Virus is trying to install immediately after logon and prompting for admin approval
Posted on 2015-02-17
One of my users clicked on an attachment with a virus. She didn't have admin privileges, but the program tries to install constantly until I kill the process. It has set itself to the highest priority and stops all the other apps. I can get the task manager up just long enough to kill the process after closing the popup several times.
What should I do? The command that it tries to run (via SysWow64\cmd.exe) is a file called msbom,exe in the users Roaming profile.
I don't think the virus was actually installed, but the install package was and it is making the PC unusable (until I kill the install process).