desktop integritylevel keeps dropping to 'low'

foe · 01 Sep 2012

Hi guys,

This is now officially starting to annoy me. One day I noticed that my desktop shortcuts would not start without tons of warnings. So I googled and found a solution (or so I thought):
icacls D:\Desktop /setintegritylevel (OI)(NP)(IO)H

(My desktop folder is located in my D root)

This helped right away, but a few days later it did come back. So I ran the same procedure but it keeps getting more frequent. My current workaround is a .cmd file that runs "icacls D:\Desktop /setintegritylevel (OI)(NP)(IO)H", I double click it when needed, but this is getting more and more annoying. Anyone got an idea about what keeps decreasing my desktop integrity level? I think it is time to start looking for the root of this problem, in stead of fixing it's symptoms.

It is odd though, since this is quite a fresh install. This would not have been caused by a ms update now would it?

mitchell65 · 01 Sep 2012

foe said:

This would not have been caused by a ms update now would it?

That's fairly starightforward to check via Control Panel/Programs/Progs and Features/View installed updates. You can always un install an up date to check!
But first what Anti Virus software are you running and is it up to date. Also download and run Malwarebytes free edition.

foe · 01 Sep 2012

Well, I do not run any antivirus software, but like I said, this happened right after the reinstall...

I realy do not think it is mallware related, I'll run mallwarebytes just 2b sure...

mitchell65 · 01 Sep 2012

foe said:

Well, I do not run any antivirus software, but like I said, this happened right after the reinstall...

I realy do not think it is mallware related, I'll run mallwarebytes just 2b sure...

If you connect with the internet and you have no protection against,virus's, trojan and all the other nasties out there I am afraid there is not much help I can offer other than to strongly urge you to download and install Microsoft Security essentials and run a complete scan. Then run Malwarebytes. The symptons you describe look very much infection related to me!

foe · 01 Sep 2012

well I think I got it before connecting to the internet, but I'll install some protection/scanners to make sure this is not a mallware issue, I'll report back in a few moments...

mitchell65 · 01 Sep 2012

But surely you needed to be connected to the internet to run the updates immediately after the re install and you seem to have Google very early on so I can't see how you can say quote:"well I think I got it before connecting to the internet"

foe · 01 Sep 2012

touché u got me there

Mallwarebytes and security essentials came out clean

I still don't think it is mallware related though, I must admit, it does sound like it.

But I did not open my browser before these updates and I don't think anyone from outside will get past the firewall in the modem/router.

I see no strange processes or services running so...

checked msconfig and my startupfolder as well...

let's say, for the sake of argument, that this is not mallware related, what else could cause this?

mitchell65 · 01 Sep 2012

Try sfc /scannow

foe · 01 Sep 2012

both scanners come out clean,

running fsc now...

I'm running this because you think my system-files might be infected/corrupt? I seriously doubt it.

Can you explain me a bit more about window's behaviour: when will windows decide to lower my desktop's integrity level?

*edit*
I recently removed the hard drive and put it back in. Could this have had any effect on this?

*edit2*
sfc: "Windows Resource Protection did not find any integrity violations."

*edit3*
icacls D:\Desktop /setintegritylevel (OI)(NP)(IO)H:
What do the (OI)(NP)(IO) options mean?

What would be different if I would just run:
icacls D:\Desktop /setintegritylevel H ?

mitchell65 · 01 Sep 2012

I know you think i am geared towards the security aspect of this problem but that is due to the integrity level is tied up with security. I am far from the expert in this field but i think this article may help you. Otherwise I must hand this over to someone on the security side of things.
Windows Integrity Mechanism Design

By the way, I like to know members location and at first I thought you were in the Netherlands but Isee from your profile that you might be in the USA?

EDIT: Have you tried running the Windows 7 Default Administrator Account?