locked
Computer Hacked: How do I restore permissions for Win7? RRS feed

  • Question

  • I found quite a bit of compromised legitimate programs that are being abused, and used to collect my personal information. 

    When I try to remove the programs (compromised Networking programs), my computer tells me that I do not have sufficient permissions to delete, and require authorization from "TrustedInstaller". I'm guessing that it's the System32 registry files that have been altered, and am wondering if I can restore permissions and make myself the administrator again, without have to do a useless reformat.

    How do I return permissions to myself, in order to delete files that I do not have permission to?

    • Moved by Hemendra Agrawal Friday, September 13, 2013 5:42 AM Hope this could be right forum for this issue
    Friday, September 13, 2013 2:53 AM

Answers

  • Hi,

    For this issue, please run the following command, and try to delete the programs again.

    secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose

    For more information, you can refer to the following KB:

    (This article is for windows vista but it also works for windows 7)

    How do I restore security settings to a known working state?

    http://support.microsoft.com/kb/313222 

    Regards,

    Yolanda

    • Proposed as answer by Balaji M KundalamMVP Monday, September 16, 2013 9:45 AM
    • Marked as answer by Cloud_TS Monday, September 23, 2013 12:54 PM
    Friday, September 13, 2013 11:51 AM