Can not run Virus protection programs 1

[hobbytech]

I'm having problems with my computer. It will not run any type of virus protection or spyware program. I used/try using Ad-aware, Malwarebytes, Spybot- Search & Destory and I even try loading Microsoft Windows Malicious Software Removal Tool. The programs either stop in the middle of running or does not run at all. IE no longer loads. My system consists of : Duron 1.8 CPu, 756M Memory, Vista View Saber DA-1N1 PCI tv Tuner,500g HD(4 partitions). System Restore does not work either. One type of error states that I do not have administrare priviledge(I'm the only user and administrator)

 

[goombawaho]

I would boot into safe mode and use this registry restoring batch file to restore your rights to things that you might be locked out of. Paste this into a notepad document. Save it and then make sure it's named .BAT with no .TXT Put it on the desktop and then boot into safe mode and run it.

@ECHO OFF
ECHO Working ..........

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddRemovePrograms /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddRemovePrograms /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoRemovePage /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoRemovePage /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddPage /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddPage /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoWindowsSetupPage /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoWindowsSetupPage /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddFromCDorFloppy /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddFromCDorFloppy /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddFromInternet /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddFromInternet /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddFromNetwork /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddFromNetwork /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoServices /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoServices /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoSupportInfo /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoSupportInfo /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer /v NoControlPanel /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\system /v DisableRegistryTools /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\system /v DisableTaskMgr /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoControlPanel /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoWindowsUpdate /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\system /v DisableRegistryTools /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\system /v DisableTaskMgr /t REG_DWORD /d 0 /f >NUL

REG Delete "HKCU\Software\Policies\Microsoft\internet explorer\control panel" /f >NUL

REG Delete "HKCU\Software\Policies\Microsoft\internet explorer\restrictions" /f >NUL

Exit




Next, I would try to install and run MBAM in safe mode and run a full scan and see what it finds. Try renaming the installer to dumbo.exe (or whatever) if it doesn't want to let you install it. Download it onto a memory stick on another computer and transfer it to your computer in safe mode.


If you don't make any progress with the above 2 items, I would recommend putting that hard drive in another PC as a slave drive and running an MBAM or A/V scan on it that way. The other alternative is to create and configure a BART PE CD that has the Mcafee plug-in and then boot from it and run a scan of the hard drive. Option 1 is easier IF you have access to a 2nd computer.

 

[Noway2]

Not sure what has gone awry to bugger things up so bad. Is a clean reformat and re-install is out of the question? It may be the easiest approach. If this is not an option, if you find that you are locked out by some form of mal-ware, which is a possibility, sometimes the utility "hijack this" which operates at a low level can get in there and let you remove things.

 

[kjv1611]

hobbytech,

Did you get this resolved, or where do you stand on this? Or did the malware get you too?

--

"If to err is human, then I must be some kind of human!" -Me

 

[hobbytech]

Still working on it. Searching PC World for additional help.

 

[Lemon13]

get a bootable cd/dvd like avira rescue disk

http://www.free-av.com/en/products/12/avira_antivir_rescue_system.html

burn it on cd, boot from it and ..........

M. Knorr

MCSE, MCTS, MCSA, CCNA