administrator hostile take over

About 2 months ago I had a trojan problem, and I seem to have gotten rid of
that.
Since then (and never before) there are some things my laptop won't let me
do and it claims administrator only rights. I'm sure it's something I'm
doing, but I have no idea where to begin with solving this.

Most recent.....I was working from home via a remote connection, accessed an
excel spreadsheet remotely, and then, this morning when I have come to work,
I tried to open it and got an warning that the file had been locked by the
administrator and could be opened as "read-only".

How do I deal with this administrator problem at home on the laptop......I
can figure out how to deal with the read only part here.
Thanks.

I have the same problem. The virus changed your registration file. your
control panel may also missing. It may have created a new administrator in
the user area. I have been told to use regedt32 in the run line to see the
registration file is changed. I have one user called administrator and one
user called administrators. you have have to find out which one is the real
user. good luck most people to me to save what I can and wipe it clean
and start over.

"Bruce" wrote:

About 2 months ago I had a trojan problem, and I seem to have gotten rid of
that.
Since then (and never before) there are some things my laptop won't let me
do and it claims administrator only rights. I'm sure it's something I'm
doing, but I have no idea where to begin with solving this.

Most recent.....I was working from home via a remote connection, accessed an
excel spreadsheet remotely, and then, this morning when I have come to work,
I tried to open it and got an warning that the file had been locked by the
administrator and could be opened as "read-only".

How do I deal with this administrator problem at home on the laptop......I
can figure out how to deal with the read only part here.
Thanks.

csxfire wrote:
I have the same problem. The virus changed your registration file.
your control panel may also missing. It may have created a new
administrator in the user area. I have been told to use regedt32 in
the run line to see the registration file is changed. I have one
user called administrator and one user called administrators. you
have have to find out which one is the real user. good luck
most people to me to save what I can and wipe it clean and start over.

Hmmmm. Administrators is a *group* - a built-in name that can't be used for
anything else and Administrator is a *user*.

However, you may be right in that a clean reiinstall might be the best
option. I'd suggest to the OP that he/she post in
microsoft.public.security.homeusers for some more ideas.

"Bruce" wrote:

About 2 months ago I had a trojan problem, and I seem to have gotten
rid of that.
Since then (and never before) there are some things my laptop won't
let me do and it claims administrator only rights. I'm sure it's
something I'm doing, but I have no idea where to begin with solving
this.

Most recent.....I was working from home via a remote connection,
accessed an excel spreadsheet remotely, and then, this morning when
I have come to work, I tried to open it and got an warning that the
file had been locked by the administrator and could be opened as
"read-only".

How do I deal with this administrator problem at home on the
laptop......I can figure out how to deal with the read only part
here.
Thanks.

A virus changed the registration file. The virus has been removed, but the
damage remains. The control panel is now missing. It has created a new user
called administrator in the user area. I have one user called administrator
and one
user called administrators. Even in safe mode, the administrator user has no
rights or a control panel.
using regedt32 several users are show. besides my user id. what others
should show in a normal file. I have my user id, administrators,
everyone,system, restricted,creator owner, account unknown (s-1-5-32-547).
which should been removed.


"Bruce" wrote:

About 2 months ago I had a trojan problem, and I seem to have gotten rid of
that.
Since then (and never before) there are some things my laptop won't let me
do and it claims administrator only rights. I'm sure it's something I'm
doing, but I have no idea where to begin with solving this.

Most recent.....I was working from home via a remote connection, accessed an
excel spreadsheet remotely, and then, this morning when I have come to work,
I tried to open it and got an warning that the file had been locked by the
administrator and could be opened as "read-only".

How do I deal with this administrator problem at home on the laptop......I
can figure out how to deal with the read only part here.
Thanks.