cancel
Showing results for 
Search instead for 
Did you mean: 
unboringuy
Level 7

Trojan or Virus Still Present After System Restore?

Over the weekend I became aware of a Trojan infection (False Warning) asking me to download "their" product to correct the problem.  Previously I had used an antispyware product to take care of a similar problem.  This one, additionally removes virtually all applications from the desktop, shows the c: drive as empty, and gives a black background screen.  Re-booting caused the "blue screen of death" and the system would not boot into safe mode.  After additional research, I know how to work around that in the future.

In any event, when McAfee reported that it had handled removal of a Trojan, and no further action was necessary, it was wrong.  A couple of antispyware products indicated they had resolved the problem, but they had not.  So I restored my system, and it ALMOST is back to normal.  Strangely, it will not let me download things that require administrator rights, even when the user has administrator rights.  For example, it won't let me use Windows Updater at all.  It won't let me manually download security enhancements for Windows XP.  It won't let me install Malwarebytes, for example.

Any suggestions?

0 Kudos
13 Replies
exbrit
Level 21

Re: Trojan or Virus Still Present After System Restore?

Moved to Malware Discussions > Home User Assistance.

You may have to temporarily disable System restore to get rid of certain infections if they are lodged in one or more of the restore points.

Also FYI Malwarebytes can be downloaded, installed, updated (important) and run all in 'Safe Mode with Networking' - if you can get into that mode.

Tap F8 repeatedly while booting up and choose that option, usually number 2 on the ensuing menu.

Use only the free version of MB.

0 Kudos
unboringuy
Level 7

Re: Trojan or Virus Still Present After System Restore?

Did all of those things, and still can't get MB to install.  When it gets to the end of the install, I get an "access denied" error, and then it uninstalls.  I do have Antispyware installed, and when I ran it this morning (after being clean last night) it showed 2 Trojans; Gen-IExplorer [Fake] and Gen-PEC, which it removed.  Help, please.

0 Kudos
exbrit
Level 21

Re: Trojan or Virus Still Present After System Restore?

You can't get MWB to install in Safe Mode with Networking?  Try this when downloading, use the "Save as' to your desktop and rename it in the process to 12345.exe or similar.

0 Kudos
unboringuy
Level 7

Re: Trojan or Virus Still Present After System Restore?

No, MWB won't install in safe mode with networking.  The download seems to work fine, but the install aborts at the very end with an error message saying "access denied."  The may be similar to the computer's refusal to permit me to download certain other files (Windows Updater, Windows security updates, etc.)  Those report that administrator rights are required (even though the user has administrator rights).

I'll try to change the filename, but I doubt that will work, because the file seems to download fine, it just won't install properly.

0 Kudos
exbrit
Level 21

Re: Trojan or Virus Still Present After System Restore?

See if it will install from the changed name file.

0 Kudos
exbrit
Level 21

Re: Trojan or Virus Still Present After System Restore?

If you are using Vista or Windows 7 right-click the .exe and select 'Run as Administrator'.   A user with Adminstrator status is not quite as high as the actual Administrator account.

0 Kudos
unboringuy
Level 7

Re: Trojan or Virus Still Present After System Restore?

Sorry, but I'm using Windows XP, SP3.

0 Kudos
exbrit
Level 21

Re: Trojan or Virus Still Present After System Restore?

I believe that right-click command also exists in XP - I'm not using it at the moment so wasn't sure.,

0 Kudos
unboringuy
Level 7

Re: Trojan or Virus Still Present After System Restore?

That didn't work.  When I try to do things that require Administrator rigfhts, for example to initiate MS Windows Update, I get the following error message:

                                                                                                                                                                                                                            [Error number: 0x8DDD0002]

To install updates from this website, you must be logged on as an administrator or a member of the Administrators group on

your computer.  If you use Windows XP, you can see if you are an administrator by going to User Accounts in Control Panel.

Note:  If your computer is connected to a network, network policy settings might also prevent you using this website.  Contact

your system administrator for help with updates.

I am an administrator, and the computer is hooked up to a wireless network.  Interestingly, my other computer hooked up to this network, which did not have the Trojan, is also having strange connectivity and downloading problems now.

0 Kudos