Solved Error 5: Access Denied while using Admin account

[bulletng]

So I've been recently having issues with permissions or something related to it. I first noticed it when I would always get this security prompt when attempting to open a shortcut to Teamspeak 3. Now I'm just trying to install a program and it's saying that I don't have rights to the /Local/Temp/ folder!

Obviously the first thing I checked what whether or not my account was still an administrator:

Check!

Then I made sure UAC was turned off:

Check!

Then I went ahead and attempted to give myself Full Access permissions to the entire C:\ drive:

Then I get these Access Denied errors using this process and I have no idea why!

Which also says the same thing about Program Files.

(It did allow me to take ownership of the drive(s) though).

Of course I attempted to Google the issue and tried many methods including several from these forums:
http://www.sevenforums.com/system-security/7320-error-applying-security.html
http://www.sevenforums.com/tutorials/24232-sharing-permissions.html

I don't know what else to try thus why I'm here!
Thanks

 

[bulletng]

I was able to resolve the File Security prompt for opening shortcuts (i.e. Teamspeak 3) by enabling 'Launching applications and unsafe files' in Internet Options. BUT I'm still getting the permissions error and cannot give myself full access!

I've also noticed that there are about three updates that I cannot install. I'm sure this has to do with my permissions issue as well. If any of you are wondering my OS is installed on my primary SSD (C:\) which is one of the drives I'm trying to alter. The other drives seemed to work fairly OK with a few minor issues.

 

[Kaktussoft]

Lucky you!! You did only change permissions on C:\ only (so not on subfolders). this wasn't neccesary at all and don't do it again.

Enable UAC please and check if it's working. For example try to open a http://www.sevenforums.com/tutorials/783-elevated-command-prompt.html

Also post all permissions on folder c:\users\nathan\appdata\local\temp

 

[Kaktussoft]

When posting permissions on folder c:\users\nathan\appdata\local\temp be sure to click advanced. Post screenshot. Also click on owner tab and tell me who's the owner

 

[bulletng]

I believe that I set myself Full Access rights to that folder as well as changing the Ownership, but I will post a screenshot when I can.

 

[Borg 386]

Rootkits are notorious for writing a hidden boot sector, hence a probable reason for denial to C:\Boot. Viruses deny access to certain parts of the software in attempt to quell any removal tactics. You should run some malware/virus removal tools just to be sure you are not infected.

Start by running TDSSKiller, to see if any rootkits are present.

Run Malwarebytes and see what it finds.

Another recommended program is AdwCleaner

Next, Make a copy of Windows Defender Offline on a different, clean PC. Then run it on the infected machine. Do not make this on a infected PC as this can compromise the scanner.

 

[Kaktussoft]

Rootkits are notorious for writing a hidden boot sector, hence a probable reason for denial to C:\Boot. Viruses deny access to certain parts of the software in attempt to quell any removal tactics. You should run some malware/virus removal tools just to be sure you are not infected.

Start by running TDSSKiller, to see if any rootkits are present.

Run Malwarebytes and see what it finds.

Another recommended program is AdwCleaner

Next, Make a copy of Windows Defender Offline on a different, clean PC. Then run it on the infected machine. Do not make this on a infected PC as this can compromise the scanner.

Of course it's possible what you say, but it's quite normal you can't change permissions on C:\boot without elevated privileges.

 

[Kaktussoft]

When posting permissions on folder c:\users\nathan\appdata\local\temp be sure to click advanced. Post screenshot. Also click on owner tab and tell me who's the owner

Do you have ADOBE PROFESSIONAL? I helped 2 other persons before. Any update to that software changes the permissions on temp folder.... don't know why.

 

[bulletng]

Rootkits are notorious for writing a hidden boot sector, hence a probable reason for denial to C:\Boot. Viruses deny access to certain parts of the software in attempt to quell any removal tactics. You should run some malware/virus removal tools just to be sure you are not infected.

Start by running TDSSKiller, to see if any rootkits are present.

Run Malwarebytes and see what it finds.

Another recommended program is AdwCleaner

Next, Make a copy of Windows Defender Offline on a different, clean PC. Then run it on the infected machine. Do not make this on a infected PC as this can compromise the scanner.

Thanks I never thought about this since I have AVG (I know I should remove it and just use MSE instead). I haven't run any scans recently. I will try the programs you suggested as soon as I get home.

Do you have ADOBE PROFESSIONAL? I helped 2 other persons before. Any update to that software changes the permissions on temp folder.... don't know why.

I have Adobe CS6 and I think Adobe Reader X but I'm sure. I don't remember ever doing any updates to them. Especially CS6 because I disabled updates.

 

[Borg 386]

Of course it's possible what you say, but it's quite normal you can't change permissions on C:\boot without elevated privileges.

It could be, but anytime you can't get to certain areas of your PC that were accessible before, the first thing to suspect is a infection, as most viruses will try to block you from getting to key points that can aid in removal. Better to confirm your machine is clean rather then going unchecked & have a virus hiding somewhere on the system. Paranoia is just another level of defense

 

[Kaktussoft]

post all permissions on folder c:\users\nathan\appdata\local\temp

 

[bulletng]

Of course it's possible what you say, but it's quite normal you can't change permissions on C:\boot without elevated privileges.

It could be, but anytime you can't get to certain areas of your PC that were accessible before, the first thing to suspect is a infection, as most viruses will try to block you from getting to key points that can aid in removal. Better to confirm your machine is clean rather then going unchecked & have a virus hiding somewhere on the system. Paranoia is just another level of defense

Well I have no problem browsing any directory on any of my drives.

post all permissions on folder c:\users\nathan\appdata\local\temp

Will do when I get home.

 

[bulletng]

Trying to install Malwarebytes produces a very similar error:

I also get Log file and driver errors when trying to run TDSSkiller
Here is my security settings on temp:

I can run CMD as Administrator just fine.

I even enabled the built-in administrator account and still cannot install mbam!

 

[Borg 386]

Make a copy of Windows Defender Offline on a clean PC, run it on the infected one & post the results.

 

[Kaktussoft]

Trying to install Malwarebytes produces a very similar error:

I also get Log file and driver errors when trying to run TDSSkiller
Here is my security settings on temp:

I can run CMD as Administrator just fine.

I even enabled the built-in administrator account and still cannot install mbam!

Goto permissiions->advanced of users nathan temp folder. Clear "inheterable permission...." it will show a popup. Click remove. Remove all permissions. After that put checkmark in "inheterable permission...." and "replace all child object....". click apply.

Can you create a folder in your temp folder?

 

[bulletng]

Can you create a folder in your temp folder?

I performed those steps and I can create a folder in that directory (temp). Although it produced the same error when attempting to install mbam as before.

I also ran the Windows Defender Offline (off of a USB created on another computer) overnight and it only found one suspicious object. Nothing changed.

 

[bulletng]

I have also noticed when attempting to install other executable files that sometimes it produces other weird errors:

Someone suggested that I check my Environmental Variables:

but they all seem OK?

BUT then I changed the TMP location to another drive (E:\Temp) and it allowed the exe to install.
Although now I cannot install it to any directory!

D:

 

[Kaktussoft]

Can you create that folder (exact same name) yourself in temp? It looks (from permissions) you can.

 

[Borg 386]

I's good that WDO only found one thing. Do you remember the name of what it found by chance?

You might want to look into running a SFC /Scannow to see if any of your files are messed up.

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

http://www.sevenforums.com/tutorials/3413-repair-install.html

 

[bulletng]

Can you create that folder (exact same name) yourself in temp? It looks (from permissions) you can.

It's trying to create a .tmp file not a folder. I can try creating one to see what happens.

I's good that WDO only found one thing. Do you remember the name of what it found by chance?

You might want to look into running a SFC /Scannow to see if any of your files are messed up.

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

http://www.sevenforums.com/tutorials/3413-repair-install.html

No I don't remember. I think it was some .dll though. I will perform a SFC tonight. Thanks