Author Topic: Something nasty has stolen my administrator rights ...  (Read 9580 times)

0 Members and 2 Guests are viewing this topic.

neutronflow

  • Guest
Re: Something nasty has stolen my administrator rights ...
« Reply #15 on: July 22, 2013, 03:59:28 PM »
Sorry, i should have made myself clearer before.

The Wintv re-install was just the point that i initially noticed the issue, and therefore the first thing i test to determine whether the problem has been resolved.

Before coming to you for advice i tried many things. Tdsskiller, Kaspersky online scan, neither would install due to lack of privileges.
 
SAS won't autoupdate and manual update (by definition download) won't work stating SAS isn't installed.

Even the aswMBR log shows that it failed to initialize properly.

The issue is not wintv only, it is everything. I have no admin privileges whatsoever

One other thing that may be relevant - On desktop during boot i get a window saying 'server busy' with 'switch to' and 'retry' options. This is relatively new, and i have no idea what it relates to.

Hope this helps ...

« Last Edit: July 22, 2013, 04:02:09 PM by neutronflow »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Something nasty has stolen my administrator rights ...
« Reply #16 on: July 22, 2013, 04:07:57 PM »
Could you run a fresh OTL scan for me please as it sounds as though you are on a network

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Something nasty has stolen my administrator rights ...
« Reply #17 on: July 22, 2013, 04:14:09 PM »
Could you download the take ownership reg file from here and merge it with your registry http://www.askvg.com/add-take-ownership-option-in-file-folder-context-menu-in-windows-vista/

Then right click the WinTV folder and select take ownership.. Does that allow you to uninstall it

neutronflow

  • Guest
Re: Something nasty has stolen my administrator rights ...
« Reply #18 on: July 22, 2013, 04:21:12 PM »
I do have 'Tonido' installed if that's relevant.

Here's the new OTL log.

I'll do the registry thing now ...

neutronflow

  • Guest
Re: Something nasty has stolen my administrator rights ...
« Reply #19 on: July 22, 2013, 04:25:28 PM »
Just noticed what you said.

To clarify; i had no problems uninstalling wintv. It's the install that i'm not allowed to do.

Same with Tdsskiller and Kasp o/l scan. Was unable to load drivers. Same thing i think with aswMBR when i ran it at your request.

I'll do the registry download and then attempt to install wintv.

neutronflow

  • Guest
Re: Something nasty has stolen my administrator rights ...
« Reply #20 on: July 22, 2013, 04:32:44 PM »
Work beckons. I'll have to disappear for 30mins or so.

Back asap  :)

neutronflow

  • Guest
Re: Something nasty has stolen my administrator rights ...
« Reply #21 on: July 22, 2013, 05:27:47 PM »
Ok. I 'took ownership' of the Wintv folder but alas, no success.

Same as before, I get dialog which says:  You do not have access to make the required system modifications. Please rerun this installation from an administrators account'.

Just to be clear, my account did have full privileges prior to problems.

I also tried hidden admin acc in safe mode but no joy there. Lastly, l created new acc (temp), which I granted full rights.

All three accounts show full rights, but do not actually have them!

*scratches head* :-\

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Something nasty has stolen my administrator rights ...
« Reply #22 on: July 22, 2013, 07:29:51 PM »
OK I will need to research this one

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Something nasty has stolen my administrator rights ...
« Reply #23 on: July 22, 2013, 07:35:20 PM »
Ah that was a lot easier than I thought as I had the link already

Could you try the steps on this page http://www.winhelponline.com/blog/reset-the-registry-and-the-file-permissions-in-windows-xp/

neutronflow

  • Guest
Re: Something nasty has stolen my administrator rights ...
« Reply #24 on: July 22, 2013, 08:23:18 PM »
I just want to be sure on this.

Do you mean, open a command window and enter the following?

secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose

followed by running Subinacl.exe and then reset.cmd?

If so, what should i do afterwards?

Thanks
« Last Edit: July 22, 2013, 08:37:42 PM by neutronflow »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Something nasty has stolen my administrator rights ...
« Reply #25 on: July 22, 2013, 09:19:32 PM »
The secedit option is for xp pro as that function is not available in home

Start here :

Using SubInACL

neutronflow

  • Guest
Re: Something nasty has stolen my administrator rights ...
« Reply #26 on: July 22, 2013, 09:21:30 PM »
But i am on XP Pro ...?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Something nasty has stolen my administrator rights ...
« Reply #27 on: July 22, 2013, 09:33:44 PM »
In that case use this in a command prompt

secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose

Then reboot and try WinTV again

neutronflow

  • Guest
Re: Something nasty has stolen my administrator rights ...
« Reply #28 on: July 22, 2013, 09:37:29 PM »
On it now ...

neutronflow

  • Guest
Re: Something nasty has stolen my administrator rights ...
« Reply #29 on: July 22, 2013, 09:52:51 PM »
Ran secedit, it generated the attached log.

Rebooted, then same dialog as before on attempting to install wintv ...

arrgghh!
« Last Edit: July 22, 2013, 10:38:58 PM by neutronflow »