PDA

View Full Version : registry keys denied access on re-install



paradj
2005-12-21, 02:31
uninstalled SSD v1.4 on an XP home edition PC
and after a reboot or two tried to re-install:eek:
now i get this error message
on the following keys

RegCreateKeyEx failed; code 5.
Access is denied.

error creating these(and more) registry keys

HKEY_CLASSES_ROOT\.disabled
HKEY_CLASSES_ROOT\SpybotSD.DisabledFile
HKEY_CLASSES_ROOT\SpybotSD.DisabledFile\DefaultIcon
HKEY_CLASSES_ROOT\SpybotSD.DisabledFile\shell\open\command
HKEY_CLASSES_ROOT\.sbe
HKEY_CLASSES_ROOT\SpybotSD.SBEFile
HKEY_CLASSES_ROOT\SpybotSD.SBEFile\DefaultIcon
HKEY_CLASSES_ROOT\SpybotSD.SBEFile\shell\open\command
HKEY_CLASSES_ROOT\.sbi
HKEY_CLASSES_ROOT\SpybotSD.SBIFile\DefaultIcon
HKEY_CLASSES_ROOT\SpybotSD.SBIFile\shell\open\command
:confused: used ignore to finish install
SSD looked like it was working yet found none of the spyware located on the machine
used:
- ewido :bigthumb:
- SunBelts CounterSpy(newgiant) :cool:
- MSAS(oldgiant) :crowned:
to remove/quarantine the spyware it could find.
obviously the registry keys have some owner other than the administrators.
anyone know of a work around for this?
a way to either remove these keys (which seem to stay after an uninstall)
or change the ownership? regedit says i cannot change the permissions yet
no one seems to own them.:eek: :buried:

md usa spybot fan
2005-12-21, 05:36
Check the permissions for the HKEY_CLASSES_ROOT itself (Regedit > right click HKEY_CLASSES_ROOT > select Permissions). For Administrators, "Allow" should be checked under "Full Control" and "Read".

If you want to make sure that all the registry entries that Spybot-S&D added during installation are removed, there is a .reg file available on the safer-networking.org site that can do that. But you'll need the permissions to run it. See the following article:
FAQ - Frequently Asked Questions
How to uninstall?
http://www.safer-networking.org/en/faq/27.html
The direct download link is:
remove-spybotsd-settings.reg (http://www.safer-networking.org/files/remove-spybotsd-settings.reg)
Download the file.
Double click on it
Answer Yes then OK

paradj
2005-12-21, 17:08
ok this is starting to bug me...:mad:
i've tried every login to replace the permissions on these keys
in Normal Boot
1 administrator/user
1 user

in Safe Boot
1 administrator
1 administrator/user
1 user

regedit gives the following message:

"Registry Edititor could not set security in the key currently selected,
or some of it's subkeys"

:eek: :confused: :confused: :eek:
...every freaking time....

so do i need to replace the security descriptors?:rolleyes:
is this even possible?

no freaking luck..

md usa spybot fan
2005-12-21, 18:47
From the following:

How To Use the Windows XP and Windows Server 2003 Registry Editor Features
http://support.microsoft.com/default.aspx?scid=kb;en-us;310426


Notes from the Advanced Security settings:

• If you want the inheritable permissions that are assigned to the parent key to apply to a subkey, select the Inherit from parents the permission entries that apply to child objects. Include these with entries explicitly defined here. check box.

• If you want to reset the permission entries on child objects so that they are the same as the current parent object, select the Replace permission entries on all child objects with entries shown here that apply to child object. check box.
Did you check the permissions for the HKEY_CLASSES_ROOT itself? If they are correct it may be possible to "… to reset the permission entries on child objects so that they are the same as the current parent object ..." as above.