Virus has removed all permissions on all accounts 2

[RRMcC]

Family member installed file sharing program without my permission. Virus has changed permissions on all accounts (all accounts are computer administrator) so that I cant right click and chose properties or click on any control panels to try and fix problem. In Safe mode under administrator I can click on everything, but cant execute anything during normal mode. It did say something about needing supervisor access?
-System restore isnt giving any pervious dates even though the service has been running.
-Tried creating new account with full control but whe i go in during normal mode, has the most minimal amount of acees to system
-Try to run exe for Norton, says I dont have permission (cant run in Safe mode)
-Went into safe mode to give full control back to all accounts and enable much lighter security protocols, but when I went back into normal mode for the accounts, still gave them no permissions to do anything (as if they had been taken away again)

Can anyone please tell me how to fix this issue other than wiping hard drive clean. Appreciate any help you can offer. Thanks.

 

[bcastner]

http://support.microsoft.com/default.aspx?scid=313222

 

[linney]

You could try the Built-in Administrator account while in Normal Mode (XP Pro only). Use Ctrl+Alt+Del at the login screen to bring up the proper login box, type Administrator in the Username and the Administrator's password (the one you use in Safe Mode) in the password box.

See if you can get your programs (virus scanner) to run as the Administrator in Normal Mode. See if you have more access to the system.

If you have access to the internet as the built-in Admin try the online virus scanners.

Removing adware & spyware
faq608-4650

 

[LloydSev]

While in Safe Mode w/ Network Support, you could goto

http://housecall.trendmicro.com/

to run a virus scan. After the virus has been removed (as long as it does remove it) you could then set all the permissions back and not worry about the virus changing them again.

Computer/Network Technician
CCNA

 

[RRMcC]

**Update**
Problem solved! When I was in Safe mode and it kept giving me the oppurtunity what profile to choose, I kept going to administrator. This time I went to my profile and I went to sett he permissions under security for C:\ back to full control. Then I went to msconfig and noticed there was a some things checked that definitely didnt belong so I unchecked them. I rebooted and I had permissions back. Ran virus scan and adware SE and the things I unchecked were flagged as a virus that had to then be manually removed.

the secedit command wasnt working, & trying CTRL+ALT+del and logging on in normal mode was restricting me, so I had to feel my way through but couldnt have done it w/o your guys help. Thanks

 

[RRMcC]

bcastner,
I know problem is solved, though, any reason why secedit was saying not an internal/external command or operable program? I went to the directory where secedit lies and tried executing the command, but it didnt work. The problem didnt seen to be permissions related but I could be wrong.

 

[bcastner]

XP Home does not contain the tool.
Otherwise, it is likely a PATH environmental variable issue, or perhaps it is missing.

Start, Run, cmd
c:\windows\system32\secedit.exe /?

Does it find it now?

 

[RRMcC]

But Xp home does contain the file secedit.sdb I noticed. It is located in C:\Windows\System\Security\Database\secedit.sdb. So if I understand you correctly, it contains the file bit no way to edit or open? Or is this file different. Not home yet to try and run thru command window.

 

[bcastner]

You have it right. The database must be there, but only XP Pro offers the configuration tool. (Similar to XP Pro offering secpol.msc and gpedit.msc, and Home does not).

 

[linney]

The information in this article applies to:
Microsoft Windows XP Professional.

How To Reset Security Settings Back to the Defaults

http://support.microsoft.com/default.aspx?scid=kb;en-us;313222&FR=1&PA=1&SD=HSCH

 

[RRMcC]

Thanks guys! You rock. Appreciate all who helped.