Security settings for the C:\ drive is exactly the same as in my screenshots earlier. There is now a "Local Disk (Y):" I don;t know where that came from.
It will not let me access the Disk Mgmt
Admin Rights Blocked- Help! Please - Denied Access System Error 5
Started by
FireFighter254
, Apr 26 2014 10:44 AM
#32
Posted 27 April 2014 - 09:02 PM
FireFighter254
- Topic Starter
-
- Member
-
- 81 posts
Member
Above is trying to access Disk Mgmt
Below, is doing the same procedure you asked me before but under my normal user account:
"Special Permissions" not shown in window below is ticked.
Also, the SID 1001 is my regular User Account...just FYI
Below, it is showing another SID has ownership:
Here are my SID's running cmd promt in my reg user account:
Then, once I signed into my regular user account, I noticed a new folder on the desktop called "Speclean'. I am assuming this is from the checkdsk we ran? Just in case, I am posting the two log files contained within below for you to see:
[2014.04.27 16:13:53.732] - INFO: EGUI Cleaning
[2014.04.27 16:13:53.732] - INFO: [Win32/Conficker] detecting...
[2014.04.27 16:13:53.732] - INFO: [Win32/Conficker] not detected.
[2014.04.27 16:13:53.732] - INFO: [Win32/Dummy] detecting...
[2014.04.27 16:13:53.732] - INFO: Checking [HKCU\SOFTWARE\ESET]...
[2014.04.27 16:13:53.732] - INFO: [Win32/Dummy] not detected.
[2014.04.27 16:13:53.732] - INFO: [Win32/Necurs] detecting...
[2014.04.27 16:13:53.732] - ERROR: Offline registry is not initialized.
[2014.04.27 16:13:53.732] - ERROR: Could not initialize cleaner!
[2014.04.27 16:13:53.732] - INFO: [Win32/Necurs] not detected.
[2014.04.27 16:13:53.732] - INFO: [Olmarik/Olmasco] detecting...
[2014.04.27 16:13:53.842] - INFO: INF_PASI1 - 0x00000000...
[2014.04.27 16:13:53.842] - INFO: INF_PASI2 - 0x80000025...
[2014.04.27 16:13:53.842] -
[2014.04.27 16:13:53.842] - INFO: Kernel module initialized successfully.
[2014.04.27 16:13:53.842] -
[2014.04.27 16:13:53.842] - --------------------------------------------------------------------------------
[2014.04.27 16:13:53.842] - INFO: Checking active infection...
[2014.04.27 16:13:53.842] -
[2014.04.27 16:13:53.842] - INFO: INF_PASGSH3 - 0xC00002F0...
[2014.04.27 16:13:53.842] - --------------------------------------------------------------------------------
[2014.04.27 16:13:53.842] - INFO: Checking inactive infection...
[2014.04.27 16:13:53.842] -
[2014.04.27 16:13:53.857] - INFO: CHECKING DISK NO - 00 | TYPE - 7 | SIZE - 0x74706DAF (931GB)
[2014.04.27 16:13:53.857] - INFO: EFI detected...
[2014.04.27 16:13:53.857] - INFO: -> PARTITION NO - 00 | TYPE - 0xEE | BOOTABLE - 0 | STARTING LBA - 0x00000001 | SIZE - 0xFFFFFFFF (2047GB)
[2014.04.27 16:13:53.857] -
[2014.04.27 16:13:53.857] - INFO: 00000001: passed...
[2014.04.27 16:13:53.857] - INFO: 00000002: passed...
[2014.04.27 16:13:53.857] - INFO: 00000004: passed...
[2014.04.27 16:13:53.873] - INFO: 00000400: passed...
[2014.04.27 16:13:53.873] -
[2014.04.27 16:13:53.873] - ERROR: ERR_BICVC01...
[2014.04.27 16:13:53.873] -
[2014.04.27 16:13:53.873] - --------------------------------------------------------------------------------
[2014.04.27 16:13:53.873] - INFO: [Olmarik/Olmasco] not detected.
[2014.04.27 16:13:53.873] - INFO: [Win64/Sirefef] detecting...
[2014.04.27 16:13:53.873] -
[2014.04.27 16:13:53.873] - INFO: Current Shell HKLM [explorer.exe].
[2014.04.27 16:13:53.873] - INFO: Current SubSystems [%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16].
[2014.04.27 16:13:53.873] - INFO: INF_GSP01 FFFFFFFFC0000061...
[2014.04.27 16:13:53.873] - INFO: INF_CLDI01...
[2014.04.27 16:13:53.873] -
[2014.04.27 16:13:53.873] - INFO: EA_ATTRIBUTE [$KERNEL.PURGE.ESBCACHE] - [D9385FF91D8116F1B3ACCA30BBA0C1A3].
[2014.04.27 16:13:53.873] -
[2014.04.27 16:13:53.873] - INFO: [Win64/Sirefef] not detected.
************************************************************************************
[2014.04.27 16:07:41.713] - INFO: EGUI Cleaning
[2014.04.27 16:07:41.728] - INFO: [Win32/Conficker] detecting...
[2014.04.27 16:07:41.728] - INFO: [Win32/Conficker] not detected.
[2014.04.27 16:07:41.728] - INFO: [Win32/Dummy] detecting...
[2014.04.27 16:07:41.728] - INFO: Checking [HKCU\SOFTWARE\ESET]...
[2014.04.27 16:07:41.728] - INFO: [Win32/Dummy] not detected.
[2014.04.27 16:07:41.728] - INFO: [Win32/Necurs] detecting...
[2014.04.27 16:07:41.728] - ERROR: Offline registry is not initialized.
[2014.04.27 16:07:41.728] - ERROR: Could not initialize cleaner!
[2014.04.27 16:07:41.728] - INFO: [Win32/Necurs] not detected.
[2014.04.27 16:07:41.728] - INFO: [Olmarik/Olmasco] detecting...
[2014.04.27 16:07:41.884] - INFO: INF_PASI1 - 0x00000000...
[2014.04.27 16:07:41.884] - INFO: INF_PASI2 - 0x80000025...
[2014.04.27 16:07:41.884] -
[2014.04.27 16:07:41.884] - INFO: Kernel module initialized successfully.
[2014.04.27 16:07:41.884] -
[2014.04.27 16:07:41.884] - --------------------------------------------------------------------------------
[2014.04.27 16:07:41.884] - INFO: Checking active infection...
[2014.04.27 16:07:41.884] -
[2014.04.27 16:07:41.884] - INFO: INF_PASGSH3 - 0xC00002F0...
[2014.04.27 16:07:41.884] - --------------------------------------------------------------------------------
[2014.04.27 16:07:41.884] - INFO: Checking inactive infection...
[2014.04.27 16:07:41.884] -
[2014.04.27 16:07:41.900] - INFO: CHECKING DISK NO - 00 | TYPE - 7 | SIZE - 0x74706DAF (931GB)
[2014.04.27 16:07:41.900] - INFO: EFI detected...
[2014.04.27 16:07:41.900] - INFO: -> PARTITION NO - 00 | TYPE - 0xEE | BOOTABLE - 0 | STARTING LBA - 0x00000001 | SIZE - 0xFFFFFFFF (2047GB)
[2014.04.27 16:07:41.900] -
[2014.04.27 16:07:41.900] - INFO: 00000001: passed...
[2014.04.27 16:07:41.900] - INFO: 00000002: passed...
[2014.04.27 16:07:41.900] - INFO: 00000004: passed...
[2014.04.27 16:07:41.900] - INFO: 00000400: passed...
[2014.04.27 16:07:41.900] -
[2014.04.27 16:07:41.900] - ERROR: ERR_BICVC01...
[2014.04.27 16:07:41.900] -
[2014.04.27 16:07:41.900] - --------------------------------------------------------------------------------
[2014.04.27 16:07:41.900] - INFO: [Olmarik/Olmasco] not detected.
[2014.04.27 16:07:41.900] - INFO: [Win64/Sirefef] detecting...
[2014.04.27 16:07:41.900] -
[2014.04.27 16:07:41.900] - INFO: Current Shell HKLM [explorer.exe].
[2014.04.27 16:07:41.900] - INFO: Current SubSystems [%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16].
[2014.04.27 16:07:41.916] - INFO: INF_GSP01 FFFFFFFFC0000061...
[2014.04.27 16:07:41.916] - INFO: INF_CLDI01...
[2014.04.27 16:07:41.916] -
[2014.04.27 16:07:41.963] - INFO: EA_ATTRIBUTE [$KERNEL.PURGE.ESBCACHE] - [D9385FF91D8116F1B3ACCA30BBA0C1A3].
[2014.04.27 16:07:41.963] -
[2014.04.27 16:07:41.963] - INFO: [Win64/Sirefef] not detected.
Edited by FireFighter254, 27 April 2014 - 09:08 PM.
#33
Posted 28 April 2014 - 12:10 PM
SleepyDude
-
- Malware Removal
-
- 4,988 posts
Trusted Helper
Hi,
Sorry had a busy day at work and couldn't post...
Did the chkdsk finish successfully?
Can you access the Disk Manager using the Administrator account?
#34
Posted 28 April 2014 - 01:05 PM
FireFighter254
- Topic Starter
-
- Member
-
- 81 posts
Member
Yes, it finished. I posted a few posts above. No, it will not let me in
#35
Posted 28 April 2014 - 01:09 PM
FireFighter254
- Topic Starter
-
- Member
-
- 81 posts
Member
It won't let me in Disk Mgmt, Event Viewer or Computer Mgmt. Anything else I can get into it seems.
Sorry you had a long day at work.
#36
Posted 28 April 2014 - 02:49 PM
SleepyDude
-
- Malware Removal
-
- 4,988 posts
Trusted Helper
It won't let me in Disk Mgmt, Event Viewer or Computer Mgmt. Anything else I can get into it seems.
Ok.
Sorry you had a long day at work.
Not at all, is better than no job.
The thing doesn't look good, you could be facing the need of a complete reinstall if the permissions are completely messed up!
I will do some testing here... Can you download and burn a CD eventually using a different computer? The machine that is broken have a cd / dvd player?
#37
Posted 28 April 2014 - 02:59 PM
FireFighter254
- Topic Starter
-
- Member
-
- 81 posts
Member
It won't let me in Disk Mgmt, Event Viewer or Computer Mgmt. Anything else I can get into it seems.
Ok.
Sorry you had a long day at work.
Not at all, is better than no job.
The thing doesn't look good, you could be facing the need of a complete reinstall if the permissions are completely messed up!
I will do some testing here... Can you download and burn a CD eventually using a different computer? The machine that is broken have a cd / dvd player?
Oh no. How do I do that, since the OS was already installed on my machine when purchased?
Yes, I can download and burn CD on my wife's laptop.
#38
Posted 28 April 2014 - 03:08 PM
SleepyDude
-
- Malware Removal
-
- 4,988 posts
Trusted Helper
Oh no. How do I do that, since the OS was already installed on my machine when purchased?
If the Hard Drive isn't bad it should have one hidden partition with the information needed to restore the machine to factory defaults like when you start it the first time.
Yes, I can download and burn CD on my wife's laptop.
Ok. Let me prepare a link for you...
#39
Posted 28 April 2014 - 03:15 PM
SleepyDude
-
- Malware Removal
-
- 4,988 posts
Trusted Helper
Download the Windows 8 System Recovery Environment from the link below:
Extract the ZIP file to obtain an ISO file, this file must be burned to a CD/DVD using the Burn Image option in your burning application.
If you don't know how to do it, let me know the program you use and I will try to find the specific instructions.
#40
Posted 28 April 2014 - 03:17 PM
FireFighter254
- Topic Starter
-
- Member
-
- 81 posts
Member
Ok, I will download that, burn to CD and then run it on my laptop?
#41
Posted 28 April 2014 - 03:20 PM
FireFighter254
- Topic Starter
-
- Member
-
- 81 posts
Member
I'm not sure what her burn app is, most likely only Win Media PLayer on her machine. She has Win 7. Booting her's up now
#43
Posted 28 April 2014 - 03:23 PM
FireFighter254
- Topic Starter
-
- Member
-
- 81 posts
Member
Thank you so much. Once I burn the file to the CD, what is my next procedure? Insert CD into my drive and reboot?
#44
Posted 28 April 2014 - 03:27 PM
SleepyDude
-
- Malware Removal
-
- 4,988 posts
Trusted Helper
Thank you so much. Once I burn the file to the CD, what is my next procedure? Insert CD into my drive and reboot?
I will tell you when I'm doing some testing...
The Windows 8 System Recovery Environment is something that every windows 8 user should create so it's something to keep even if we could solve this without using the disk.
Similar Topics
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users
As Featured On:
Sign In
Create Account
