Pick A Task in User Accounts Has Changed (Wiz?)

Chip Fossa · Post by **Chip Fossa** » 3 Oct 2006 11:28 am

When I now go into Control Panel/User Accounts
PICK A TASK has changed so that there is no longer a way to "create a new account".

As of now, I have the two accounts: Foghorn & Foghorn2. Foghorn is a Limited Account, and Foghorn2(I think) is the Administrative Account; which freezes up, so I'm not using it.

I wish to go back and change the Foghorn account back to Administrative. I know it's riskier, but I feel I may not be able to download some things with the Limited Account.

But why did User Accounts suddenly change? I checked out most of the sub-menus but none of them mentioned how to create or change an account [like it did 5 or 6 days ago].

Wiz Feinberg · Post by **Wiz Feinberg** » 3 Oct 2006 2:23 pm

I thought the freezeups stopped. Hmm, something is wrong with your computer Chip.

Regarding the change option for user accounts, a Limited Account does not have the authority to change accounts or create new ones. Only your Administrator level account allows you to alter, create or delete accounts.

Since the Admin account is suffering from freezeups your best bet might be to reboot, tap the F8 key until the boot menu appears, then select Safe Mode with the Up/Down arrow key and hit Enter. When the login screen appears choose the actual "Administrator" account and login to it. If Administrator is not shown as a login option choose the administrator level foghorn(2?) account instead. Chances are fairly good that something in your startup group is causing the freezeups and those items are not launched when you boot into safe mode.

Make your changes to the other user accounts, as you wish, scan for spyware and viruses while in safe mode, kill all threats found, then press Control/Alt/Delete together to open the task manager. Look at the entries under the Processes tab to see if Verclsid.exe is listed. If it is Windows has detected a possible desktop shell hijacker, or you have HP Share-to-Web software installed, or a video driver that has not been updated after Windows Update patch 908531 was installed, in April. You can read about verclsid issues here.

After you have scanned for threats restart the computer in normal mode.

------------------
Bob "Wiz" Feinberg
Moderator of the SGF Computers Forum
Visit my Wiztunes Steel Guitar website at: http://www.wiztunes.com/
or my computer troubleshooting website: Wizcrafts Computer Services,
or my Webmaster Services webpage. Get Firefox Here.
Learn about current computer virus and security threats here.
Read Wiz's Blog for security news and update notices. My FAQs.

[This message was edited by Wiz Feinberg on 03 October 2006 at 03:24 PM.]

Chip Fossa · Post by **Chip Fossa** » 3 Oct 2006 4:13 pm

Or should I just let it ride, and opt for the RUN AS?

I think you said that when in the Limited Account mode you could access all things that "Administrative" could when a conflict appeared.

That was the whole idea behind keeping the PC in Limited Account; you could always access any barred things simply by clicking on RUN AS?

I'm not going to mess around tonite with this stuff, cause I've been out playing and have had a few. So this is not a good time to go PC poking around.

But I'll give it a shot, tommorrow.

Once again, Wiz, thank you,immeasurably, for your assistance.

Chipper

Chip Fossa · Post by **Chip Fossa** » 5 Oct 2006 3:34 pm

Wiz,

Just went thru the safe mode process that you laid out. I'm sure I messed up somewhere [cuz I'm not that savvy with this part of the PC] but I now have 3 accounts. The Foghorn account is still in the Limited mode, and the 3rd account, F%#khorn froze up and acted just the same way as Foghorn2. Administrator and Foghorn2 did appear in safemode, and I went into Administrator and went thru changing it from Limited to Administrator. I first tried to change Foghorn2, but the PC said you had to be an administrator. Never got around to doing any detection. This is all confusing to me.

Correct me if I'm wrong, but didn't you mention that if you are running the Limited Account and something questionable pops-up, that you will have the option to RUN AS?

I'd just as soon leave things the way they are, as long as I won't have any trouble in downloading what I need to or wish to.

I'm not too smart with this, and that just annoys me.

If it wasn't for jerks and creeps with computers, we'd all be a lot better off.

Wiz Feinberg · Post by **Wiz Feinberg** » 5 Oct 2006 3:46 pm

Chip said;

The Foghorn account is still in the Limited mode, and the 3rd account, F%#khorn froze up and acted just the same way as Foghorn2.

If I understand you correctly, you are telling me that both of your Administrator "level" accounts freeze up when you reboot into them, but the Limited account does not. If this is correct one can only assume that there is something acting at the system level, but only on administrator level accounts, that is causing the system to halt. If that something was simply a corrupted Windows file(s) all accounts would probably be impacted. If it is a bad device driver it would most likely affect admin level accounts, and if it is a virus, trojan, backdoor, browser BHO, keylogger, or other malware, it would cause more problems for an admin level account than for a Limited User account.

Deduction Watson: You either have a malware infection that manefests itself where it can actually run unimpeded, or file system corruption, or a BHO, or a bad/corrupted device driver (audio, LAN, or video).

You are correct about being able to use the Run As to do admin things. Get that computer checked by a troubleshooter!

------------------
Bob "Wiz" Feinberg
Moderator of the SGF Computers Forum
Visit my Wiztunes Steel Guitar website at: http://www.wiztunes.com/
or my computer troubleshooting website: Wizcrafts Computer Services,
or my Webmaster Services webpage. Get Firefox Here.
Learn about current computer virus and security threats here.
Read Wiz's Blog for security news and update notices. My FAQs.[This message was edited by Wiz Feinberg on 05 October 2006 at 05:06 PM.]

Chip Fossa · Post by **Chip Fossa** » 5 Oct 2006 6:53 pm

Trojan Hunter went thru, OK. But Registry Mechanic is restricted - ie. doesn't work now.

I'm gonna try all the other ANTI's, but this is a mess. This is a huge mess.

Chip Fossa · Post by **Chip Fossa** » 5 Oct 2006 9:04 pm

AVG - No Virus Found

Adaware - error retrieving update

CWShredder - OK

Spybot - No Threats

Spyblaster - OK

Windows Defender - OK, PC is running normally

Registry Mechanic - Access Denied; either from security restrictions or simultaneous use

a-Squared - 2 Traces[med. risk] 1 cookie[low risk]

Trojan Hunter - Trojan, Generic [eliminated]

CCleaner - OK

What's the point of any of this ANTI stuff?

I still have some problem after all of this?

And I now have to haul this PC to some questionable PC fix-it place?

I'm about ready to heave this thing in the nearest river or landfill. This is absolutely no fun at all. Keeping up with all these updates/upgrades all the time now, just saps the fun out of a PC. I'm serious. And too, now ya gotta go and BACK-UP everything. Give me a break.

Wiz Feinberg · Post by **Wiz Feinberg** » 5 Oct 2006 10:53 pm

Turn it off for tonight. I'll try to help you tomorrow. It is probably a matter of file corruption, except for that Trojan - Generic that was found and eliminated (hopefully). Have your Windows XP CD handy tomorrow. We're gonna try using the System File Checker/replacer (SFC) utility, if it will run in safe mode.

------------------
Bob "Wiz" Feinberg
Moderator of the SGF Computers Forum
Visit my Wiztunes Steel Guitar website at: http://www.wiztunes.com/
or my computer troubleshooting website: Wizcrafts Computer Services,
or my Webmaster Services webpage. Get Firefox Here.
Learn about current computer virus and security threats here.
Read Wiz's Blog for security news and update notices. My FAQs.

Chip Fossa · Post by **Chip Fossa** » 6 Oct 2006 5:38 am

Thanks Wiz.

Oh yeah, I tried to RESTORE to an earlier date,
but that was denied, too, as only an Administrator can access RESTORE.

I gotta go out for some time, but I'll be back later....thanks again

Chip Fossa · Post by **Chip Fossa** » 6 Oct 2006 10:53 am

I'm back Wiz; so any time you're ready, I'm ready. Thanks.

Wiz Feinberg · Post by **Wiz Feinberg** » 6 Oct 2006 11:25 am

Ok Chip;
From Safe Mode (since normal mode admin accounts are screwed up), log into the ADMINISTRATOR account, put your Windows 2000 or XP CD into the CD player. Click EXIT if it auto-starts to a splash screen. What you want is not visible on the CD. You need to run the System File Checker Utility (SFC).

Print this out or write it down.

Click on START > RUN and type this into the RUN box:

SFC /SCANNOW

This command will immediately initiate the Windows File Protection service to scan all protected files and verify their integrity, replacing any files with which it finds a problem.

The CD will spin from time to time to find and copy files. Sometimes this will proceed without user input to completion, but more often than not you will probably see several prompts to click on a "Retry" button in a popup window to locate files on the Windows XP CD. Click the Retry button each time so that the SFC can copy files from that CD drive to the system folder where they need to go, to replace corrupted files. This may take a while.

When the last of the files has been copied the SFC utility will simply disappear. When this happens you should remove the Windows CD from the CD drive and restart the computer in normal mode.

If your freeze ups were caused by corrupted system files this may repair the problem. It is the easiest repair method. Otherwise, they may be caused by a bad device driver file(s).

Let me know if this fixes it, or otherwise.

------------------
Bob "Wiz" Feinberg
Moderator of the SGF Computers Forum
Visit my Wiztunes Steel Guitar website at: http://www.wiztunes.com/
or my computer troubleshooting website: Wizcrafts Computer Services,
or my Webmaster Services webpage. Get Firefox Here.
Learn about current computer virus and security threats here.
Read Wiz's Blog for security news and update notices. My FAQs.

Chip Fossa · Post by **Chip Fossa** » 6 Oct 2006 11:32 am

OK, I think I got ya, Wiz. The Administrator Account would either be Foghorn2 or F#$khorn? - the ones freezing-up.

I don't know what a "splash screen" is, either.

Everything else I get.

Chip Fossa · Post by **Chip Fossa** » 6 Oct 2006 1:11 pm

There were 2 account options: ADMINISTRATOR &
F#$khorn in SAFE MODE. (Foghorn2 was missing)

Neither one did anything when I typed in
sfc /scannow in RUN.

Nothing moved on the screen.

Wiz Feinberg · Post by **Wiz Feinberg** » 6 Oct 2006 2:59 pm

Chip;
The ADMINISTRATOR account is just that; ADMINISTRATOR . That is the name of the account, and it is only available from Safe Mode, under Windows XP.

Did you press the ENTER key after typing in the command? I forgot to mention that - Doh!

Try this alternate method. Type this into the Run box first:

CMD

and press ENTER. A DOS Window will open. At the command prompt, inside the DOS Window, type:

SFC /SCANNOW

and press Enter

------------------
Bob "Wiz" Feinberg
Moderator of the SGF Computers Forum
Visit my Wiztunes Steel Guitar website at: http://www.wiztunes.com/
or my computer troubleshooting website: Wizcrafts Computer Services,
or my Webmaster Services webpage. Get Firefox Here.
Learn about current computer virus and security threats here.
Read Wiz's Blog for security news and update notices. My FAQs.

[This message was edited by Wiz Feinberg on 06 October 2006 at 04:01 PM.][This message was edited by Wiz Feinberg on 06 October 2006 at 04:15 PM.][This message was edited by Wiz Feinberg on 06 October 2006 at 04:16 PM.]

Wiz Feinberg · Post by **Wiz Feinberg** » 6 Oct 2006 3:18 pm

I'm off to my designated swill bin, to play for my rent and play for my supper, cause I'm above the below, and below the upper!

Catch you later Chip.

------------------
Bob "Wiz" Feinberg
Moderator of the SGF Computers Forum
Visit my Wiztunes Steel Guitar website at: http://www.wiztunes.com/
or my computer troubleshooting website: Wizcrafts Computer Services,
or my Webmaster Services webpage. Get Firefox Here.
Learn about current computer virus and security threats here.
Read Wiz's Blog for security news and update notices. My FAQs.

Chip Fossa · Post by **Chip Fossa** » 6 Oct 2006 3:32 pm

No problem. As long as your with me. I got all the time in the world. This world and other worlds.

Anyway, here's the latest:

(the DOS report came back) - Windows File Protection could not initiate a scan of protected system files.
The specific error code is 0x000006ba [The RPC server is unavailable]

Later Wiz, and thanks again.

Good luck on your gig. Have fun.[This message was edited by CHIP FOSSA on 06 October 2006 at 04:56 PM.]

Wiz Feinberg · Post by **Wiz Feinberg** » 6 Oct 2006 9:12 pm

Stupid Trusted Root Certificates strike again. You may be missing certain trusted files known as Root Certificates. You can download Root Certificates via "Custom" Windows Updates, but only from an Administrator level account. Arrggg. You Admin accounts are messed up. Me thinks tomorrow we try to reinstall Windows Chipper.

Have your Windows 2000/XP Cd and Product Key Code handy (it may be on a Hologram sticker on the side of your computer tower). You may want to read this Microsoft Knowledge Base article and print it out for reference for use in reinstalling Windows.

For this procedure to work you must establish that your computer can boot from a bootable Windows CD. It's easy enuf to find out. Insert the Windows XP CD and restart the computer. If it offers to boot from the CD press any key on the keyboard and see if the CD starts up. If so we're good to go tomorrow. If not, you will need to enter "Setup" (BIOS) to set the first boot device to be the CD drive). Hopefully this is already setup as such.

Later.

------------------
Bob "Wiz" Feinberg
Moderator of the SGF Computers Forum
Visit my Wiztunes Steel Guitar website at: http://www.wiztunes.com/
or my computer troubleshooting website: Wizcrafts Computer Services,
or my Webmaster Services webpage. Get Firefox Here.
Learn about current computer virus and security threats here.
Read Wiz's Blog for security news and update notices. My FAQs.

Chip Fossa · Post by **Chip Fossa** » 7 Oct 2006 7:02 am

Wiz, at first the XP CD did not come up. So I looked at the CD case and it said DVD on it. So I put it in the DVD drive and it booted up and said:
System Restore Menu/Windows XP
1. Restore Windows XP
2. Boot to command prompt from CD-ROM

please select 1. or 2.

The PC is an emachines T2984, 80GB, 1000+MB,
Celeron 340 D processor

I read that MS Knowledge Base link.

This all sounds complicated and that I may lose a lot of stuff. I have no clue how to back registry files, and WHICH ONES?

I don't have any decent backup hardware, except CDs.

This sounds almost like a re-format.

It advises to go off-line. What if I hit an impass and gotta ask you a question or 2?

Would I lose MP3 files I have in My Documents/My Music?

Hard to believe by me trying to change over from Administrator to Limited [in the beginning] accounts that all this has happened.

If I do this, I couldn't today - I have to get back to a job.

Wiz Feinberg · Post by **Wiz Feinberg** » 7 Oct 2006 7:54 am

Chip;
Apparently, your CD is a custom combination system restore disk and operating system combination. That is not what I had in mind. The method described in the Microsoft Knowledge Base article involves re-installing Windows on top of itself, known as an in-place upgrade. The only items lost by doing that are updates you received via Windows Updates or Office Updates. Those need to be downloaded afresh after an in-place upgrade. Sometimes you have to re-activate Windows as well, but not always.

I'm sorry that you are having problems with your computer, but they were not caused by your creating a new Admin account and reducing your normal account to Limited. The problems were already present. I create and change accounts frequently and never experience freeze ups after changing permissions. Your computer is in need of servicing and re-installing Windows, as an in-place upgrade, is a good option. You should try to backup your valuable files onto CD-Rs anyway.

Note that if you do use the manufacturer's Restore feature you will lose all data on the disk and it will be reset to factory condition, like the day you took it home. If you are allowed to bypass the restore function and go into Windows Setup alone you can do the in place upgrade. You might want to call eMachines support about this question first.

------------------
Bob "Wiz" Feinberg
Moderator of the SGF Computers Forum
Visit my Wiztunes Steel Guitar website at: http://www.wiztunes.com/
or my computer troubleshooting website: Wizcrafts Computer Services,
or my Webmaster Services webpage. Get Firefox Here.
Learn about current computer virus and security threats here.
Read Wiz's Blog for security news and update notices. My FAQs.

Chip Fossa · Post by **Chip Fossa** » 7 Oct 2006 11:27 am

Wiz,

I got thru the job earlier than I thought, and so I'm back. I appreciate all the time you've put in here.

That's dismaying news. Backing-up is gonna take me forever, probably. Are those plug-in storage mini disks [they go in the slots in the face of the PC - SD/MMC/SM/MS-PRO etc.] any better than burning a bunch of CDs?

And "If you are allowed to bypass the restore function and go into Windows Setup alone you can do the in-place upgrade" - how would I know if I could bypass the restore function?
Where would I look? Does this come from emachines support?

Did a virus or malware cause this mess?

Can't you just replace or delete/reinstall that 'specific error code' 0x000006ab?

I did have a Maxtor stand alone 40GB storage unit, but it barely lasted a year and crapped out. That really bugged me, too.
Since I 1st got a PC back in Aug '98, I haven't had very good luck with them; I have to say. Sooner or later, they all dogged me, and this one is no different. I'll bet Mac owners don't have all this BS.

Wiz Feinberg · Post by **Wiz Feinberg** » 7 Oct 2006 11:38 am

I just read the user manual for your model and they make it quite clear that using the Restore CD/DVD will destroy any data on the disk and reinstall windows and all original applications to day1 condition. There is no mention of using the Restore disk to just reinstall Windows.

I recommend that you take your computer to a qualified computer store that does repairs and have them reinstall Windows as an in-place upgrade, using their own Windows XP CD. Your computer case should have the hologram sticker with your genuine Windows product key, should it be needed for re-activation.

Make a list of what all is wrong, including the problem running the SFC and the freeze ups in admin accounts. Have Windows repaired as an in-place upgrade, then rerun Windows Updates to the current patch level and have them scan for malware and viruses. This will probably cost you around $100 to $125 shop charges.

A word of warning goes out to members who are thinking about saving money on a new computer by purchasing an eMachines, HP or other brand that sells for a very low retail price. You probably will not get a Windows XP CD with the computer. Most manufacturers are now placing Windows installation files, drivers and applications in a hidden partition on the hard drive, which is accessed by booting from a restore CD. Others provide what Chip has, which is a Restore DVD that includes Windows, but is not usable to reinstall Windows as a repair option, without destroying all data.

Most cities have computer stores where they build and sell computers using off the shelf parts and will provide you with a licensed copy of Windows and separate driver disks for the installed devices and motherboard.

------------------
Bob "Wiz" Feinberg
Moderator of the SGF Computers Forum
Visit my Wiztunes Steel Guitar website at: http://www.wiztunes.com/
or my computer troubleshooting website: Wizcrafts Computer Services,
or my Webmaster Services webpage. Get Firefox Here.
Learn about current computer virus and security threats here.
Read Wiz's Blog for security news and update notices. My FAQs.

[This message was edited by Wiz Feinberg on 07 October 2006 at 12:40 PM.][This message was edited by Wiz Feinberg on 07 October 2006 at 12:57 PM.]

Wiz Feinberg · Post by **Wiz Feinberg** » 7 Oct 2006 12:02 pm

<BLOCKQUOTE>quote:<HR>Did a virus or malware cause this mess?

Can't you just replace or delete/reinstall that 'specific error code' 0x000006ab?

<HR></BLOCKQUOTE>

1: Yes
2: No

Chip Fossa · Post by **Chip Fossa** » 7 Oct 2006 12:20 pm

So that malware/virus must have snuck in the back door. The very thing about using LIMIT vs ADMIN accounts that this post is about, right?

Once I get it straightened out, I had better still keep it in LIMIT. If need be, is there a way to switch accounts without rebooting?

Why do these PC companies hide stuff on the OEM CDs? Why can't they just give you the dang Windows XP CD? What's the big deal? All PC's have their own specific KEY code anyway.

Windows 98 [Gateway PC] and HP Millenium PC both had those stupid specific CDs, that can only used on that model PC.

Just another thing to drive you nuts.

Wiz, I'm just gonna print out a few critical pages from this thread and show it to the PC shop. I gotta make sure they know the difference between REFORMAT and IN-PLACE.

What about those slots in the fron of the PC?
Are those for little mini storage cards? Some have a huge storage capacity, right?

Wiz Feinberg · Post by **Wiz Feinberg** » 7 Oct 2006 12:26 pm

Chip asked; <BLOCKQUOTE>quote:<HR>What about those slots in the fron of the PC?
Are those for little mini storage cards? Some have a huge storage capacity, right?<HR></BLOCKQUOTE>
Those slots are for digital camera cards. I think what you might want is a USB 2.0 connector on the front? You can buy a 1 or 2 GB USB Thumbdrive storage device, plug it in (it is assigned a drive letter), save items to it by drag and drop, or copy and paste, then click on the Eject Device icon in the system tray area to Stop the device, then remove it for safe keeping.

Thumbdrives are sold everywhere digital devices are sold, including drug stores.

------------------
Bob "Wiz" Feinberg
Moderator of the SGF Computers Forum
Visit my Wiztunes Steel Guitar website at: http://www.wiztunes.com/
or my computer troubleshooting website: Wizcrafts Computer Services,
or my Webmaster Services webpage. Get Firefox Here.
Learn about current computer virus and security threats here.
Read Wiz's Blog for security news and update notices. My FAQs.

Chip Fossa · Post by **Chip Fossa** » 7 Oct 2006 12:33 pm

That's what I was getting at, Wiz.

Can you use them over and over, or are they a one-shot deal? ie. - get everything on there all at once.