Can't download files (Virus Scan Failed) & No admin rights?

[Saionara]

Hello!

I've had this problem for a couple of weeks now -

EDIT: Problem is back (not having admin acess, the downloads are still working as always, need more help >.<)

I can't download any files using Google Chrome or Internet Explorer, however I found that using Firefox allowed me to download files, fairly unsure why. This is kindof sucky as I can't even install plugins for Chrome anymore. Regardless, that's not my main issue, however;

My major issue that i've been troubled by for more than a few weeks, several months in fact. I can't remove certain shortcuts, run certain programs or install certain files that without exception requires an Admin. I've browsed the interwebs for quite some time trying to figure out how to solve this, and there are some obvious things that I alredy tried. I even went ahead and enabled the 'original/hidden' Admin account, and logged onto it. Even on this account, I wasn't able to run the files, and the error message persists.

I also read some stuff about a Rootkit called ZeroAccess, and ran some programs recommended for users with this Rootkit, however, as you might have guessed alredy, it didn't help.

Any help is appriciated.

 

[Jacee]

What anti-virus scan did you try to run?

 

[Saionara]

I ran the following programs;

MBAM
AdwCleaner
ComboFix
RogueKiller
Mcafee's Rootkit Removal Tool

.. And a couple of others, not sure about the names though. Neither of them found / solved anything.

 

[Jacee]

Download DDS from one of these links:
DDS.com
DDS.pif

• Disable any script blocking protection
• Double click the dds icon to run the tool.
• When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt <--- will be minimized in the task tray
• Save both reports to your desktop.

Include the contents of both logs in your next post.
The scan will instruct you to post Attach.txt as an attachment.

 

[Saionara]

Attatched both files.

P.S. - My issue with being unable to download anything mystically dissapeared. Just the loss of access left.

 

[Jacee]

Tell me why you use BitTorrent


Download CKScanner by askey127 from HERE
Important - Save it to your desktop.
Doubleclick CKScanner.exe and click Search For Files.
After a very short time, when the cursor hourglass disappears, click Save List To File.
A message box will verify the file saved.
Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.

 

[Saionara]

BitTorrent is for, er, downloading stuff - however, didn't use it in ages so I uninstalled it.

This is all ckfiles contained;

CKScanner 2.4 - Additional Security Risks - These are not necessarily bad
scanner sequence 3.RP.11.MLAAI0
----- EOF -----

 

[Jacee]

I'd like you to scan your machine with ESET OnlineScan

1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
   ESET OnlineScan
2. Click the
   
   button.
3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
   1. Click on
      
      to download the ESET Smart Installer. Save it to your desktop.
   2. Double click on the
      
      icon on your desktop.
4. Check
   
5. Click the
   
   button.
6. Accept any security warnings from your browser.
7. Check
   
8. Push the Start button.
9. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
10. When the scan completes, push
    
11. Push
    
    , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
12. Push the
    
    button.
13. Push
    

 

[Saionara]

Took a while indeed, found a ton of threats though and removed them. However, it didn't solve the issue.

Log file below.

 

[Jacee]

Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

 

[Saionara]

This is the content of the log;

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Alexander on 2014-06-10 at 19:33:16,08
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-358856103-113268280-2874181756-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21A18552-95EC-234E-D323-823270E87574}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{21A18552-95EC-234E-D323-823270E87574}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{21A18552-95EC-234E-D323-823270E87574}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Alexander\appdata\locallow\boost_interprocess"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 2014-06-10 at 19:36:35,12
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

[Saionara]

Not sure exactly what solved it - but the issue is now solved :O

Thanks alot!

 

[Jacee]

Thanks for letting me know.

 

[Saionara]

Update!

The problem dissapeared as previously mentioned but came back, I noticed it when it didn't let me install the latest version of Adobe Flash Player :/

Anything else that I should do? =S

 

[Jacee]

ESET found MSIL/Kryptik.AG Trojan. This is a password stealer. This Trojan can easily infect you again, even tho' it was quarantined. It apparently has done so!


My suggestion is to reformat and do a Clean install. You will need to change all of the old passwords you used.


I would also suggest that you don't download 'shared programs and media' from P2P applications.