User Rights

[ymryan]

I get following log when trying to update:  15.04.2008 06:12:39 general: Started: 15.04.2008, 06:12:39
15.04.2008 06:12:39 general: Running setup_av_pro-44a (1098)
15.04.2008 06:12:39 system: Operating system: WindowsXP ver 5.1, build 2600, sp 2.0 [Service Pack 2]
15.04.2008 06:12:39 system: Memory: 86% load. Phys:31332/228708K free, Page:300196/559692K free, Virt:2069620/2097024K free
15.04.2008 06:12:39 system: Computer WinName: YVONNE
15.04.2008 06:12:39 system: Windows Net User: YVONNE\YRyan
15.04.2008 06:12:39 general: Cmdline: /downloadpkgs /noreboot /silent /progress 
15.04.2008 06:12:39 general: DldSrc set to inet
15.04.2008 06:12:39 general: Operation set to INST_OP_UPDATE_GET_PACKAGES
15.04.2008 06:12:39 general: Old version: 44a (1098)
15.04.2008 06:12:39 system: Using temp: C:\DOCUME~1\YRyan\LOCALS~1\Temp\_av_proI.tm~a02760 (6509M free)
15.04.2008 06:12:40 general: SGW32P::CheckIfInstalled set m_bAlreadyInstalled to 1
15.04.2008 06:12:40 internet: SYNCER: Agent=Syncer/4.70 (av_pro-1098;p)
15.04.2008 06:12:40 system: Computer DnsName: yvonne
15.04.2008 06:12:40 system: Computer Ip Addr: 74.65.11.113
15.04.2008 06:12:40 system: Installed in: C:\Program Files\Alwil Software\Avast4 (6509M free)
15.04.2008 06:12:40 internet: SYNCER: Type: use IE settings
15.04.2008 06:12:40 internet: SYNCER: Auth: another authentication, use WinInet
15.04.2008 06:12:40 package: Part prg_av_pro-44a is installed
15.04.2008 06:12:40 package: Part vps-8041500 is installed
15.04.2008 06:12:40 package: Part news-4b is installed
15.04.2008 06:12:40 package: Part setup_av_pro-44a is installed
15.04.2008 06:12:40 package: Part jrog-10 is installed
15.04.2008 06:12:40 general: Old version: 44a (1098)
15.04.2008 06:12:40 registry: ERROR!:Cannot access registry HKLM\SYSTEM\CurrentControlSet\Services\avastTestService, error code: 0x000005AA
15.04.2008 06:12:40 general: Err:Not enough user rights to continue

[Lisandro]

Are you logged as an administrator? Or just a common user?
Maybe your avast installation got somehow corrupt, then I suggest an installation from the scratch:

1. Uninstall avast from Control Panel first.
2. Boot.
3. Download the latest version of Avast Uninstall and use it for complete uninstallation.
4. Boot.
5. Install again the latest avast! version.
6. Boot.
7. Check and post the results.

[ymryan]

When I try to uninstall from control panel, I get the "not enough user rights" message also (following.  I am the administrator.

16.04.2008 07:16:40 general: Started: 16.04.2008, 07:16:40
16.04.2008 07:16:40 general: Running setup_av_pro-44a (1098)
16.04.2008 07:16:40 system: Operating system: WindowsXP ver 5.1, build 2600, sp 2.0 [Service Pack 2]
16.04.2008 07:16:40 system: Memory: 85% load. Phys:32476/228708K free, Page:214492/559692K free, Virt:2069620/2097024K free
16.04.2008 07:16:40 system: Computer WinName: YVONNE
16.04.2008 07:16:40 system: Windows Net User: YVONNE\YRyan
16.04.2008 07:16:40 general: Cmdline: /uninstwiz 
16.04.2008 07:16:40 general: Old version: 44a (1098)
16.04.2008 07:16:40 system: Using temp: C:\DOCUME~1\YRyan\LOCALS~1\Temp\_av_proI.tm~a03840 (6434M free)
16.04.2008 07:16:40 general: SGW32P::CheckIfInstalled set m_bAlreadyInstalled to 1
16.04.2008 07:16:40 general: DldSrc set to inet
16.04.2008 07:16:40 internet: SYNCER: Agent=Syncer/4.70 (av_pro-1098;p)
16.04.2008 07:16:41 system: Computer DnsName: yvonne
16.04.2008 07:16:41 system: Computer Ip Addr: 74.65.11.113
16.04.2008 07:16:41 system: Installed in: C:\Program Files\Alwil Software\Avast4 (6434M free)
16.04.2008 07:16:41 internet: SYNCER: Type: use IE settings
16.04.2008 07:16:41 internet: SYNCER: Auth: another authentication, use WinInet
16.04.2008 07:16:41 package: Part prg_av_pro-44a is installed
16.04.2008 07:16:41 package: Part vps-8041500 is installed
16.04.2008 07:16:41 package: Part news-4b is installed
16.04.2008 07:16:41 package: Part setup_av_pro-44a is installed
16.04.2008 07:16:41 package: Part jrog-10 is installed
16.04.2008 07:16:41 general: Old version: 44a (1098)
16.04.2008 07:16:41 registry: ERROR!:Cannot access registry HKLM\SYSTEM\CurrentControlSet\Services\avastTestService, error code: 0x000005AA
16.04.2008 07:16:41 general: Err:Not enough user rights to continue

[psw]

But what is 'avastTestService'?? Is this service should be really present on 4.7?
Can you see this service in regedit? If so who has rights for this service?

[Lisandro]

But what is 'avastTestService'?? Is this service should be really present on 4.7?
Can you see this service in regedit? If so who has rights for this service?

It's a test registry key created during installation to check the user rights access to Windows registry. It is deleted afterwards when the user has the enough rights to install.

[ymryan]

I uninstalled from the website, reboot and tried to reinstal and got this message:  16.04.2008 12:49:43 general: Started: 16.04.2008, 12:49:43
16.04.2008 12:49:43 general: Running setup_av_pro-491 (1169)
16.04.2008 12:49:43 system: Operating system: WindowsXP ver 5.1, build 2600, sp 2.0 [Service Pack 2]
16.04.2008 12:49:43 system: Memory: 63% load. Phys:82888/228708K free, Page:359584/559692K free, Virt:2069600/2097024K free
16.04.2008 12:49:43 system: Computer WinName: YVONNE
16.04.2008 12:49:43 system: Windows Net User: YVONNE\YRyan
16.04.2008 12:49:43 general: Cmdline: /sfx /sfxstorage "C:\DOCUME~1\YRyan\LOCALS~1\Temp\_av_sfx.tm~a03436"  /srcpath "C:\DOCUME~1\YRyan\LOCALS~1\TEMPOR~1\Content.IE5\A17ST03E"
16.04.2008 12:49:43 general: DldSrc set to sfx
16.04.2008 12:49:43 general: Old version: ffffffff (-1)
16.04.2008 12:49:44 general: Install check: SetupVersion does NOT exist
16.04.2008 12:49:44 general: SGW32P::CheckIfInstalled set m_bAlreadyInstalled to 0
16.04.2008 12:49:44 registry: ERROR!:Cannot access registry HKLM\SYSTEM\CurrentControlSet\Services\avastTestService, error code: 0x000005AA
16.04.2008 12:49:44 general: Err:Not enough user rights to continue

[Lisandro]

HKLM\SYSTEM\CurrentControlSet\Services\avastTestService, error code: 0x000005AA
16.04.2008 12:49:44 general: Err:Not enough user rights to continue

Can you check if you have this Registry key and then try to delete it before installing?

[ymryan]

I'm not sure where to look for it

[igor]

Strange error code...
Please check your registry hive (Windows\System32\Config\System) - how big is that file?

[Lisandro]

I'm not sure where to look for it

Regedit.exe from C:\Windows folder.
But if you've never work with the registry, it will be safer no managing it...

[ymryan]

Registry Hive = 57,344 KB

[igor]

Well, it's quite a lot... I've found a statement than XP registry hive limit is 1/4 of physical memory (or 200MB, whichever is smaller).
Your physical memory is 228708KB (256MB with a part used by graphics adapter?) - which, divided by 4, gives 57177KB...

So, maybe your SYSTEM hive is simply too big and new keys can't be created. Now, I'm not sure how to shrink it, however... maybe somebody else knows some tools?

[psw]

But officially RSL was dropped in XP (http://support.microsoft.com/kb/292726).
 
There is reference to registry compactor NTRegOpt (http://www.snapfiles.com/publishers/lars-hederer/index.html)
Reported cases when this utility made decrease system hive on 70-80%. Obviously in the case of bloated system hive, but the size 57M looks like hive is bloaded.

[igor]

Well, could be, it's just that:
- the statement comes from a book by M. Russinovich - whom I'd trust at least the same as MS KB article 
- this error 5AA (ERROR_NO_SYSTEM_RESOURCES) is weird; it indicates that some kind of internal limit has been reached
- there was a similar case here some time ago - and the user's hive was slightly over 200MB...

MS docs say that the error may also be returned when a key is opened more than 65534 times simultaneously... might be some leak, don't know how likely it is. Maybe it could be checked by Process Explorer - looking for "\Services" handle...

[DavidR]

I use a little tool to compact the registry hives, RegCompact.net, see image.

As you can see the system one in my image is 256 a quarter of my RAM, but it will compact down quite nicely to 48KB, so I need to compact some of the Hives on my system. Not all the Hives see that much activiy so don't need compacting very often, the system hive is the one that gets some hammer.

How It Works

RegCompact.NET will enhance your system's performance by optimizing the way your system's registry hives are stored on disk. During the normal operation of a Windows system, registry data is constantly being written to and removed from the registry. Over time this data becomes scattered within the registry file and when information is deleted from the registry holes are left which fragment the data within the registry. Due to this, accessing a few related pieces of information from the registry during program startup could become very slow as the system needs to traverse a very large file to find the data.

RegCompact.NET solves the problem of registry fragmentation and large size by rewriting the registry hives into new files which are completely optimised and often much smaller. Your computer is restarted after the registry hives are compacted and during system startup the old, fragmented files are replaced with the newly generated and optimized ones.

I have used this for some years without any adverse effect, however, like in life no guarantees. This program has now gone to RegCompactPro for about $12 I don't know if you will be able to find a copy of RegCompact.net version 1.8 or another tool that does the same.