Link to home
Start Free TrialLog in
Avatar of CSHTech
CSHTechFlag for United Kingdom of Great Britain and Northern Ireland

asked on

Virus infected - cannot install antivirus "the system administrator has set policies to prevent this installation"

(Searched the knowledgebase but didn't find the solution).

I have a colleague's laptop which is infected with the Antivirus XP 2008 spyware and the Gaggle.D/Israfel.vbs worm (and probably a lot more too - they didn't have AV on the laptop and downloaded from internet).

The error message "the system administrator has set policies to prevent this installation" is preventing me from installing an AV package as well as opening the registry editor. This is so in Safe Mode as well as the Safe Mode administrator. As its XP Home there isn't the gpedit.msc snap-in and I'm hitting a brick wall.

Any help appreciated.

C
ASKER CERTIFIED SOLUTION
Avatar of russell124
russell124
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
http://www.malwarebytes.org/ is good for removing spyware, (if it is spyware)
I would remove the harddrive and install it in a protected machine and then Run a scan with Malwarebytes on the drive as suggested above Along with an antivirus program like Kaspersky.
Avatar of CSHTech

ASKER

Thanks for the quick responses.

I'll try the above and get back to you.

Regards

C
Avatar of CSHTech

ASKER

Thanks to your help, I've been able to remove the offending services which messed up the security policies and registry entries, prevented me installing AV software and opening the Registry Editor. Kaspersky is now disinfecting (2519 files so far of an email worm).
Many thanks.