Partial loss of admin privileges

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by steveorg, Jul 21, 2008.

  1. steveorg

    steveorg Private E-2

    I'm running XP Home SP2. I've lost some of my administrative privileges, such as the ability to run Windows update and change network settings. However, I do have other privileges such as creating a User and installing new programs such as the ones I needed to post the logs.

    The problem first showed while I was upgrading from Office XP to Office 2003. Towards the end of the install, it could not modify the registry due to lack of privileges so it rolled back the installation.

    I've tried logging on as administrator in safe mode and creating a new user with admin privileges. Both logins had the same restricted privileges problem.

    All help is appreciated.
     

    Attached Files:

    steveorg, Jul 21, 2008
    #1
  2. steveorg

    steveorg Private E-2

    Here's the MGtools files.
     

    Attached Files:

    steveorg, Jul 21, 2008
    #2
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You are not having malware problems. I will give you something to try but if it does not help, I suggest that you post in the Software Forum for help.

    Download this View attachment FixRights.zip file to your C:\MGtools folder. Then extract all files from the ZIP file into that same folder. The locate the FixRights.bat file and double click on it. It will attempt to restore priviledges for your User account and for all Administrators. A log named log.txt will be created in the C:\MGtools folder. Attach this log. Also then do the below.

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator).

    Then attach the new C:\MGlogs.zip file just created

    Did this help?
     
    chaslang, Jul 21, 2008
    #3
  4. steveorg

    steveorg Private E-2

    Thanks Chaslang. I really appreciate your help.

    Your wizadry has provided a 95% fix. I can now use Windows update, but my ability to change network settings is still not working correctly because I still cannot view the workgroup computers (error message: Workgroup is not accessible. You might not have permission to view this resource.) This isn't important to me and is probably not worth much effort.

    Adding a network place is now not a problem, but I get weird behavior - again not important. When I click finish at the end of the wizard, I get this error: An exception occurred while trying to run "netplwiz.dll,AddNetPlaceRunDll". However, the network place is added correctly.

    I've attached the log file. There are a couple of failures. Are they connected to my problem?
     

    Attached Files:

    • log.txt
      File size:
      3.5 KB
      Views:
      7
    steveorg, Jul 21, 2008
    #4
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome.

    Well I'm happy to hear that that helped a little. You really need to continue in the Networking Forum (or Software Forum if you get no help in Networking). I do have a quick suggestion for you to try. Change the workgroup name from the Windows default which is WORKGROUP. It can often lead to problems anyway where on PC will not see another on the network for no reason at all. Make sure whatever name you pick (like MyWorkGroup) is changed on all of your PCs.


    No this is not related and those failures are normal for those policies.
     
    chaslang, Jul 21, 2008
    #5
  6. steveorg

    steveorg Private E-2

    More than a little!

    Thanks again Chaslang. I'll try the workgroup change for my next reboot and if necessary follow-up on the networking forum.
     
    steveorg, Jul 22, 2008
    #6
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome.

    Now we need to cleanup from running ComboFix.

    Copy the bold text below to notepad. Save it as fixme.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Make sure that you tell me if you receive a success message about adding the above
    to the registry. If you do not get a success message, it definitely did not work.



    If you are not having any other malware problems, it is time to do our final steps:
    1. You can uninstall SUPERAntiSpyware now.
    2. We recommed you keep Malwarebytes Anti-Malware as a scanner. It uses no resources except a little disk space until you run a scan.
    3. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop & renamed it like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combo-fix" /u
        • Notes: The space between the combo-fix" and the /u, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
      • Delete the C:\combo-fix folder from combofix.
    4. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    5. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    6. Go to add/remove programs and uninstall HijackThis.
    7. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
    8. If you are running Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    9. After doing the above, you should work thru the below
     
    chaslang, Jul 22, 2008
    #7
  8. steveorg

    steveorg Private E-2

    I took a couple days break from computer maintenance. The registry add was successful. I did everything except #9 because there was nothing below.
     
    steveorg, Jul 24, 2008
    #8
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    chaslang, Jul 24, 2008
    #9
  10. steveorg

    steveorg Private E-2

    Thanks Chaslang. The good news is that I've used those practices for years so I don't have anything else to do. I suspect that whatever went wrong was Bill Gate's fault, not malware.

    I just noticed that you're from Northern NJ. Me too - Ramsey.
     
    steveorg, Jul 24, 2008
    #10
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome and hi neighbor.

    Yes that may be the case. ;)
     
    chaslang, Jul 24, 2008
    #11

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds