View Full Version : how to regain admin rights after clearing trojan
jeffjeff
2008-10-09, 18:49
i manage to block the trojan from running in my computer now.
i lost admin rights, i cant open task manager, i cant start system restore because my drives are showing turned off,
i tried bitdefender and spybot but the virus prevented it from running.
the trojan name is symlrserv.exe or trojan/agent.hqq i dont know much.
i cant go into safe mode, i lost my run button.. im using xp home edition which doesnt have gpedit.
please help thx. :sad:
Hello,
Sorry to hear of the problems. :sad:
How did you block the trojan? Do you have a system backup?
Best regards.
jeffjeff
2008-10-09, 19:01
i caught it with spyware terminator. i blocked from running. symlrserv.exe is blocked at the moment.hmm.. dont know much about system backup. im assuming i dont have that.
First, I think you might want to visit the malware removal forums (http://forums.spybot.info/forumdisplay.php?f=22) and get your system cleaned and/or looked at. The reason i am telling you to do this is because you stated you were (and possibly still are) infected. If normal scans of antivirus and other antispyware software (ether in safe mode and regular mode) still does not detect the threat(s) or remove them, (which you said you tried that) post in the malware removal forums (http://forums.spybot.info/forumdisplay.php?f=22). You said its blocked, but that means its still on your system.....anyways, Before you post there, (if you decide to post there) follow these directions. (http://forums.spybot.info/showthread.php?t=288)
Let me know what you decide to do :)
jeffjeff
2008-10-09, 19:26
lets see. what i know is my computer is working fine now. i scanned with spyware terminator it says clean. spybot cant run by the way. can u suggest another remover or scanner?
First, I think you might want to visit the malware removal forums (http://forums.spybot.info/forumdisplay.php?f=22) and get your system cleaned and/or looked at. :)
I needed the answer to my question first, ;) in such a predicament our helpers might have suggested restoring from a backup or a reformat.
lets see. what i know is my computer is working fine now.
The only problem you are experiencing now is that Spybot-S&D is not running?
jeffjeff
2008-10-09, 19:53
my computer is working normally.. i read that part of the forum already.. it says i gotta run spybot b4 posting anything there.. and the problem is.. spybot cant run.. and.. i cant go into safe mode either.. umm if u mean how did i block the trojan question.. i used spyware terminator to block it from running..
I needed the answer to my question first, ;) in such a predicament our helpers might have suggested restoring from a backup or a reformat.
ah i see, sorry tashi :oops: :)
drragostea
2008-10-10, 00:41
JeffJeff:
Rename the Spybot desktop icon (executable; Spybot - Search & Destroy) to something like JeffJeff or Spybot-SD).
Can you boot into Safe Mode?
Hello,
it says i gotta run spybot b4 posting anything there.. and the problem is.. spybot cant run.. and.. i cant go into safe mode either..
http://forums.spybot.info/showpost.php?p=1150&postcount=2
If you cannot run the Spybot scan at all, please go ahead and post the HJT log along with a note regarding scan/s failure. ;)
jeffjeff
2008-10-10, 07:51
cant boot in safe mode. will keep restarting. another big problem. i cant install hijack this. damn.. or is it because i am blocking symlrserv.exe on my computer which is blocking myself from executing files?
Hi there,
Please go ahead and post in the malware forum with a link back to this thread, as the Tavern's purpose is not for infection related support. :)
Best regards.
jeffjeff
2008-10-10, 22:20
its okay already i have solved it. i used trojan remover and removed the virus and i am admin already thx for help.
jeffjeff
2008-10-10, 22:24
i have manage to clear the trojan already from my computer. everything is ok now. but my usb ports cant seem to be used. when i plug in my pendrives or my handphone. the same virus will attack my computer again. its at symlrsrv.exe or i think it is agent.hqq. the virus disables me from using task manager, deletes my run.. and turns off my drives. trojan remover can clear it somehow it will reactivate when i plug my pendrives. i used spybot to scan and it came up clean already. can you tell me what is going on? is it because the virus is still lurking around inside my system?
its okay already i have solved it. i used trojan remover and removed the virus and i am admin already thx for help.
i have manage to clear the trojan already from my computer. everything is ok now. but my usb ports cant seem to be used. when i plug in my pendrives or my handphone. the same virus will attack my computer again. its at symlrsrv.exe or i think it is agent.hqq. the virus disables me from using task manager, deletes my run.. and turns off my drives. trojan remover can clear it somehow it will reactivate when i plug my pendrives. i used spybot to scan and it came up clean already. can you tell me what is going on? is it because the virus is still lurking around inside my system?
Hello jeffjeff,
As I previously mentioned,
Hi there,
Please go ahead and post in the malware forum with a link back to this thread, as the Tavern's purpose is not for infection related support. :)
Best regards.
http://forums.spybot.info/showthread.php?t=187
This topic has been closed.