Errors Log

  • Thread starter Thread starter Gerry Cornell
  • Start date Start date
G

Gerry Cornell

What does this extract from the errors log mean?

91::ln 15:Object variable or With block variable not
set::GIANTAntiSpywareMain:modMain:Main::20.3.05 14:49:25:XP:1.0.509
0::ln 0::gcasDtServ not Authorized, 2nd
try.::GIANTAntiSpywareMain:modMain:Main::20.3.05 14:49:25:XP:1.0.509
-2147024703::ln 0:Automation error
%1 is not a valid Win32 application. ::gcasServ:modMain:Main::21.3.05
07:29:56:1.0.509


--


Regards.

Gerry

~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
 
I know you can delete and nothing will happen, except it will create a new
log and start all over.
 
Bill

Still getting Error 101 and using original workaround to circumvent
problem. I still have not had MAS identify a single instance of spyware.
I suspect the entries in the Errors log relate to the Error 101.


--


Regards.

Gerry

~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
 
Andre

The error log is only 74 kb so it's no problem.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~
 
Are you running as an admin on that box?

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
 
I predict the answer will be yes. ;-)

--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Steve Dodson said:
Are you running as an admin on that box?

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
Gerry Cornell said:
Bill

Still getting Error 101 and using original workaround to circumvent
problem. I still have not had MAS identify a single instance of spyware.
I suspect the entries in the Errors log relate to the Error 101.


--


Regards.

Gerry

~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Click to expand...
Click to expand...
 
Steve

There are two User Accounts the Administrator and Gerry
Cornell -Computer Administrator. It is the latter being used in normal
mode.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~


Steve Dodson said:
Are you running as an admin on that box?

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to
this
message are best directed to the newsgroup/thread from which they
originated.
Gerry Cornell said:
Bill

Still getting Error 101 and using original workaround to circumvent
problem. I still have not had MAS identify a single instance of
spyware. I suspect the entries in the Errors log relate to the Error
101.


--


Regards.

Gerry

~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Click to expand...
Click to expand...
 
But the point is, both are Administrators! Problem still not solved. :-D

--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Gerry Cornell said:
Steve

There are two User Accounts the Administrator and Gerry Cornell -Computer
Administrator. It is the latter being used in normal mode.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~


Steve Dodson said:
Are you running as an admin on that box?

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
Gerry Cornell said:
Bill

Still getting Error 101 and using original workaround to circumvent
problem. I still have not had MAS identify a single instance of spyware.
I suspect the entries in the Errors log relate to the Error 101.


--


Regards.

Gerry

~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~

No idea--is the program apparently functioning OK?

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

What does this extract from the errors log mean?

91::ln 15:Object variable or With block variable not
set::GIANTAntiSpywareMain:modMain:Main::20.3.05 14:49:25:XP:1.0.509
0::ln 0::gcasDtServ not Authorized, 2nd
try.::GIANTAntiSpywareMain:modMain:Main::20.3.05 14:49:25:XP:1.0.509
-2147024703::ln 0:Automation error
%1 is not a valid Win32 application. ::gcasServ:modMain:Main::21.3.05
07:29:56:1.0.509


--


Regards.

Gerry

~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Click to expand...
Click to expand...
Click to expand...
 
Error 101's are a permission issue :) If the steps provided in the FAQ are
not working, and you are using a computer administrator account, then there
may be another permission issue going on. I would run regmon and filemon to
see what may be going on there.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
Andre Da Costa said:
But the point is, both are Administrators! Problem still not solved. :-D

--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Gerry Cornell said:
Steve

There are two User Accounts the Administrator and Gerry Cornell -Computer
Administrator. It is the latter being used in normal mode.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~


Steve Dodson said:
Are you running as an admin on that box?

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
Bill

Still getting Error 101 and using original workaround to circumvent
problem. I still have not had MAS identify a single instance of
spyware. I suspect the entries in the Errors log relate to the Error
101.


--


Regards.

Gerry

~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~

No idea--is the program apparently functioning OK?

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

What does this extract from the errors log mean?

91::ln 15:Object variable or With block variable not
set::GIANTAntiSpywareMain:modMain:Main::20.3.05 14:49:25:XP:1.0.509
0::ln 0::gcasDtServ not Authorized, 2nd
try.::GIANTAntiSpywareMain:modMain:Main::20.3.05 14:49:25:XP:1.0.509
-2147024703::ln 0:Automation error
%1 is not a valid Win32 application. ::gcasServ:modMain:Main::21.3.05
07:29:56:1.0.509


--


Regards.

Gerry

~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Click to expand...
Click to expand...
Click to expand...
 
Steve

I have downloaded and run regmon and filemon.

With regmon FWIW I found that MSAS is trying to open but cannot find the
following key:
HKCU\CLSID\{0DE200BA-4B11-49C4-83F9-9E1F749E5700}

There are no keys with that CLSID in HKCU.

I cannot figure what is relevant in filemon. There are lots of entries
relatiing to MSAS but so far I have not been able to work out how to
filter out what is not needed. Some buffer overruns. Also some confusion
regarding which partition contains certain files. My Windows XP is on E
partition and MSAS is on F partition. It seems to eventually find the
files.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

Steve Dodson said:
Error 101's are a permission issue :) If the steps provided in the FAQ
are not working, and you are using a computer administrator account,
then there may be another permission issue going on. I would run
regmon and filemon to see what may be going on there.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to
this
message are best directed to the newsgroup/thread from which they
originated.
Andre Da Costa said:
But the point is, both are Administrators! Problem still not solved.
:-D

--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
Click to expand...
Click to expand...
 
Gerry - send email to (e-mail address removed)

This should reach Jeff Dillon, who is trying to get to the bottom of the
Error 101 situations. I believe yours is an excellent case for him, because
as I recall it doesn't involve multiple users, or other "known" causes.

He may ask for your errors.log or other files.

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Gerry Cornell said:
Steve

I have downloaded and run regmon and filemon.

With regmon FWIW I found that MSAS is trying to open but cannot find the
following key:
HKCU\CLSID\{0DE200BA-4B11-49C4-83F9-9E1F749E5700}

There are no keys with that CLSID in HKCU.

I cannot figure what is relevant in filemon. There are lots of entries
relatiing to MSAS but so far I have not been able to work out how to
filter out what is not needed. Some buffer overruns. Also some confusion
regarding which partition contains certain files. My Windows XP is on E
partition and MSAS is on F partition. It seems to eventually find the
files.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

Steve Dodson said:
Error 101's are a permission issue :) If the steps provided in the FAQ
are not working, and you are using a computer administrator account, then
there may be another permission issue going on. I would run regmon and
filemon to see what may be going on there.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
Andre Da Costa said:
But the point is, both are Administrators! Problem still not solved. :-D

--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Steve

There are two User Accounts the Administrator and Gerry
Cornell -Computer Administrator. It is the latter being used in normal
mode.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~
Click to expand...
Click to expand...
Click to expand...
 
Bill

I have already done that. I responded to his invitation earlier this
evening.

I have some more puzzles thrown up by file monitor which I don't
understand.

00:14:27.275 explorer.exe:1188 QUERY INFORMATION E:\Documents and
Settings\Gerry Cornell\Desktop\Show Desktop.scf:Zone.Identifier FILE NOT
FOUND Attributes: Error

00:14:31.611 explorer.exe:1188 OPEN F:\Program
Files\GIANTAntiSpywareMain.exe:Zone.Identifier NAME INVALID Options:
Open Access: All

00:14:31.611 explorer.exe:1188 QUERY INFORMATION E:\Documents and
Settings\All Users\Desktop\Microsoft AntiSpyware.lnk:Zone.Identifier
FILE NOT FOUND Attributes: Error

What do these mean?

--


Regards.

Gerry

~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~



Bill Sanderson said:
Gerry - send email to (e-mail address removed)

This should reach Jeff Dillon, who is trying to get to the bottom of
the Error 101 situations. I believe yours is an excellent case for
him, because as I recall it doesn't involve multiple users, or other
"known" causes.

He may ask for your errors.log or other files.

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Gerry Cornell said:
Steve

I have downloaded and run regmon and filemon.

With regmon FWIW I found that MSAS is trying to open but cannot find
the following key:
HKCU\CLSID\{0DE200BA-4B11-49C4-83F9-9E1F749E5700}

There are no keys with that CLSID in HKCU.

I cannot figure what is relevant in filemon. There are lots of
entries relatiing to MSAS but so far I have not been able to work out
how to filter out what is not needed. Some buffer overruns. Also some
confusion regarding which partition contains certain files. My
Windows XP is on E partition and MSAS is on F partition. It seems to
eventually find the files.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

message
Error 101's are a permission issue :) If the steps provided in the
FAQ are not working, and you are using a computer administrator
account, then there may be another permission issue going on. I
would run regmon and filemon to see what may be going on there.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to
this
message are best directed to the newsgroup/thread from which they
originated.
But the point is, both are Administrators! Problem still not
solved. :-D

--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Steve

There are two User Accounts the Administrator and Gerry
Cornell -Computer Administrator. It is the latter being used in
normal mode.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~
Click to expand...
Click to expand...
Click to expand...
 
I dunno--as I mentioned when somebody asked how you monitor such
things--I've never used filemon or regmon.

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Gerry Cornell said:
Bill

I have already done that. I responded to his invitation earlier this
evening.

I have some more puzzles thrown up by file monitor which I don't
understand.

00:14:27.275 explorer.exe:1188 QUERY INFORMATION E:\Documents and
Settings\Gerry Cornell\Desktop\Show Desktop.scf:Zone.Identifier FILE NOT
FOUND Attributes: Error

00:14:31.611 explorer.exe:1188 OPEN F:\Program
Files\GIANTAntiSpywareMain.exe:Zone.Identifier NAME INVALID Options:
Open Access: All

00:14:31.611 explorer.exe:1188 QUERY INFORMATION E:\Documents and
Settings\All Users\Desktop\Microsoft AntiSpyware.lnk:Zone.Identifier
FILE NOT FOUND Attributes: Error

What do these mean?

--


Regards.

Gerry

~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~



Bill Sanderson said:
Gerry - send email to (e-mail address removed)

This should reach Jeff Dillon, who is trying to get to the bottom of the
Error 101 situations. I believe yours is an excellent case for him,
because as I recall it doesn't involve multiple users, or other "known"
causes.

He may ask for your errors.log or other files.

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Gerry Cornell said:
Steve

I have downloaded and run regmon and filemon.

With regmon FWIW I found that MSAS is trying to open but cannot find the
following key:
HKCU\CLSID\{0DE200BA-4B11-49C4-83F9-9E1F749E5700}

There are no keys with that CLSID in HKCU.

I cannot figure what is relevant in filemon. There are lots of entries
relatiing to MSAS but so far I have not been able to work out how to
filter out what is not needed. Some buffer overruns. Also some confusion
regarding which partition contains certain files. My Windows XP is on E
partition and MSAS is on F partition. It seems to eventually find the
files.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

Error 101's are a permission issue :) If the steps provided in the FAQ
are not working, and you are using a computer administrator account,
then there may be another permission issue going on. I would run regmon
and filemon to see what may be going on there.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
But the point is, both are Administrators! Problem still not solved.
:-D

--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Steve

There are two User Accounts the Administrator and Gerry
Cornell -Computer Administrator. It is the latter being used in
normal mode.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~
Click to expand...
Click to expand...
Click to expand...
 
Bill

Filemon and regmon are worth looking at!

Filemon deluges you with information. Mastering filtering seems to be
something I need to grasp. Also more information on interpretation of
the comments would be helpful.

I have noticed, from looking at the information that filemon spews out,
that MSAS does seem to expect that MSAS is located in the same partition
as the Windows operating system. Whilst it seems to find many (most?) of
the files it is looking for I am wondering what would happen if I
reinstalled MSAS in the Windows partition. In dealing with Error 101
complaints you might see if there is any correlation between the errors
arising and the location of the MSAS files i.e at the default location
or an alternative location.

Do you know why MSAS would be interested in winhelp.ini? There is no
such file on my XP Home Edition system?

Also MSAS seems to be interested in Zone Identifier and
Manifest -whatever they are?

--


Regards.

Gerry

~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~


Bill Sanderson said:
I dunno--as I mentioned when somebody asked how you monitor such
things--I've never used filemon or regmon.

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Gerry Cornell said:
Bill

I have already done that. I responded to his invitation earlier this
evening.

I have some more puzzles thrown up by file monitor which I don't
understand.

00:14:27.275 explorer.exe:1188 QUERY INFORMATION E:\Documents and
Settings\Gerry Cornell\Desktop\Show Desktop.scf:Zone.Identifier FILE
NOT
FOUND Attributes: Error

00:14:31.611 explorer.exe:1188 OPEN F:\Program
Files\GIANTAntiSpywareMain.exe:Zone.Identifier NAME INVALID Options:
Open Access: All

00:14:31.611 explorer.exe:1188 QUERY INFORMATION E:\Documents and
Settings\All Users\Desktop\Microsoft AntiSpyware.lnk:Zone.Identifier
FILE NOT FOUND Attributes: Error

What do these mean?

--


Regards.

Gerry

~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~



Bill Sanderson said:
Gerry - send email to (e-mail address removed)

This should reach Jeff Dillon, who is trying to get to the bottom of
the Error 101 situations. I believe yours is an excellent case for
him, because as I recall it doesn't involve multiple users, or other
"known" causes.

He may ask for your errors.log or other files.

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Steve

I have downloaded and run regmon and filemon.

With regmon FWIW I found that MSAS is trying to open but cannot
find the following key:
HKCU\CLSID\{0DE200BA-4B11-49C4-83F9-9E1F749E5700}

There are no keys with that CLSID in HKCU.

I cannot figure what is relevant in filemon. There are lots of
entries relatiing to MSAS but so far I have not been able to work
out how to filter out what is not needed. Some buffer overruns.
Also some confusion regarding which partition contains certain
files. My Windows XP is on E partition and MSAS is on F partition.
It seems to eventually find the files.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

message
Error 101's are a permission issue :) If the steps provided in the
FAQ are not working, and you are using a computer administrator
account, then there may be another permission issue going on. I
would run regmon and filemon to see what may be going on there.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers
no rights.
Use of included script samples are subject to the terms specified
at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to
this
message are best directed to the newsgroup/thread from which they
originated.
But the point is, both are Administrators! Problem still not
solved. :-D

--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Steve

There are two User Accounts the Administrator and Gerry
Cornell -Computer Administrator. It is the latter being used in
normal mode.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~
Click to expand...
Click to expand...
Click to expand...
 
Zone identifier is an XP SP2 critter which is involved in whether the source
of a given file is an Internet source, or a trusted source. Manifests I
can't easily define for you--they are an XP and newer critter, and have
significant security implications, but I can't define them any better at the
moment.

On my main system, from which I am writing, the machine boots from C,
Windows lives on E, and Microsoft Antispyware is installed on D.
So--although I can see where you are coming from--an error 101 isn't a
universal experience in this situation.

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Gerry Cornell said:
Bill

Filemon and regmon are worth looking at!

Filemon deluges you with information. Mastering filtering seems to be
something I need to grasp. Also more information on interpretation of the
comments would be helpful.

I have noticed, from looking at the information that filemon spews out,
that MSAS does seem to expect that MSAS is located in the same partition
as the Windows operating system. Whilst it seems to find many (most?) of
the files it is looking for I am wondering what would happen if I
reinstalled MSAS in the Windows partition. In dealing with Error 101
complaints you might see if there is any correlation between the errors
arising and the location of the MSAS files i.e at the default location or
an alternative location.

Do you know why MSAS would be interested in winhelp.ini? There is no such
file on my XP Home Edition system?

Also MSAS seems to be interested in Zone Identifier and Manifest -whatever
they are?

--


Regards.

Gerry

~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~


Bill Sanderson said:
I dunno--as I mentioned when somebody asked how you monitor such
things--I've never used filemon or regmon.

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Gerry Cornell said:
Bill

I have already done that. I responded to his invitation earlier this
evening.

I have some more puzzles thrown up by file monitor which I don't
understand.

00:14:27.275 explorer.exe:1188 QUERY INFORMATION E:\Documents and
Settings\Gerry Cornell\Desktop\Show Desktop.scf:Zone.Identifier FILE NOT
FOUND Attributes: Error

00:14:31.611 explorer.exe:1188 OPEN F:\Program
Files\GIANTAntiSpywareMain.exe:Zone.Identifier NAME INVALID Options:
Open Access: All

00:14:31.611 explorer.exe:1188 QUERY INFORMATION E:\Documents and
Settings\All Users\Desktop\Microsoft AntiSpyware.lnk:Zone.Identifier
FILE NOT FOUND Attributes: Error

What do these mean?

--


Regards.

Gerry

~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~



Gerry - send email to (e-mail address removed)

This should reach Jeff Dillon, who is trying to get to the bottom of
the Error 101 situations. I believe yours is an excellent case for
him, because as I recall it doesn't involve multiple users, or other
"known" causes.

He may ask for your errors.log or other files.

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Steve

I have downloaded and run regmon and filemon.

With regmon FWIW I found that MSAS is trying to open but cannot find
the following key:
HKCU\CLSID\{0DE200BA-4B11-49C4-83F9-9E1F749E5700}

There are no keys with that CLSID in HKCU.

I cannot figure what is relevant in filemon. There are lots of entries
relatiing to MSAS but so far I have not been able to work out how to
filter out what is not needed. Some buffer overruns. Also some
confusion regarding which partition contains certain files. My Windows
XP is on E partition and MSAS is on F partition. It seems to
eventually find the files.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

Error 101's are a permission issue :) If the steps provided in the
FAQ are not working, and you are using a computer administrator
account, then there may be another permission issue going on. I would
run regmon and filemon to see what may be going on there.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to
this
message are best directed to the newsgroup/thread from which they
originated.
But the point is, both are Administrators! Problem still not solved.
:-D

--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Steve

There are two User Accounts the Administrator and Gerry
Cornell -Computer Administrator. It is the latter being used in
normal mode.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~
Click to expand...
Click to expand...
Click to expand...
 
Back
Top