partitions?

[placou 1968]

lets say my computer is turned off. i turn on computer, and wait on the boot up process.
after boot up i have a screen that say,s: "owner" with an icon and an empty white box to enter a password.

under "owner" icon i have another icon that says "guest". (there is no place for password for guest)

if i enter the password for "owner" and point the mouse an click the owner icon, i go to the owners desktop and i find shortcut icons on the desktop.

if i point the mouse and click on "guest" i go to the guest desktop, which only has an icon for internet access.

when i sign in as "owner" i cant use, combo fix, windows malicious software removal tool, and i cant use microsoft fix it, the "fix it" has an icon of a man holding a tool in one hand, and gives you the option of "use fix it" or "repair yourself".

i chose to use "fix it" as it is suppose to scan and fix problems automaticaly with most anything associated with windows.

when i try to use wmsrt, microsoft fix it or combofix (i stayed away from combo fix after reading your post), i recieve a message stating: you have insufficient rights to access this program, you may need to log in as administrator, or contact your computer administrator.

if i log out of "owner", and into "guest" account i can only use the internet access icon (it all thats there), which is ok if it is supposed to be there.


now for the safe mode question: when i enter safe mode with networking, i see the safe mode words on each corner of monitor.
i now have the option (in safe mode with networking) to access "administrator" with a chess piece icon and no password needed.
when i click the administrator icon im taken to the admin. desktop and i have no icons or access to any programs so, im unable to comply with the error message asking me to log in as admin. to get priviledge to use the above mentioned programs.

(still in safe mode, just after boot up) i have another option: just under the admin. icon i have "owner" icon with blank space for password. if i log out of admin. and access "owner" account i have the same icons as "owner" that we discussed above, the only difference is im in safe mode with networking.

when i try to use wmsrt, microsoft fix it, combo fix (im staying away from combo fix), i get the same message as i mentioned above pertaining to "not haveing sufficient rights or prividleges to access the program, log in as admin., or contact your computer administrator"

the reason for wmsrt, microsoft fix it is that i have an account on here i didnt create, i think i originally said guest but its "owner" account.

windows xp home, 2003. mse, mbam, hmanpro all updated very regular (daily)
emachine with extra stick of memory added, (i dont know what a stick of memory means)
gateway 2 wire modem connected to desktop computer.

i hope i came up with a better description than before, i dont know what else to tell you that may help.

i originally wanted to know if i was cleaning the entire computer when running these programs, but i first have to be able to accessthem under administrator

[Anupam]

Placou, if I may, I will give you an advice that please do not get paranoid. It will only affect you in a bad way, and achieve nothing. Its very easy to get paranoid in the case of computers, and internet, because there are many many things you do not know. A little paranoia is a good thing to keep you safe, but over that, it just becomes unnecessary fear, and that is no good at all.

The Owner account is set up by default, when XP was first installed on your PC. There are 3 accounts by default... Administrator, Guest, and a user account, mostly named Owner.

So, there is no need to fear that the Owner account was not setup by you. A user account has to be set up initially, and for XP Home, its generally Owner. So, let go of your worries for that.

Now, coming to Administrator. On XP Home, you cannot log in to Administrator account in the normal mode. The only way to log in as Administrator is in the Safe Mode. You can uninstall programs, and also run some programs in the Safe Mode, but, some programs do not run in Safe Mode.

So, to run programs as Administrator, you can do two things.
First, create another account which will have Administrator privileges. You will have to log in to Admin account via Safe Mode to do this, since Admin only can create accounts.

To create accounts, or to change account types, please see these links :

http://support.microsoft.com/kb/279783

http://www.dummies.com/how-to/conten...indows-xp.html

http://www.computerhope.com/issues/ch001097.htm

Or, second method would be to run programs as Administrator, from the Owner account. You can do this by pressing Shift, and then right clicking on the program, and then choose "Run as...". Given here too :

http://www.microsoft.com/resources/d....mspx?mfr=true

[Anupam]

Now that you know that Owner account is created since the Windows installation, so you don't need to run the programs that you have been trying to run for "cleaning" the computer.

Running Fix It, or ComboFix won't clean the computer, or other things.

There are different solutions for different problems. You cannot just fire up any program you think will do the job, and expect it to solve your problems.

ComboFix is an advanced program to deal with malware. You cannot decide to use it for simple matters such as this one.

There are several Fix It solutions provided by Microsoft for different purposes. Were you going to run them all one by one? Or, were you going to run any particular one?

My suggestion is not to run just any program by your choice. Please consult someone before making decisions to run programs to solve problems. Since you know less about computers, its important that you do so as advised. Otherwise, problems can be created more than you intend to solve.

[placou 1968]

i was able to capture a picture using print screen. the picture is of mse capturing the following

Trojan:JS/Redirector.HQ alert level: severe date:12-26-2011 action: removed

description- this program is dangerous and executes comman an attacker

recommended action- remove this software immediately


ITEMS:
file:C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\P1YLMECO\index {1}.htm

-----------------------------------------------------------------------------------------------------------------------

i also captured the following using print screen. this is very near the same time as the above trojan issue.

IE Performance and Safety
maintenance tasks are finished
Issues found;
Data Execution Prevention disabled fixed (check mark green color)
microsoft fix it

this is where it started, and the "Data Execution Prevention disabled" i have seen numerous times, and it gets "fixed" when i use performance and maintenance.

with regard to DEP disabled, i can run a scan with performance and maintenance and it will show up almost every time.

i have thumb nail pictures captured and there stored in "paint", and i dont know how to place them where they can be seen, i was able to get to the box asking to enter your url and i tried but thats over my head, so i just repeated them word for word here.

i hope this is helpfull

[Anupam]

Which browser do you use? Are you using Internet Explorer? If yes, which version?

If you are still using an older version of IE... I will advise you to stop using it, and switch to another browser.

Since you are on XP, and IE9 won't run on XP, I suggest that you do switch to another browser like Firefox, or Chrome.. any that you like.

It seems like malware might be entering via the browser.

Have you done a total scan of your system recently? Do a total system scan with MSE and MBAM. See if they find anything. And stop using IE.

[placou 1968]

my system, windows xp home. the secondary logon was not enabled and i was becoming terribly confused when trying to use "run as".

now, i have the answer to the 1st post asking how to gain admin. rights to gain access to all users in order to use scans to clean each user account as the administrator.

i was,nt able to articulate very well verbally what i was attempting to do, as i am unfamiliar with most of the computer terminology, but if you expierience this issue theres alot of information in the links provided by Anupam, and the most helpfull link in my case took me to "how to enable and use the "run as" command when running programs in windows" there you will be given an option to use microsoft "fix it" 50404, (i wasnt able to access it) or fix it myself.

i printed it and found it fairly simple to "fix it myself" and im a novice.

since i have utilized the instructions for the fix, and applied the scan, i have found some low level threat items that have been removed.

Thanks again Anupam, im glad you have patients for people such as i.

[Anupam]

Glad to hear your problems are solved, and glad to be of help. Welcome .