Vista Ultimate Policy, Administrative Tools Not Accessible

[news.microsoft.com]

A Trojan has gotten into my PC and done something to prevent access to
administrative tools. Possibly Policy? Administrative Tools can be accessed
by right clicking each tool and clicking "Run as Administrator", but this is
a pain and a change from the norm. I checked privileges and all look OK.
Any ideas will be appreciated!

 

[Andre Da Costa]

Here are some suggestions by MVP Malke for dealing with vulnerabilities on
your PC:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html
or here Malwarebytes malware removal guides - http://tinyurl.com/5xrpft

If you are infected with XP Antivirus or Antivirus 2009/10, here are removal
steps:

http://www.bleepingcomputer.com/malware-removal/uninstall-antivirus-2009
http://www.bleepingcomputer.com/forums/topic154529.html (earlier versions)

Removal instructions for Antivirus 2010:
http://www.malwarebytes.org/forums/index.php?showtopic=6703

Removal instructions for Antivirus 2009:
http://www.malwarebytes.org/forums/index.php?showtopic=5178

These may work for you and all may be well. However, in many cases the
computer will also be infected with Zlob and/or Vundo trojans and protected
by a rootkit. These machines are extremely difficult to clean.

If your machine is one of these cases, either get guided help at one of the
specialty forums below OR back up your data and do a clean install of
Windows. It is your choice. If you are unsure how to back up your data or
how to do a clean install, you can take your machine to a local computer
professional. I don't recommend using BigComputerStore/GeekSquad types of
places.

PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS.

http://aumha.org/downloads/hijackthis.zip
http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://www.malwarebytes.org/forums/index.php?showforum=7
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/
http://www.thespykiller.co.uk/index.php?board=3.0
http://forums.subratam.org/index.php?showforum=7

 

[news.microsoft.com]

Thanks for the response! I got rid of the Trojan with Norton but it did
something to permissions, security policy or group policy which prevents my
administrative tools from running normally. It also does not allow my
Diskeeper defragger to run. Strangely, If I go directly to the msc files,
they will run if I right click and select "Run as Administrator".
Permissions are OK on all of the msc files. Very strange? Any other thoughts
appreciated!

 

[Peter Foldes]

You are still infected. Use the info that Andre posted that was from Malke. No other way around Afaik

 

[news.microsoft.com]

Thanks - I am going through all of that info but it is enormous - will keep
plugging if no one has any other ideas.

 

[news.microsoft.com]

OK, I have been through all of the Malke items, run all of the scanners, and
still no malware was found. I searched with Google and found others with the
same problem but no solutions. It looks like I will have to start over with
a clean install unless anyone has any other idea? Since I can run all of the
..MSC programs if I "Run as Administrator", it must be a missing registry,
permissions or policy issue.
Any other ideas will certainly be welcome...!

 

[Mark L. Ferguson]

Aaron Stebner's WebLog Solving setup errors by using the SubInACL tool to
repair file and regi:
http://blogs.msdn.com/astebner/archive/2006/09/04/739820.aspx

--
Please use the Communities guidelines when posting.
http://www.microsoft.com/wn3/locales/help/help_en-us.htm
Use the "Ratings" feature. It helps the new users.
Mark L. Ferguson MS-MVP
https://mvp.support.microsoft.com/profile/Mark.Ferguson

 

[news.microsoft.com]

Thanks Mark...definitely worth a try! Unfortunately, it didn't help and had
many failures...the log file was so large that I couldn't open it.
Looks like I'm done for.
Thanks to all!
--