Solved

Shutdown and restart buttons not working after virus attack

Posted on 2012-03-15
4
546 Views
Last Modified: 2013-11-22
I have a user who recently got a virus (one of those ones that keep popping up saying your computer is infected, and click here to buy the virus removal software) I cleaned the virus and now scans are coming up clean, but the shutdown and restart buttons don't work. Even the restart now button on the automatic updates doesn't work. I press the buttons but nothing happens, the computer doesn't freeze or anything (the user can continue working normally), but it never shuts down. How can I fix this without wiping the hard drive and reinstalling Windows XP? I'm reluctant to reinstall because they have some older programs on there that they use alot, but no longer have the software for.

Thanks,
0
Comment
Question by:FreeRangers
  • 2
  • 2
4 Comments
 
LVL 28

Accepted Solution

by:
jhyiesla earned 500 total points
Comment Utility
How did you clean it?  if you didn't use Malwarebytes, make sure you do. If you did use MWB, my guess is that it did some damage; potentially at the registry level.

So, a couple of things.  Have you tried logging on with another account besides the users?  Sometimes damage is limited to the profile of the user logged on at the time.  If you can and the problem goes away, you need to save off all user related info and wipe that user account and have them log on to make a new one.

If it's across all users then I'd first check power policies and perhaps even reset them. Then check gpedit.msc looking for any settings in there that have been enabled or disabled; by default I think that all those settings are set to Not Configured.
0
 

Author Comment

by:FreeRangers
Comment Utility
I didn't use MWB, I used Kaspersky which I have always trusted. I was able to get it to shutdown by issuing a remote shutdown command from the server. But it's taken over half an hour and still says windows is shutting down. I haven't tried using another account on the computer yet (I'll do that when\if the computer finally shuts down and reboots)
0
 
LVL 28

Expert Comment

by:jhyiesla
Comment Utility
I think that Kaspersky is a fine product, but I'd still run MWB against it. We've found that it will find and remove just about anything. Doesn't mean that the infection didn't damage stuff, but at least it's gone so that we can go about fixing the left over problems.
0
 

Author Comment

by:FreeRangers
Comment Utility
I recreated the user profile and all is well now. It looks like the virus just damaged that specific profile. Thanks.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

For those of you actively in the Malware fightling business, we now have available an amazing new tool in the malware wars (first recommended to me by rpggamergirl (http://www.experts-exchange.com/M_3598771.html), the Zone Advisor for the Virus and …
It is only natural that we all want our PCs to be in good working order, improved system performance, so that is exactly how programs are advertised to entice. They say things like:            •      PC crashes? Get registry cleaner to repair it!    …
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now