Main user account suddenly restricted

September 7, 2010 at 17:17:32
Specs: WIN XP , 3 gHz 2GB RAM
MAIN PROBLEM: This past week, suddenly, my main account just mysteriously 'changed itself' to a restricted "unknown" account. Can't even get into System Restore.
DETAILS:
I own and operate a two way communications business for 45+ years. Had an awesome IT and general coding wizard (whom I will initial JEF in case anyone else out there knew him) who built and set up all my business computers and network. This incredible man suddenly passed away. All continued normal with all my PCs for many months, until this past week, when suddenly, my main account on my main computer just mysteriously 'changed itself' to a restricted account. Now I have no admin privileges at all. i.e. Can't write digital pictures to a DVD, cannot format a disk, so it's become a limited account. It's my @#$%!! business, and I paid a mint for this PC, so my question is...Is there a virus out there that does this? I know that a true hacker can change these things, so I'm guessing that I've been violated. If so, what is the work around?

I have searched the archives here many times for similar situations before posting, and I've found that many times it is explained that one can start in safe mode, and change the type of account back to an admin account. I don't know if it's that simple, but I would sincerely appreciate any additional input from you pros out there if it isnt going to be this easy. This has affected my business and there are radio programming files on my main PC that I need to be able to use ASAP. Please help!
Sincerely,
Ecoustic


See More: Main user account suddenly restricted

Report •

#1
September 7, 2010 at 18:35:59
P.S. Now instead of "Computer Administrator" under my main name, it says, "Unknown account type". How can WINXP not know what type of account my main account is; unless it has been messed with? I'm baffled. Could one of the grandkids have done this by accident?

I have people and and businesses depending on me, I really really need you guys to lend a hand. Please. Thank you in advance. If you have any questions PM me or whatever.


Report •

#2
September 7, 2010 at 21:35:14
Ecoustic, what you describe sounds like a nasty (virus, worm/trojan, etc.). If your grandkids have used it on the net, I'd bet on it! Have a really good firewall?
Be aware that a virus and a Trojan are similar, but not the same. Many times, an AV detects one it can't clean, other times, it gets missed entirely.
If you need to clean one, Superantispyware (info only. I’m not paid for recommendation. WARNING! FYI, a full scan on mine takes over an hour.) can do the job and you can get it free @:
http://www.superantispyware.com/
among other places. They have a Vista compatible version if needed. Dunno about Windows 7 or later.
If it turns out that you need to use it, be sure to update Superantispyware prior to running and disable 'restore' (restart after cleaning) so the nasty doesn't get put back. They just released a new update recently and it changes all the time. Things are in a constant state of flux.
The restore thing is critical. May not be your deal at all, but won't hurt anything to try. You'll likely need to reset your homepage in IE once the machine has been cleaned.
HTH.
Ed in Texas.


Report •

#3
September 8, 2010 at 14:28:26
is this computer on a domain? If no then you can blank out (or change your local admin password using an NT password recovery disk( I can send a download link if you would like) - It is pretty simple to do. then unplug and run a scan of you system. sounds like a virus but sometimes these things just seem to happen

Report •

Related Solutions

#4
September 8, 2010 at 15:30:32
MalwayreBytes freebie is another program worth running. Sometimes one program finds what another will miss.

Make sure first you get updates to any scanner you run on it.

Ms Hulot goes horse riding


Report •

#5
September 8, 2010 at 15:33:25
before making any changes logon as administrator and run chkdsk /f on the drive, answer yes to the question and reboot so it runs. This will check the disk for errors.

This is like making sure the foundation of your house isn't slipping before you start plasting the wall cracks.


Report •

#6
September 11, 2010 at 00:48:42
Thank you so much for all of your help and suggestions!

I am touched and very thankful. Wanderer, thank you as well. One of my problems however, is that I've been locked out of any administrator privileges so I cannot log in as the admin to make any changes. I get past this roadblock, and I will try this.

Derek, thank you too. I use Malwarebytes, it's on my flash drive for virus and malware removal.

jgreenkc I thank you, and I would appreciate a link to this file. The drive was actually formatted as FAT32 instead of NTSF. So would a standard WIN98 startup disk work? That's how my amazing teacher taught me to start it up if any troubles ensued. May he rest in peace. If not, thank you for the link, (and please some instructions on how to use it?) Bless you.

Ed in Texas Thank you so VERY much for all of your great help. I certainly appreciate it. I have downloaded SAS to my flash drive. I certainly understand the 'cleaning' of all the restore points, but it has disabled like EVERY admin privilege, so when I right click on my computer, system restore doesn't even appear in the menu! When going to system restore in the traditional manner, it appears, but it tells me as soon as I click on it, "You do not have sufficient rights to access this. Contact (LMAO) a system administrator." If I had the ability to talk to the deceased, I would ask Jon for his password. I am a mere mortal however, so I will have to figure out another way. (Thank you Windows XP)

Anyway, I did a scan with my techie virus/malware removal flash drive, using AVAST AV, and it found as I suspected, a decompression bomb, no doubt sent to me by someone I know, completely by accident.

I've no experience (that I know of) working with decompression bombs or how to eradicate them so any help in this area would be greatly appreciated as well. I am doing my own searches and investigation in to this, but any shortcuts or tips would be sincerely appreciated.

I apologize for not placing this in the 'general' or 'virus' sections as well.

God bless you all for your help.

Eric


Report •

#7
September 11, 2010 at 07:26:47
http://www.pogostick.net/~pnh/ntpas... is one link
I also recommend Hiren's 10.6 (not 11.0)

Instruction on how to use it are on the site.

http://www.hirensbootcd.net/documen...


Report •

#8
September 11, 2010 at 09:45:52
Err...don't be tempted to put it on more than one forum here because the mod will remove at least one of them.

Ms Hulot goes horse riding


Report •

#9
September 12, 2010 at 02:54:44
Did I do that this time? If so I'm sorry, I didn't mean to. The site has changed quite a bit since I last was on. I can't thank you all enough for your help. I am waiting until Monday to do the work on my computer. Will let everyone know by posting here, how it works out! Right now taking care of a WW2 veteran, (more like hero), took him to his annual 82nd infantry reunion. Be back to start on Monday the 13th.

I can't thank you guys enough...

With all the warmth and Sincerity I possess,

Eric


Report •

#10
September 12, 2010 at 06:04:27
Ooops, no, I didn't mean that you had double posted. It was just that this bit made me think you were tempted to do so:
"I apologize for not placing this in the 'general' or 'virus' sections as well."

No problems, just making sure you were aware.

Ms Hulot goes horse riding


Report •

#11
September 13, 2010 at 04:41:36
LoL, oh ok. Good. Thanks Derek.

Report •

#12
September 13, 2010 at 04:50:00
jgreenkc I'm having trouble finding and downloading the proper link for this file. Well, actually I'm having trouble distinguishing 10.6 from the other download links. I've read the walkthrough, and I seem confident that I can perform this relatively easily, but the link alludes me. Maybe it is how they are listed that is throwing me off. Jet lag...what a pain in the butt. :)

Eric


Report •

#13
September 13, 2010 at 08:56:16
www.9down.com/Hiren-s-BootCD-10-6-352820
bottom of the page

Report •

Ask Question