Consent UI . . .

[NTxLS]

After a short period of time, maybe 1/2hr, most programs that deal mostly with the system operations or security will not start from their ICON nor going directly to Explorer and clicking on the executable.  I get the following boxes that come up:


(RED circle) White "X"
 File system error (-1073741790)

The above information comes from the first one and will have the path to the file that I am attempting to run in the top edge of the box.  They all have the same system code.  After that box is closed the below information comes in the next box and nothing else can be done until the box is closed.

 Microsoft Windows
Consent UI for administrative applications stopped working and was closed

A problem caused the application to stop working correctly.
Windows will notify you if a solution is available.

                (Radio Button)Close

I did look for a file with 'UI' as part of the title and found UI0Detect.exe, UIAutomationCore.dll, uicom.dll, and UIHub.dll all in C:\Windows\System32 folder.  They all appear to be dated the same as when I first started this system last year.  This meaning, to me anyway, that they must be some sort of system operations files.

Any ideas would be appreciated, I need some one's HELP with this that is much, much, much, smarter than myself,

[NTxLS]

I forgot to mention my OS Windows Vista SP2 32 bit on a Dell Inspiron 531s 64bit Dual Core Processor 2.3G, RAM 4G and any other info needed just ask.

Thank you for reading about my mistake,

[couttsj]

It sounds very much like a problem I had some time ago. Only I was running under SP1 at the time and I did not get any error messages. See: http://bbs.blackviper.com/index.php/topic,1464.msg9305.html#msg9305

In short, it sounds like a Code Integrity Error. Vista compares the Hash Code for protected system files with the hash code stored in bootcat.cache file at random intervals. You should find evidence of this in the Event Viewer under Security logs. I have no idea what caused the Code Integrity Error in the first place, but I was able to correct it simply by doing a Windows Update which created a new bootcat.cache file.

J.A. Coutts

[NTxLS]

coutts,

Thank you for this info, just did an update from Microsoft and it is still doing the same.  Will reboot and read the link you have provided to see what else I need to do.

Have found my Task Scheduler in Services is GREYED out and status cannot be changed, presently DISABLED.  The dependencies are correct and Automatic for TS just cannot set to Automatic.

Thank you for reading my posted roasted,
                         

[couttsj]

Have found my Task Scheduler in Services is GREYED out and status cannot be changed, presently DISABLED.  The dependencies are correct and Automatic for TS just cannot set to Automatic.

Not running the Task Scheduler in and of itself should not cause a problem, as I have always run with the Task Scheduler disabled. But, any program that thinks that it should be running and is dependent on it, could cause a problem. With a service that won't run, the problem could be a corrupted executable file, or an incorrect Log In. I believe the Log In for that service is as a Local System Account. Also check the registry entries for this service at:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule
The "Start" key should be set to 2 to start in Automatic

J.A. Coutts

[NTxLS]

couttsj,

The dependencies are listed as Remote Procedure Call (RPC), DCOM Server Process Launcher and Windows Event Viewer which are all set to automatic.  Have been checking other dependencies and all seem to be set AOK!  Just this one is 'grayed out' and doing the CMD Line thingy to start it will not work either.  Maybe I am just not using the commands and parameters correctly.

Went into the location you suggested for Task Scheduler and there is not a listing for Start in the right pane, and even clicked on the sub key 0000 without finding any entry there either.  Looking at other entries that are set to Automatic and none have a 2 for activation.

So far after doing all that I have done, and do not even remember what all has been done, my system seems to be doing a little better.  At least those pop-up boxes have not shown since my last boot.

Did have a strange problem just about an hour and a half ago, was attempting to do a Run CMD window using CS Config /? to see what the format is for making entries to Services and when typing in the CS my screen went blank and my system shut down.  Waited a few minutes and restarted and all seems to be doing just fine.  Do not know what caused that crash or shut down.  When something like that happens I usually bring it up in SAFE MODE and look over some of the areas I had been working within then do a Normal boot and continue.

I do have Admin access and my Run CMD window back ground is RED to indicate that is Administrator privileges.

Thank you for all you have done and recommended,

[NTxLS]

As of about 1200hrs this afternoon and some very extensive looking for a possible solution, one evidently was found and all have been working just fine and still doing thingys that way.

I have done a couple of re-boots since and the last one was about 1430hrs local time, it is now 1842hrs, for those that do not understand military time just deduct 1200 from any time after 12:00 pm like 1300hrs would be 1:00 pm.

Those Windows boxes that did not give any help have stopped.  They are in a message six (6) before this one and posted my NTxLS.

Each post where I had done some exploring did not seem to do any good.  Even the previous post to this one did not HELP any.  I plan on doing some more investigating to see if I can find what may have cleared that issue.  Then again it may not be found, I will try as hard as possible, though.

To all that have read this thread over, if any of them come back, thank you also for reading these posts because that kept me on track of that problem, just hope a solution can be found.

Enough, this is getting to be too long,

[NTxLS]

I spoke too soon, as I was attempting to run HJT to create a log file for another forum the terrible boxes from Windows are back.

I will be doing more examining, later people,

[couttsj]

I think we may have got side tracked with the Task Scheduler issue. In Vista, the Task Scheduler is always on and greyed out, and cannot be turned off using the Service Manager.

The Consent UI error you are getting is associated with CONSENT.EXE, which is the UAC (User Access Control) executable. Try turning off UAC.

There is apparently a known piece of malware that runs under the same name. Go to the Command Prompt in Administrative mode (Right click on Menu item and run as Administrator). Change the directory back to the root, and search for CONSENT.EXE:
C:\Users\couttsj>cd\
C:\>dir consent.exe /a /s
 Volume in drive C is OS
 Volume Serial Number is B038-320C
 Directory of C:\Windows\System32
01/19/08  12:33 AM            81,920 consent.exe
               1 File(s)         81,920 bytes
 Directory of C:\Windows\winsxs\x86_microsoft-windows-lua_31bf3856ad364e35_6.0.6000.16386_none_a4139b365fe05aa4
11/02/06  02:44 AM            81,920 consent.exe
               1 File(s)         81,920 bytes
 Directory of C:\Windows\winsxs\x86_microsoft-windows-lua_31bf3856ad364e35_6.0.6001.18000_none_a64a5d325ccb6b78
01/19/08  12:33 AM            81,920 consent.exe
               1 File(s)         81,920 bytes
     Total Files Listed:
               3 File(s)        245,760 bytes
               0 Dir(s)  287,412,240,384 bytes free

Any files in directories other than the %SYSTEM% and WINSXS are probaly malware.

J.A. Coutts

[WildcatDan]

That's good advice.  If the system was running fine and then, all of the sudden, you have problems, you have to start looking for a cause.  9 times out of 10 that cause is malware or a physical failure.  That 1 out of 10 is the tough one, of course.  If you're concerned about a corrupt file, you may try a system file check (In Vista: enter command prompt with administrative privileges and type "sfc /scannow").  A good malware scan never hurts but, after that, you may want to do some testing on your hard drive to make sure corruptions aren't happening in other places.

[NTxLS]

That's good advice.  If the system was running fine and then, all of the sudden, you have problems, you have to start looking for a cause.  9 times out of 10 that cause is malware or a physical failure.  That 1 out of 10 is the tough one, of course.  If you're concerned about a corrupt file, you may try a system file check (In Vista: enter command prompt with administrative privileges and type "sfc /scannow").  A good malware scan never hurts but, after that, you may want to do some testing on your hard drive to make sure corruptions aren't happening in other places.

WildCatDan,

Excuse me for this, you speak like you are not as smart as I am, you speak as though you are MUCH SMARTER than I am by many gigs.  Thank you for this information, but; until I get a go ahead from the MODS on here I will keep that in mind and do these instructions given by either BV or couttsj if you do not mind.  It looks like a good idea it just that I am very security minded and extremely cautious.

Your information will be saved for future reference,

BV EDIT: removed double quote

[NTxLS]

couttsj,

I have saved your instructions and will give it a run later.

I would also like to apologize for all of these posts that have not gone any where.  I have another that is even more information than you ever wanted to read.  What has happened in just the last 24 hours, it was very scary.  If you would like to read that I will PM it to you.  This is getting to be rather long and I am long winded.

Thank you for that info,

[NTxLS]

Hello "couttsj & WildCatDan,"

To make a long story even longer, er, shorter maybe would be better?  I now convey my apologies for taking so long to get back on here.  My system finally refused to allow me back in and back on the web until just recently, like 7/30/2009, Thursday morning and have been working to restart all of my features.  I had also done both of your suggestions to clear that "Consent UI" problem and that was still a problem after completing both suggestions.

I had FireFox v3.5.1 on here before this all started to go bad on me and when it was finally back up and walking, not fully running, FF would not load, my AntiVir software would not run, could not get Avast!4.8 to work either.  Was told that my Comodo Internet Security was causing some of this problem.  Removed all of those and started to download fresh copies to install and Avast nor AntiVir would not uninstall.  The new installs would not work either, managed to get FF to reinstall over the top of the non-working copy.  Found a Regcleaner from Avira to remove the AntiVir and that worked, YEA!!!  Just a short time ago found one on Alwil's site for Avast and managed to get that blasted software off her as well.

When attempting to reinstall with a fresh download copy of Avast, there is a 'User Account Control' box with a RED bar across the upper part with message "This program has been blocked" and "Your administrator has set policy to blocked this program.  User Account Control helps stop the unauthorized changes to your computer."

Where may I find this change made by my administrator, that is me and I did not do that, so I may readjust this feature so that software can be reinstalled?

Thank you for reading and waiting for my return,

[NTxLS]

Also excuse me for that long winded message and I forgot to mention that blasted "Consent UI" seems to to have gone away, has not been seen since I managed to get my system at least walking again as of yesterday.

Again, Thank you for reading my longer winded message,

[WildcatDan]

It sounds like it's being blocked by your firewall or it's blocking it because it thinks the install file is running from an unsafe zone.  Try right-clicking on the installation file and telling it to run as administrator.  As a quick fix you can try turning off you firewall for a moment and try your installation again.  If that doesn't work you can disable your user account control for a while and see if your installation works then.  Those options may be the quickest solution to getting the program installed.