My comp has been infected by a virus which had disabled many of my administrator rights.How do I set it right?

Question

My NOD 32 antivirus did not detect that virus when i jacked in my friend's Pen Drive. This is the only attack which it has not detected. That virus has removed Folder Options from Control Panel & from the tools section in explorer.It had also disabled the Task Manager & pops a dailog saying Task manager dissabled by administrator where as i am the administrator & there is no other profile.It has also done the same thing with my registry editor. i am not able to access my hidden files due to this. Logging into my comp in Safe Mode is also of no help. Please suggest what to do. I do not have a net connection @ my house. I update my NOD 32 by offline update files from friend. I run genuine Windows XP SP2 & genuine NOD32 antivirus & free version of AVG anti-spyware.(Is there any solution like the one for heap41a virus?)

Answer 1

Some information for you.

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_AHKHEAP.A&VSect=T

This one has a removal tool.
http://swik.net/heap41a
*********************************
I don't understand why running your antivirus software in Safe Mode didn't remove it - but then again, I don't know anything about NOD32. I don't think the free AVG is all encompassing. I have Norton.

I wish you would take the time to go into Safe Mode once again and run all antivirus and antispyware. You can also download Ad-aware and Spybot.
Free Ad-Aware:
http://www.lavasoftusa.com/software/adaware

Free Spyware:
http://spywarebot.com/?hop=dsuponov
***************************************
If you are successful, try for a Windows Repair.
WindowsXP System Restore – excellent link – explains with graphics
http://www.microsoft.com/windowsxp/using/helpandsupport/getstarted/ballew_03may19.mspx

WindowsXP Repair Tools
http://www.webtree.ca/windowsxp/repair_xp.htm#How%20to%20Repair%20Windows%20XP%20by%20Installing%20Over%20top%20of%20Existing%20Setup:

http://www.download-download-this.com/4.html?OVRAW=Windows%20Installer%20corrupted&OVKEY=window%20installer&OVMTC=advanced
***********************
Then go into Users, in the Control Panel, and reset.

Answer 2

There is no easy definite solution to your problem. If you lack administrative rights, then you cannot install any anti virus programs or anti spyware programs. The best way to go is to safely backup your important documents and reformat your computer. Next time, get Kaspersky Anti Virus which has a high detection rate, comparable to Norton and McAffe. You might also be interested in sandbox software such as sandboxie, which is found in sandboxie.com . Most Anti Virus softwares do not come as a portable edition so there isn't much help there. If you know the specific name of the virus, we could help you more.

Answer 3

Do you have a restore program in your control panel? If not, reboot in SAFE MODE. Then I would try to use the restore computor to an earlier date when it worked correctly before the infection. You WILL lose anything you saved while the infection took place. But that is only an easy out.
You will still have to find a website online that can scan your computor and remove those viruses.
Word of advice, those portable devices are the new virus carriers and that includes cell phones. Hackers just trying to prove they can...
Good luck.

Answer 4

Format. Re-install OS.

For reasons why this should be done see:
http://web.mit.edu/ist/topics/security/restoring.html#3
http://www.cert.org/tech_tips/root_compromise.html

I have even seen this recommended by MS, though I don't a link handy.

If you want to try the remove/recovery method, or just backup files before reinstall, I'd suggest using a Linux LiveCD. This will allow you access to the filesystem and will not be affected by the virus, or allow it to further damage anything (unless it's affected the BIOS of the machine, but this is quite rare). Something like Knoppix STD should include pretty much any tools to do this.

Answer 5

When you are in your windows, go to control panel user accounts. Go to your account and click to change the user log in or fast switching to users.

Then log off, if the window appears a dialogue box, change name to Administrator. Then you are in command again of your computer.

Go to control panel again and add a name of user and to make sure its has an administrator rights. You could delete your existing account that has made you the problem.

I hope this works. Have a nice day Bro......

Answer 6

for Task Manager, download this and run it
http://windowsxp.mvps.org/reg/EnableTM.reg

for foldwer options use this
http://www.dougknox.com/security/scripts/folderopts.vbs
Note disable NOD32 a while and do it..No harm

eBRo

Answer 7

well first you need to make sure the virus completely deleted then try system restore. go to start, all programs,accessories,system tools, then system restore and restore your computer to an earlier time.

Answer 8

format it dude!!!!