Shutdown and restart buttons not working after virus attack

I have a user who recently got a virus (one of those ones that keep popping up saying your computer is infected, and click here to buy the virus removal software) I cleaned the virus and now scans are coming up clean, but the shutdown and restart buttons don't work. Even the restart now button on the automatic updates doesn't work. I press the buttons but nothing happens, the computer doesn't freeze or anything (the user can continue working normally), but it never shuts down. How can I fix this without wiping the hard drive and reinstalling Windows XP? I'm reluctant to reinstall because they have some older programs on there that they use alot, but no longer have the software for.

Thanks,
FreeRangersAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

jhyieslaCommented:
How did you clean it?  if you didn't use Malwarebytes, make sure you do. If you did use MWB, my guess is that it did some damage; potentially at the registry level.

So, a couple of things.  Have you tried logging on with another account besides the users?  Sometimes damage is limited to the profile of the user logged on at the time.  If you can and the problem goes away, you need to save off all user related info and wipe that user account and have them log on to make a new one.

If it's across all users then I'd first check power policies and perhaps even reset them. Then check gpedit.msc looking for any settings in there that have been enabled or disabled; by default I think that all those settings are set to Not Configured.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
FreeRangersAuthor Commented:
I didn't use MWB, I used Kaspersky which I have always trusted. I was able to get it to shutdown by issuing a remote shutdown command from the server. But it's taken over half an hour and still says windows is shutting down. I haven't tried using another account on the computer yet (I'll do that when\if the computer finally shuts down and reboots)
0
jhyieslaCommented:
I think that Kaspersky is a fine product, but I'd still run MWB against it. We've found that it will find and remove just about anything. Doesn't mean that the infection didn't damage stuff, but at least it's gone so that we can go about fixing the left over problems.
0
FreeRangersAuthor Commented:
I recreated the user profile and all is well now. It looks like the virus just damaged that specific profile. Thanks.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.