Solved

Shutdown and restart buttons not working after virus attack

Posted on 2012-03-15
4
560 Views
Last Modified: 2013-11-22
I have a user who recently got a virus (one of those ones that keep popping up saying your computer is infected, and click here to buy the virus removal software) I cleaned the virus and now scans are coming up clean, but the shutdown and restart buttons don't work. Even the restart now button on the automatic updates doesn't work. I press the buttons but nothing happens, the computer doesn't freeze or anything (the user can continue working normally), but it never shuts down. How can I fix this without wiping the hard drive and reinstalling Windows XP? I'm reluctant to reinstall because they have some older programs on there that they use alot, but no longer have the software for.

Thanks,
0
Comment
Question by:FreeRangers
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 28

Accepted Solution

by:
jhyiesla earned 500 total points
ID: 37725097
How did you clean it?  if you didn't use Malwarebytes, make sure you do. If you did use MWB, my guess is that it did some damage; potentially at the registry level.

So, a couple of things.  Have you tried logging on with another account besides the users?  Sometimes damage is limited to the profile of the user logged on at the time.  If you can and the problem goes away, you need to save off all user related info and wipe that user account and have them log on to make a new one.

If it's across all users then I'd first check power policies and perhaps even reset them. Then check gpedit.msc looking for any settings in there that have been enabled or disabled; by default I think that all those settings are set to Not Configured.
0
 

Author Comment

by:FreeRangers
ID: 37725366
I didn't use MWB, I used Kaspersky which I have always trusted. I was able to get it to shutdown by issuing a remote shutdown command from the server. But it's taken over half an hour and still says windows is shutting down. I haven't tried using another account on the computer yet (I'll do that when\if the computer finally shuts down and reboots)
0
 
LVL 28

Expert Comment

by:jhyiesla
ID: 37725545
I think that Kaspersky is a fine product, but I'd still run MWB against it. We've found that it will find and remove just about anything. Doesn't mean that the infection didn't damage stuff, but at least it's gone so that we can go about fixing the left over problems.
0
 

Author Comment

by:FreeRangers
ID: 37725615
I recreated the user profile and all is well now. It looks like the virus just damaged that specific profile. Thanks.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If your system is showing symptoms of browser hijacks or 'google search redirects' check out my other article (http://rdsrc.us/u3GP7A) first and run the tool TDSSKiller (http://rdsrc.us/GDBBs4) to get rid of the infection. Once done, and if the …
HOW TO REMOTELY CLEAN MEROND.O WITH ESET SILENTLY PROBLEM       If you have the fortunate luck to contract the Merond.O virus on your network, it can be quite troublesome to remove as it propagates to network shares on your network. In my case, the …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

687 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question