Completely Disabled Machine - Permissions Related (after major clean)

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by PCBeatMe, Jun 20, 2009.

  1. PCBeatMe

    PCBeatMe Private E-2

    Ok I am in a real pickle, and I hope an expert will be able to help. I say expert since I am an intermediate user, but fairly switched on when it comes to removing gremlins and nasties from my machine, which I use for working with embedded systems. I have never had to post for help in the last 10 years of PC use, having always remedied myself after seeking solutions on tech forums, but this one has me beat black and blue.

    I have windows XP service pack 3 with all updates except those in the last month (recent lack of net connection) although now have net connection. Pentium 4 with 2GB of RAM, ATI Graphics. 200+Gb hard drives.

    The problem started when I noticed the machine had been running a little slow (which i put down to usual clogging up of the machine and needing a general clean) but then unusual things were happening the last couple of days with some code I was writing that was inconsistently corrupting memory initialization on an embedded hardware target I was working on, ie using the same unchanged code, when connecting to the embedded hardware target I was working with, the memory initialization was inconsistent. Checking the relevant code thoroughly, drew me to the conclusion there may be a bug on my machine, since testing the same code on another machine and laptop, it would work fine on the target system with expected initialization.

    In thinking it would be a good idea to adopt a specific cleaning policy for my machines I followed instructions on the MajorGeeks forum for running antimalware, antispyware, diskcheck, CCleaner etc as per the letter and collecting all logs etc. I also uninstalled AVG and reinstalled for the latest version from 8.1.2 to 8.1.3 I think, and installed Comodo firewall, and this is where the problem began.

    My machine appeared to be working well, so no need to post an issue as there wasn’t one any longer. My PC seemed much more responsive and speedy (felt like it should be, nearly new!!), and within about 15 mins of commencing my normal work again, when compiling my application in Microsoft Visual DSP there was a message from Comodo Firewall about the built application i had just complied, and I accidentally chose something I cant quite remember (an option in the little drop down in the pop up above the systray that said “isolated something something??” (I cant quite remember the exact term). Now bear in mind this last bit could be a complete red herring but it was from here that my problem started in all ferocity and depth.

    From this point onward when I tried to launch ANY application I get an error message…..

    “Windows cannot access the specified device path or file…You may not have the appropriate permissions”.

    I get the same if trying to open an image file or pdf, or sometimes it will just do nothing with no error message.

    So, I thought lets look on the net (using another machine), and a quick google search returned many hits about problems that return this message, mostly related to permissions etc it seems however most instances of this problem only partially affect the machine to some degree. The majority of replies relate to setting permissions, adjusting user accounts or registry fixes. I say “partially affect” as my instance of this problem appears to go much deeper and all covering, whereas others i have read about affect only certain programs orparts of the OS. The solutions with user permissions etc do however seem logical.

    I cannot connect to the net using IE or Mozilla (my default internet app), I cannot open control panel, or access user configuration, msconfig, sfc / scannow, nor properties of My Computer or manage from a right click on My Computer, all returning the above error message. Even if I try to shut the machine down through the Start button I get the message “You do not have permission to shut down this computer”. The only way I can shut down is by going to the Windows Task Manager “Ctrl – Alt – Del” and using the shut down menu in there.

    I have tried logging onto different user, and the same problem occurs. The machine will not boot into Safe Mode, I cannot copy files onto a back up medium (external hard drive), in fact wont copy a file or folder anywhere. "Paste" is always greyed out or unusually ommitted from the right click menu after selecting and copying something through right click menu. The machine has completely disabled itself, or (without sounding paranoid) something else has completely disabled the machine and done it very well. The lack of the Paste option under the right click menu is certainly odd and seemingly suspicious.

    I have some valuable work which I cannot now backup (have older backups but recent costly work cannot be backed up), and a timeline on my hands that is quite crucial, otherwise I would just say “**** it, I’ll reformat and reinstall, it (the PC) probably needs it”. Perhaps the mistake i did make was not to backup before running general cleaning apps, however i have never had nor experienced such a crippling problem.

    Is there a PC Angel out there that might know or understand what is wrong and how to fix it. I have tried to be detailed about the specifics, since I have scoured the net but found no hint of a solution to such an all encompassing “permissions issue” (if that’s what it is).

    I have looked at the recovery console, but am not sure this can fix the problem as it appears permissions have been completely obliterated and there is no such option on RC. I am considering a boot from the windows XP CD, using the repair option, but I am not sure if this will simply wipe my whole machine without giving me a repair option. Will I definitely get a “repair existing installation” on the blue screen during a windows setup from boot time? or is there an alternative fix to try that can be suggested.

    Note, about the only thing I can do is I have been able to right click the C Drive and access security permissions from the properties. Changing them to “Everyone” or Administrator” or any other account makes no difference. Its about the only thing I can do on the machine to my knowledge, in terms of diagnostics or repair attempt. I cant run ANY programs, antivirus checkers, Combofix, HJT or anything.

    Any takers on this problem? OR any tips or avenues to explore (no pun intended ;) Thank you in advance.

    Yours,

    PC_BeatMe
    :cry
     
  2. PCBeatMe

    PCBeatMe Private E-2

    In trying to help any would be helpers by giving as much info as possible i have just discovered a further clue to the problem, and note it below.

    As mentioned i cant run a single program (no permissions error message), however i had downloaded MGtools and this was on the C drive. I double clicked this just now, and it offered to run the program, of course i cancelled as i am not sure what the underlying problem is, but in some of the research i mention aboe into my problem there was talk of right clicking a file and hitting the "Unblock" button.

    I looked at the properties of MGTools and there was an Unblock button. The only file i have seen on my machine with this. The property tab also said it was blocked because it came from another machine and may be harmful.

    oddly the program ran, but the unblock option was there, so i clicked unblock, and now this executable gives me the same error as all other programs now. ie No permissions to run the file. Arrrrggghhh||//__

    I hope this helps!!
     
  3. PCBeatMe

    PCBeatMe Private E-2

    OK so heres my final entry to this pickle i was in.

    I tried to do a windows repair installation using the XP cd. When it had done its thing and rebooted, i ended up in a cycle of reboots that were never ending. I tried Recovery console, and i think my lack of experience with RC and under difficult circumstances, contributed to this making things worse. i was beaten by my PC. :confused My PC really did beat me.

    I ended up doing a complete format of the drive and reinstall of XP. Prior to this i removed the offending hard drive and put it into another machine as a slave, and backed up files as necessary. Then put it back into the original machine and performed format + clean install.

    I have no idea what caused this, and if anyone reading this has an idea of what might have caused the original symptoms (virus or some other windows issue), or what to check in such a case i would be most grateful to hear any comment or hints in case it happens again. Possibly this experience may benefit some one else hence reason for update.

    BTW Great forum and plenty of respect goes out to all the helpers out there.

    PCBeatMe (and got away with it), Ciao
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    If you were getting to the login screen and it rebooted after you attempt to login then your c:\windows\system32\userinit.exe file was either missing or corrupted. Or the registry keys associated with loading userinit were corrupted. This could have been fixed from the Recovery Console.

    If it was rebooting earlier than the login screen, you probably lost some other important Windows files or registry entries.

    Note for your future reference, you should not keep making additional posts to your thread once you have made a post. It will delay getting an answer since you keep loosing your place in the queue when you add more messages. It is a bump whether on purpose or not. This is covered in the below sticky that you were given in the email when you signed up:

    Don't Bump! It Only Hurts You!!!


    Since you have reinstalled, you should work thru the below:

     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds