSES_ROOT\Msi.Package\shell\Repair\command]
@=hex(2):22,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,7
4,\

00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,\

73,00,69,00,65,00,78,00,65,00,63,00,2e,00,65,00,78,00,65,00,22,00,20,00,2f,\
00,66,00,20,00,22,00,25,00,31,00,22,00,20,00,25,00,2a,00,00,00

[HKEY_CLASSES_ROOT\Msi.Package\shell\Uninstall]
@="&Uninstall"
"MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00
,\

6f,00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\
00,6d,00,73,00,69,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,33,00,38,00,00,00

[HKEY_CLASSES_ROOT\Msi.Package\shell\Uninstall\command]
@=hex(2):22,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,7
4,\

00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,\

73,00,69,00,65,00,78,00,65,00,63,00,2e,00,65,00,78,00,65,00,22,00,20,00,2f,\
00,78,00,20,00,22,00,25,00,31,00,22,00,20,00,25,00,2a,00,00,00

3. Save the file as msi1.reg

4. open the Notepad.exe.

5. copy and paste the following context in it

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\.msc]
@="MSCFile"

[HKEY_CLASSES_ROOT\MSCFile]
@="Microsoft Common Console Document"
"EditFlags"=dword:00100000
"FriendlyTypeName"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52
,\

00,6f,00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,\

32,00,5c,00,6d,00,6d,00,63,00,62,00,61,00,73,00,65,00,2e,00,64,00,6c,00,6c,\
00,2c,00,2d,00,31,00,33,00,30,00,00,00

[HKEY_CLASSES_ROOT\MSCFile\DefaultIcon]
@="%1"

[HKEY_CLASSES_ROOT\MSCFile\Shell]

[HKEY_CLASSES_ROOT\MSCFile\Shell\Author]
@="&Author"
"MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00
,\

6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\

00,6d,00,6d,00,63,00,62,00,61,00,73,00,65,00,2e,00,64,00,6c,00,6c,00,2c,00,\
2d,00,31,00,33,00,33,00,35,00,31,00,00,00

[HKEY_CLASSES_ROOT\MSCFile\Shell\Author\Command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,2
5,\

00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,6d,00,\

63,00,2e,00,65,00,78,00,65,00,20,00,2f,00,61,00,20,00,22,00,25,00,31,00,22,\
00,20,00,25,00,2a,00,00,00

[HKEY_CLASSES_ROOT\MSCFile\Shell\Open]
@="&Open"
"MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00
,\

6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\

00,6d,00,6d,00,63,00,62,00,61,00,73,00,65,00,2e,00,64,00,6c,00,6c,00,2c,00,\
2d,00,31,00,33,00,33,00,34,00,39,00,00,00

[HKEY_CLASSES_ROOT\MSCFile\Shell\Open\Command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,2
5,\

00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,6d,00,\

63,00,2e,00,65,00,78,00,65,00,20,00,22,00,25,00,31,00,22,00,20,00,25,00,2a,\
00,00,00

[HKEY_CLASSES_ROOT\MSCFile\Shell\RunAs]
@="R&un as..."
"MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00
,\

6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\

00,6d,00,6d,00,63,00,62,00,61,00,73,00,65,00,2e,00,64,00,6c,00,6c,00,2c,00,\
2d,00,31,00,33,00,33,00,35,00,30,00,00,00

[HKEY_CLASSES_ROOT\MSCFile\Shell\RunAs\Command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,2
5,\

00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,6d,00,\

63,00,2e,00,65,00,78,00,65,00,20,00,22,00,25,00,31,00,22,00,20,00,25,00,2a,\
00,00,00

[HKEY_CLASSES_ROOT\MSCFile\shellex]

[HKEY_CLASSES_ROOT\MSCFile\shellex\IconHandler]
@="{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"

6. Save the file as msi2.reg

7. Afterwards, you may import the msi1.reg and msi2.reg onto the
problematic computer.

Hope it helps.

David Shen
Microsoft Online Technical Support

Is reboot required after the import of registry keys?


"David Shen [MSFT]" wrote:

> Hi customer,
>
> As some of you maybe not see and get these 2 registry files when you access
> this newsgroup via the webpage form. For the convenience of those who
> cannot get the 2 registry files, please refer to the following steps to
> create the 2 registry key file locally.
>
> Steps:
>
> 1. Open the Notepad.exe
>
> 2. copy and paste the following context in it
>
> Windows Registry Editor Version 5.00
>
> [HKEY_CLASSES_ROOT\.msi]
> @="Msi.Package"
>
> [HKEY_CLASSES_ROOT\Msi.Package]
> "EditFlags"=hex:00,00,10,00
> "FriendlyTypeName"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52
> ,\
>
> 00,6f,00,6f,00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,\
>
> 32,00,5c,00,6d,00,73,00,69,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,33,00,34,\
> 00,00,00
> @="Windows Installer Package"
>
> [HKEY_CLASSES_ROOT\Msi.Package\DefaultIcon]
> @="C:\\WINDOWS\\System32\\msiexec.exe,0"
>
> [HKEY_CLASSES_ROOT\Msi.Package\shell]
> @="Open,Repair,Uninstall"
>
> [HKEY_CLASSES_ROOT\Msi.Package\shell\Open]
> @="&Install"
> "MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00
> ,\
>
> 6f,00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\
> 00,6d,00,73,00,69,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,33,00,36,00,00,00
>
> [HKEY_CLASSES_ROOT\Msi.Package\shell\Open\command]
> @=hex(2):22,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,7
> 4,\
>
> 00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,\
>
> 73,00,69,00,65,00,78,00,65,00,63,00,2e,00,65,00,78,00,65,00,22,00,20,00,2f,\
> 00,69,00,20,00,22,00,25,00,31,00,22,00,20,00,25,00,2a,00,00,00
>
> [HKEY_CLASSES_ROOT\Msi.Package\shell\Repair]
> @="Re&pair"
> "MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00
> ,\
>
> 6f,00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\
> 00,6d,00,73,00,69,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,33,00,37,00,00,00
>
> [HKEY_CLASSES_ROOT\Msi.Package\shell\Repair\command]
> @=hex(2):22,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,7
> 4,\
>
> 00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,\
>
> 73,00,69,00,65,00,78,00,65,00,63,00,2e,00,65,00,78,00,65,00,22,00,20,00,2f,\
> 00,66,00,20,00,22,00,25,00,31,00,22,00,20,00,25,00,2a,00,00,00
>
> [HKEY_CLASSES_ROOT\Msi.Package\shell\Uninstall]
> @="&Uninstall"
> "MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00
> ,\
>
> 6f,00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\
> 00,6d,00,73,00,69,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,33,00,38,00,00,00
>
> [HKEY_CLASSES_ROOT\Msi.Package\shell\Uninstall\command]
> @=hex(2):22,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,7
> 4,\
>
> 00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,\
>
> 73,00,69,00,65,00,78,00,65,00,63,00,2e,00,65,00,78,00,65,00,22,00,20,00,2f,\
> 00,78,00,20,00,22,00,25,00,31,00,22,00,20,00,25,00,2a,00,00,00
>
> 3. Save the file as msi1.reg
>
> 4. open the Notepad.exe.
>
> 5. copy and paste the following context in it
>
> Windows Registry Editor Version 5.00
>
> [HKEY_CLASSES_ROOT\.msc]
> @="MSCFile"
>
> [HKEY_CLASSES_ROOT\MSCFile]
> @="Microsoft Common Console Document"
> "EditFlags"=dword:00100000
> "FriendlyTypeName"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52
> ,\
>
> 00,6f,00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,\
>
> 32,00,5c,00,6d,00,6d,00,63,00,62,00,61,00,73,00,65,00,2e,00,64,00,6c,00,6c,\
> 00,2c,00,2d,00,31,00,33,00,30,00,00,00
>
> [HKEY_CLASSES_ROOT\MSCFile\DefaultIcon]
> @="%1"
>
> [HKEY_CLASSES_ROOT\MSCFile\Shell]
>
> [HKEY_CLASSES_ROOT\MSCFile\Shell\Author]
> @="&Author"
> "MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00
> ,\
>
> 6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\
>
> 00,6d,00,6d,00,63,00,62,00,61,00,73,00,65,00,2e,00,64,00,6c,00,6c,00,2c,00,\
> 2d,00,31,00,33,00,33,00,35,00,31,00,00,00
>
> [HKEY_CLASSES_ROOT\MSCFile\Shell\Author\Command]
> @=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,2
> 5,\
>
> 00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,6d,00,\
>
> 63,00,2e,00,65,00,78,00,65,00,20,00,2f,00,61,00,20,00,22,00,25,00,31,00,22,\
> 00,20,00,25,00,2a,00,00,00
>
> [HKEY_CLASSES_ROOT\MSCFile\Shell\Open]
> @="&Open"
> "MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00
> ,\
>
> 6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\
>
> 00,6d,00,6d,00,63,00,62,00,61,00,73,00,65,00,2e,00,64,00,6c,00,6c,00,2c,00,\
> 2d,00,31,00,33,00,33,00,34,00,39,00,00,00
>
> [HKEY_CLASSES_ROOT\MSCFile\Shell\Open\Command]
> @=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,2
> 5,\
>
> 00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,6d,00,\
>
> 63,00,2e,00,65,00,78,00,65,00,20,00,22,00,25,00,31,00,22,00,20,00,25,00,2a,\
> 00,00,00
>
> [HKEY_CLASSES_ROOT\MSCFile\Shell\RunAs]
> @="R&un as..."
> "MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00
> ,\
>
> 6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\
>
> 00,6d,00,6d,00,63,00,62,00,61,00,73,00,65,00,2e,00,64,00,6c,00,6c,00,2c,00,\
> 2d,00,31,00,33,00,33,00,35,00,30,00,00,00
>
> [HKEY_CLASSES_ROOT\MSCFile\Shell\RunAs\Command]
> @=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,2
> 5,\
>
> 00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,6d,00,\
>
> 63,00,2e,00,65,00,78,00,65,00,20,00,22,00,25,00,31,00,22,00,20,00,25,00,2a,\
> 00,00,00
>
> [HKEY_CLASSES_ROOT\MSCFile\shellex]
>
> [HKEY_CLASSES_ROOT\MSCFile\shellex\IconHandler]
> @="{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"
>
> 6. Save the file as msi2.reg
>
> 7. Afterwards, you may import the msi1.reg and msi2.reg onto the
> problematic computer.
>
> Hope it helps.
>
> David Shen
> Microsoft Online Technical Support
>
>

[rdkonde]

dear friend,

this error occures due to virus problem, pls start ur pc in safe mode, stop system restore, remove malver entries from startup (msconfig), registry & update ur anti virus, scan full. remove viruses.

Hi rdkonde,

Thanks for the knowledge sharing.

David Shen
Microsoft Online Technical Support