Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Need help removing unwanted user profile with admin privilege


  • Please log in to reply
10 replies to this topic

#1 Artbroken

Artbroken

  • Members
  • 69 posts
  • OFFLINE
  •  
  • Local time:09:45 AM

Posted 05 September 2015 - 02:08 PM

Hello - I have a Windows 7 laptop with a user account that was not created with my knowledge. The laptop seems to have some type of malware, but this user account blocks any attempts to run programs or switch to another administrator.

I'd like help removing this profile and returning control back to me. Thanks!


Edited by hamluis, 05 September 2015 - 02:16 PM.
Moved from Win 7 to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 Artbroken

Artbroken
  • Topic Starter

  • Members
  • 69 posts
  • OFFLINE
  •  
  • Local time:09:45 AM

Posted 05 September 2015 - 04:06 PM

Apologies, but I was instructed to post this topic in the Windows forum. This issue has already been discussed in the "Am I infected?" forum, as well as the Malware removal forum.



#3 Union_Thug

Union_Thug

    Bleeps with the fishes...


  • Members
  • 2,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:is everything
  • Local time:09:45 AM

Posted 06 September 2015 - 07:37 AM

If you have an installation or repair DVD/USB you can try this, I tested in a Win 7 Virtual Machine and it works... the unknown factor here is of course the malware on your machine which may or may not prevent any changes.

 

How to Reset a Windows Password in Regedit at Boot http://www.sevenforums.com/tutorials/85657-password-reset.html

 

Usual Caveats apply... make proper backups, no guarantees etc.

Capture_zpslaxj4hk8.jpg

 

 

 

 



#4 Artbroken

Artbroken
  • Topic Starter

  • Members
  • 69 posts
  • OFFLINE
  •  
  • Local time:09:45 AM

Posted 06 September 2015 - 01:43 PM

Unfortunately, the user "Temporarory" blocks the creation of a repair disk.

Could I make one on another windows 7 computer and use that?

 

I'd like to back up the system, but it isn't letting me do that either.



#5 Union_Thug

Union_Thug

    Bleeps with the fishes...


  • Members
  • 2,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:is everything
  • Local time:09:45 AM

Posted 06 September 2015 - 01:45 PM

Yes you can make a repair disc on another Win 7 & use it.



#6 Artbroken

Artbroken
  • Topic Starter

  • Members
  • 69 posts
  • OFFLINE
  •  
  • Local time:09:45 AM

Posted 06 September 2015 - 02:46 PM

Attempted to boot from the repair disk.

Went through "windows is loading files" fine, then the microsoft logo, but seems to hang after the desktop/background loads and then I 

get "Error 0x4001100200001012"



#7 Union_Thug

Union_Thug

    Bleeps with the fishes...


  • Members
  • 2,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:is everything
  • Local time:09:45 AM

Posted 07 September 2015 - 10:07 AM

Attempted to boot from the repair disk...and then I get "Error 0x4001100200001012"

 

That s#cks :( researching that error doesn't reveal any sure fixes, some have had success using a bootable USB stick rather than a CD/DVD. If you want to try you can use Diskpart to make a bootable USB and then just copy the files over from the CD to the USB. (Example commands below, open spoiler)

Spoiler

 

Other than that I'm out of ideas :huh:


Edited by Union_Thug, 07 September 2015 - 10:20 AM.


#8 cmptrgy

cmptrgy

  • Members
  • 1,671 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Massachusetts
  • Local time:09:45 AM

Posted 07 September 2015 - 06:07 PM

How long has this problem been happening?

Were there any recommendations when you were in the Malware Removal forum?

 

Here is an out of the box idea: See if you can get into the hidden Administrator account

 

Start the computer up into Safe Mode with Command Prompt

Type net user administrator /active:yes

Shut down

Start back up in Safe Mode

Select the Administrator user account

Get into User Accounts

Select Manage another account

Delete the "Temporary" account

Shut down

 

Start back up in Safe Mode

Select the Administrator user account

Get into User Accounts

Select Manage another account

Ensure whether or not the "Temporary" account has been removed

If the "Temporary" account has been removed, shut down

Start back up into Safe Mode with Command Prompt 

Type net user administrator /active:no

Shut down

Start back up in Normal Mode and see what happens

If everything is good at this point do some serious maintenance and security programs immediately 

Save your data immediately also

 

If the "Temporary" account has not been removed, you are back at square one

Get back to net user administrator /active:no

 

Another idea is to use Repair My Computer and select the option for a Repair Point: maybe you could go back far enough before your problem occurred.



#9 Artbroken

Artbroken
  • Topic Starter

  • Members
  • 69 posts
  • OFFLINE
  •  
  • Local time:09:45 AM

Posted 08 September 2015 - 11:30 AM

Cmptrgy - Could not get to the hidden administrator account through safe mode, or anything else. Was blocked by "Temporarory" each time. Could not do any repair/restore either, for same reason.

 

Union_Thug: I went to another Windows 7 PC and made another repair disc - this time it worked, and that solution worked perfectly! Thank you very much!

I have given administrator privilege to the correct account and removed it from Temporarory.

 

Will go back to my post on the malware forum now. This issue is resolved unless something else comes up.



#10 Union_Thug

Union_Thug

    Bleeps with the fishes...


  • Members
  • 2,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:is everything
  • Local time:09:45 AM

Posted 08 September 2015 - 12:30 PM

Excellent news, I'm glad to hear it :) & you're very welcome!


Edited by Union_Thug, 08 September 2015 - 12:30 PM.


#11 cmptrgy

cmptrgy

  • Members
  • 1,671 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Massachusetts
  • Local time:09:45 AM

Posted 08 September 2015 - 01:05 PM

Thanks for letting us know your solution






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users