[do not have permission - disabled by administrator - malware]

OK, I have just re-installed Windows Home from my Dell disk supplied with my dell onto my packard bell pc. First of all I tried to re-install all of my programs and it keeps saying I do not have permission. I then try regedit and cmd and the window comes up saying that it has been disabled by administrator. I AM the administrator as this is on my home computer.

I managed to get into regedit by typing regedt32 and changed the policies disablecmd to 0 as told to do so by another forum. I ran Spybot and this has detected win32.backdoor and skatanbot and I cannot remove these. Every time I reboot they come back.

Any suggestions please! Should I do hijack this?

 

Hi Marc,

We'll need more information on your situation:

That's iffy since an OEM install CD used on other than it's own base equipment is not generally recommended. Did you have any errors while it was installing? What kind of install did you choose, a format and install or just a repair install?

I'm going to guess that you did a repair install since you are reporting viral problem that would be left over from your former install. A Format and install would have eliminated those gremlins.

If you choose to hang with this install, you'll need to post up a copy of your HiJackThis log file to the Security forum here for further help. I'd suggest starting a new thread for that unless this one gets moved first. You should consider using a more appripriate title for your thread since merely asking for help is not very descriptive and doesn't attract as much help as you would get with something like "New install has viral problem " for example.

HTH

 

Doh! Must have been having a blonde moment when I read the posting rules!

Thanks for advice, will post hijack this log on new thread. It is a clean install but I have another pc, a dell, that I transferred files from so maybe the virus was in there somewhere!

 

Analysis continued here:
http://www.windowsbbs.com/showthread.php?t=61112

This thread is now locked.