Solved

Shutdown and restart buttons not working after virus attack

Posted on 2012-03-15
4
555 Views
Last Modified: 2013-11-22
I have a user who recently got a virus (one of those ones that keep popping up saying your computer is infected, and click here to buy the virus removal software) I cleaned the virus and now scans are coming up clean, but the shutdown and restart buttons don't work. Even the restart now button on the automatic updates doesn't work. I press the buttons but nothing happens, the computer doesn't freeze or anything (the user can continue working normally), but it never shuts down. How can I fix this without wiping the hard drive and reinstalling Windows XP? I'm reluctant to reinstall because they have some older programs on there that they use alot, but no longer have the software for.

Thanks,
0
Comment
Question by:FreeRangers
  • 2
  • 2
4 Comments
 
LVL 28

Accepted Solution

by:
jhyiesla earned 500 total points
ID: 37725097
How did you clean it?  if you didn't use Malwarebytes, make sure you do. If you did use MWB, my guess is that it did some damage; potentially at the registry level.

So, a couple of things.  Have you tried logging on with another account besides the users?  Sometimes damage is limited to the profile of the user logged on at the time.  If you can and the problem goes away, you need to save off all user related info and wipe that user account and have them log on to make a new one.

If it's across all users then I'd first check power policies and perhaps even reset them. Then check gpedit.msc looking for any settings in there that have been enabled or disabled; by default I think that all those settings are set to Not Configured.
0
 

Author Comment

by:FreeRangers
ID: 37725366
I didn't use MWB, I used Kaspersky which I have always trusted. I was able to get it to shutdown by issuing a remote shutdown command from the server. But it's taken over half an hour and still says windows is shutting down. I haven't tried using another account on the computer yet (I'll do that when\if the computer finally shuts down and reboots)
0
 
LVL 28

Expert Comment

by:jhyiesla
ID: 37725545
I think that Kaspersky is a fine product, but I'd still run MWB against it. We've found that it will find and remove just about anything. Doesn't mean that the infection didn't damage stuff, but at least it's gone so that we can go about fixing the left over problems.
0
 

Author Comment

by:FreeRangers
ID: 37725615
I recreated the user profile and all is well now. It looks like the virus just damaged that specific profile. Thanks.
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

These are on the increase and getting more common these days. Users who use the Google search engine may complain of having their search redirected to unwanted sites, regardless of what browser is used. This happens when the system is infected with…
UPDATE - 6/15/2011 Added support for Release Update 6 Maintenance Patch 2 Point Patch 1 (RU6 MP2 PP1). Fixed a defect in the username field that was hard-coded to look for a specific domain (left over code from testing). This release will be the …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question