Author Topic: Something nasty has stolen my administrator rights ...  (Read 9581 times)

0 Members and 1 Guest are viewing this topic.

neutronflow

  • Guest
Something nasty has stolen my administrator rights ...
« on: July 21, 2013, 05:27:20 PM »
Hi there

Background;  I noticed this problem when i tried to update Wintv. In order to renew software and drivers they must first be removed, but when i tried to re-install i found i no longer have administrator rights.

Tried again, then says hardware not present, even though it is and shows up in device manager.

Tried to system restore, took forever then failed.
Avast and Mbam found nothing.
Avast boot-time scan failed to run.
SAS (which is 111 days old and i can't update, even manually- it says SAS not installed!) showed Gen nullo (short) in one system restore file.
Kaspsersky online scan won't run.
Tdsskiller won't install.
Various other efforts have failed to help.

Ok. That's just about where i'm at on arrival here. Having followed essexboy's instructions, attached are the AdwCleaner, MBAM, OTL and aswMBR logs.

Hoping someone has the time and inclination to help with this.

Cheers.


Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11248
  • No support PM's thanks
Re: Something nasty has stolen my administrator rights ...
« Reply #1 on: July 21, 2013, 05:38:47 PM »
There are no attached logs yet ???

neutronflow

  • Guest
Re: Something nasty has stolen my administrator rights ...
« Reply #2 on: July 21, 2013, 05:42:17 PM »
Hi!

I tried to add attachments and was informed that i have already submitted the post. What did i do wrong?

neutronflow

  • Guest
Re: Something nasty has stolen my administrator rights ...
« Reply #3 on: July 21, 2013, 05:48:10 PM »
Sorry, not with it today. Doh!

... here are attachments ...

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11248
  • No support PM's thanks
Re: Something nasty has stolen my administrator rights ...
« Reply #4 on: July 21, 2013, 05:55:55 PM »
Essexboy has been notified and will attend as soon as possible.

neutronflow

  • Guest
Re: Something nasty has stolen my administrator rights ...
« Reply #5 on: July 21, 2013, 05:57:06 PM »
Thanks craigb, i'm very grateful!  :)

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11248
  • No support PM's thanks
Re: Something nasty has stolen my administrator rights ...
« Reply #6 on: July 21, 2013, 05:59:49 PM »
Your welcome :)

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Something nasty has stolen my administrator rights ...
« Reply #7 on: July 21, 2013, 06:12:40 PM »
When this run has completed could you let me know what problems remain

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:Commands
[CREATERESTOREPOINT]

:OTL
DRV - File not found [Kernel | Boot | Stopped] -- System32\drivers\oujp.sys -- (juqkb)
DRV - File not found [Kernel | On_Demand | Stopped] -- Reg Error: Invalid data type. -- (INIDVD)
IE - HKU\S-1-5-21-299502267-1788223648-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\S-1-5-21-299502267-1788223648-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = localhost:12080
O3 - HKU\S-1-5-21-299502267-1788223648-682003330-1003\..\Toolbar\WebBrowser: (no name) - {2C688203-7EB3-4327-9995-1CB417BA23F9} - No CLSID value found.
O3 - HKU\S-1-5-21-299502267-1788223648-682003330-1003\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found.

:Commands
[resethosts]
[emptytemp]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

neutronflow

  • Guest
Re: Something nasty has stolen my administrator rights ...
« Reply #8 on: July 21, 2013, 07:13:21 PM »
Ok Mr essexboy. Here are the OTL logs. The first one popped up when i opened OTL so i thought i'd better send that too.

I still don't have admin rights and the SAS issue still remains  :-\

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Something nasty has stolen my administrator rights ...
« Reply #9 on: July 21, 2013, 07:32:46 PM »
Are you able to select a restore point prior to the update of Wintv

neutronflow

  • Guest
Re: Something nasty has stolen my administrator rights ...
« Reply #10 on: July 21, 2013, 07:42:32 PM »
That was the first thing i tried but unfortunately no. I attempted several all the way back to my earliest which was in May. None were successful.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Something nasty has stolen my administrator rights ...
« Reply #11 on: July 21, 2013, 10:57:01 PM »
Download  Windows Repair (all in one)  from this site

Install the programme then run



Go to step 3 and allow it to run SFC



On the start repairs tab click start


Select the following  items and tick restart system when finished.  Include the top two permission options as well 


neutronflow

  • Guest
Re: Something nasty has stolen my administrator rights ...
« Reply #12 on: July 21, 2013, 11:38:49 PM »
Crikey! Didn't expect you back so late. Thanks very much!

Ok, I'm on it ... I'll post back asap tonight  :)


neutronflow

  • Guest
Re: Something nasty has stolen my administrator rights ...
« Reply #13 on: July 22, 2013, 12:08:23 AM »
Done that.

Tried again with Wintv. Still no admin rights  :-\

Btw, your help is very much appreciated  :)

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Something nasty has stolen my administrator rights ...
« Reply #14 on: July 22, 2013, 03:16:17 PM »
So it is just WinTV that you are having the problems with .. Is that correct ?