Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - TweakAS

Pages: [1]
1
Thank you Shane for remotely verifying that it was my AV (Kaspersky Internet Security 2014) that was blocking and deleted the bat filed it thought was a trojan and you confirmed it to be a false positive, and proved your programme worked! So a huge thanks!

In the past I did disable my AV for one time but lately it did not need disabling so left it to continue until v2.8.7 came along and caused this post to get to the bottom of it, which we did. So great!

I have now downloaded the new build v2.8.8 and installed it over the existing v2.8.7 (as updated by the 3 files), disabled the AV until restart, so could not capture screen shots to show but it turned out fine on the win 7 prof 32-bit machine as well as on my win 7 home VM.

From now on, I will take note of the warning to disable the AV to ensure the Tweaking prog runs OK as it did this time if not better than the previous versions!

So now I will close this post as SOLVED and the above fixed it, all thanks to you! :smiley:

2
Hi Shane,

Followed your instructions, downloaded and replaced the 3 files in v2.8.7 today (already installed). Then tested in win 7 Home 32-bit VM, but in the end the same results.

The attached images shows the 3 attempts you mentioned and again the process stopped at task 19.

The System Event Viewer file is also attached (as too long to copy and paste here). This shows the 'before and after' events: 1) tweaking OK, 2) then the error, 3) then the 3 attempts.

If you still have v.2.8.5, to compare with later versions that would give a clue. :undecided: :sad:

3
All I can see after v.2.8.7, and on win 7 pro 32-bit, is as follows:-

1) The RegBackup log_backup text file shows 'successful' for all

2) The Event Viewer for 'system' with errors (x 3 - about the time v2.8.7 ran) (via Control Panel) is copy pasted here:-

Log Name:      System
Source:        Microsoft-Windows-DistributedCOM
Date:          19/08/2014 08:25:02
Event ID:      10016
Task Category: None
Level:         Error
Keywords:      Classic
User:          DELL-9150\as
Computer:      DELL-9150
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{000C101C-0000-0000-C000-000000000046}
 and APPID
{000C101C-0000-0000-C000-000000000046}
 to the user DELL-9150\as SID (S-1-5-21-536513578-3564515113-194576785-1001) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="49152">10016</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-08-19T07:25:02.000000000Z" />
    <EventRecordID>672992</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>DELL-9150</Computer>
    <Security UserID="S-1-5-21-536513578-3564515113-194576785-1001" />
  </System>
  <EventData>
    <Data Name="param1">machine-default</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{000C101C-0000-0000-C000-000000000046}</Data>
    <Data Name="param5">{000C101C-0000-0000-C000-000000000046}</Data>
    <Data Name="param6">DELL-9150</Data>
    <Data Name="param7">as</Data>
    <Data Name="param8">S-1-5-21-536513578-3564515113-194576785-1001</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
  </EventData>
</Event>


Log Name:      System
Source:        Microsoft-Windows-DistributedCOM
Date:          19/08/2014 08:33:08
Event ID:      10016
Task Category: None
Level:         Error
Keywords:      Classic
User:          SYSTEM
Computer:      DELL-9150
Description:
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
 and APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="49152">10016</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-08-19T07:33:08.000000000Z" />
    <EventRecordID>673004</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>DELL-9150</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}</Data>
    <Data Name="param5">{344ED43D-D086-4961-86A6-1106F4ACAD9B}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">SYSTEM</Data>
    <Data Name="param8">S-1-5-18</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
  </EventData>
</Event>

Log Name:      System
Source:        volsnap
Date:          19/08/2014 09:04:21
Event ID:      25
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      DELL-9150
Description:
The shadow copies of volume C: were deleted because the shadow copy storage could not grow in time.  Consider reducing the IO load on the system or choose a shadow copy storage volume that is not being shadow copied.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="volsnap" />
    <EventID Qualifiers="49158">25</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-08-19T08:04:21.820825100Z" />
    <EventRecordID>673175</EventRecordID>
    <Channel>System</Channel>
    <Computer>DELL-9150</Computer>
    <Security />
  </System>
  <EventData>
    <Data>\Device\HarddiskVolumeShadowCopy1</Data>
    <Data>C:</Data>
    <Binary>000000000200300000000000190006C0030000000000000000000000000000000000000000000000</Binary>
  </EventData>
</Event>

I am not techie enough to decipher that and hope it helps you to fix it! I would say why fix version 2.8.5 when it worked OK, but I hear you say 'to make it better'!

Hoping to get to the better of this glitch soon.

4
Downloaded v2.8.7 today with the same following results as before - see attached images. :sad:

5
The cmd.exe pop-up window starts ok but cannot see it when it reaches step 19 (as shown in the image earlier) in version 2.8.6 and win 7 home (VM). This is where it takes ages to proceed until I gave up and closed the programme. I can see others having the same issue as I also use win 7 prof (32-bit) with same issue. This was fine in prior versions and the last version 2.8.5. These showed the cmd.exe pop up box to do its task and finish OK. Hopefully there will be a solution to improve this soon so it works as it did before.

6
Hi, just joined and noted after update to version 2.8.6, the process stops at "19 - Repair Volume Shadow Copy Service" on both windows 7 home and prof machines. Previous version OK and Version 2.8.5 was actually fine and tweaked the machines well. Just giving feedback in case there is a solution. Just tested again and results attached in capture image.

Pages: [1]