Author Topic: REPAIR REGISTRY PERMISSIONS (Read 51934 times)

tweakyman · « **on:** January 16, 2012, 12:37:04 pm »

Hello there

First of all, I must say all of your programs which I have tried are marvellous, although I am having a problem with the All-in-one Repair

Whenever I try to repair my registry permissions it seems to work fine and the process completes. However, when I reboot my machine, the registry goes back to the state it was in before, i.e. I receive errors trying to open certain registry keys' properties.

Please help me with this.

Allan Joyce.

Shane · « **Reply #1 on:** January 16, 2012, 12:46:15 pm »

What version of Windows?

Also what keys are you having trouble with? Reason why I ask is I am wondering if something on the system might be changing the permissions back. An example is like Microsoft Security Essentials.

It monitors its own reg keys and changes them back if changed.

Also when you run the reset reg permissions does it take a while or does it just open and close quickly? (It should be running for a while since there is a lot of reg keys)

Shane

tweakyman · « **Reply #2 on:** January 16, 2012, 12:53:51 pm »

Hello Shane, thanks for the very quick reply.

Sorry, I meant to say I'm on Vista Home Basic 32-bit.

The affected registry keys - which I have noticed, there may be others - are in the following hive:

HKEY LOCAL MACHINE>SYSTEM>CURRENTCONTROLSET>CONTROL>CLASS

That entire hive's properties folders is affected with this on-screen message, whenever I try to open any of the folders:

"error opening key

Properties cannot be opened.
An error is preventing this key from being opened.
Details: Access is denied."

Allan

tweakyman · « **Reply #3 on:** January 16, 2012, 12:56:32 pm »

No Shane, it doesn't seem to take too long actually.

I actually don't use Microsoft Security Essentials, but have Avast 6.0, Comodo Firewall 5.9 and Advanced Windows Care PRO 5

Allan

Shane · « **Reply #4 on:** January 16, 2012, 12:58:15 pm »

When the repair reg permissions runs do you see a command window open? And while it is running it shows a red bar showing what it is doing?

Shane

tweakyman · « **Reply #5 on:** January 16, 2012, 01:00:29 pm »

Oh yes, I always see the command prompt window, several times actually, and yes there is always a red strip across the top, sometimes with failed items.

Allan

Shane · « **Reply #6 on:** January 16, 2012, 01:02:13 pm »

Ok good so it is running. :-D

So every folder and key under HKEY LOCAL MACHINE>SYSTEM>CURRENTCONTROLSET>CONTROL>CLASS is getting permission errors?

Can you view the current permissions and see what they are being changed to?

Shane

tweakyman · « **Reply #7 on:** January 16, 2012, 01:06:46 pm »

OK, I have checked the first folder within that path, and when I look at the permissions for the first key, for every item in the Group or User Names box, permissions for both "Full Control" and "Read" are ticked only.

That's just for that particular key, though.

Allan

Shane · « **Reply #8 on:** January 16, 2012, 01:09:23 pm »

How about any of the sub folders, how do the permissions look there?

Shane

tweakyman · « **Reply #9 on:** January 16, 2012, 01:11:11 pm »

Yes, sorry I should have said, the problem is actually affecting the properties subfolders, right across the entire hive path

Allan

Shane · « **Reply #10 on:** January 16, 2012, 01:14:25 pm »

That is VERY strange.

ok so 1 of 2 reasons it could be.

1. The permissions where unable to be changed by the repair. If that's the case we can change them manually. Go to the root and change the permissions, go to advanced. There set the permissions you need and tell it to apply it to child objects.

2. If the permissions are changed but being changed back then you might have a rootkit or hidden infection. Running tdsskiller.exe and combofix may not be a bad idea

Shane

tweakyman · « **Reply #11 on:** January 16, 2012, 01:18:17 pm »

Yes, I have actually used tdskiller.exe a few times.

I have heard that running combofix can be quite dangerous for your machine, is this true?

I think you may have to take me through setting them manually set by step Shane, as I find the whole thing pretty confusing.

Allan

Shane · « **Reply #12 on:** January 16, 2012, 01:21:16 pm »

I use combofix a lot. Haven t had any trouble, but that doesn't always mean you wont. So your call on that one

First lets manually change the permissions, reboot and see if they get changed back. If they do then we will see what to do next.

This will work for any version of windows
http://support.microsoft.com/kb/310426

Let me know how it goes

Shane

tweakyman · « **Reply #13 on:** January 17, 2012, 09:34:28 am »

Hello Shane

Well I downloaded and ran Combofix; everything seemed OK. I had a look at that Microsoft article link you gave me, unfortunately I didn't understand how to go about it, so I just used your all-in-one repair program once more, but alas still getting the error messages.

Allan

Shane · « **Reply #14 on:** January 17, 2012, 09:40:54 am »

Did you check the permissions after the repair and before the reboot?

Shane

tweakyman · « **Reply #15 on:** January 17, 2012, 09:42:33 am »

Yes, on the advanced tab, there are no entries in the Groups or User Names box.

Shane · « **Reply #16 on:** January 17, 2012, 09:45:56 am »

Get me a screen shot like this one from one of my systems.

Shane

tweakyman · « **Reply #17 on:** January 17, 2012, 09:47:53 am »

How do I go about it?

Allan

Shane · « **Reply #18 on:** January 17, 2012, 09:50:18 am »

Right click on the reg key, click permissions.

When it is open click the advanced button. (Same thing it said in the MS page

)

Shane

tweakyman · « **Reply #19 on:** January 17, 2012, 10:05:24 am »

I actually meant how do you take a screenshot? sorry

Allan

Shane · « **Reply #20 on:** January 17, 2012, 10:07:05 am »

lol.

Hit prtscn on your keyboard.

Then open paint, go to edit then paste. Save as jpg.

When posting you will have an attachment option.

Shane

tweakyman · « **Reply #21 on:** January 17, 2012, 10:10:20 am »

OK, yes just learned online how to do it now. What do you want me to take a capture of though?

Allan

Shane · « **Reply #22 on:** January 17, 2012, 10:11:43 am »

Same screen shot I posted, but of your reg key. I need to see what you see for the permissions.

Shane

tweakyman · « **Reply #23 on:** January 17, 2012, 10:22:00 am »

Here you go Shane

Allan

tweakyman · « **Reply #24 on:** January 17, 2012, 10:38:07 am »

I think maybe this is what you are looking for.

Allan