It all started this morning when the laptop announced that my firewall was switched off (I never switch it off); tried to run a virus scan but couldn't. Shut down and re-booted then got a WgaTray.exe error(?). I'm running a genuine paid for version of windows.

Now nothing runs/opens when I double click in icons (except folders open). The antivirus icon has disappeared and I can't open IE (able to open Firefox but only by right clicking and using the 'run as' option).

Unable to do a system restore as it says I don't have right permissions - I am the only user, it't my home laptop and therefore I am the administrator!

Have tried to reinstall my antivirus software but it tries to save in a temporary file, then I get an error message saying "cannot be saved because you cannot change contents of that folder". Made sure this folder wasn't read-only, tried again and got same error message. Haved also tried saving to another location (in Firefox settings) but still get the same error message.

Phew! Think's that about all - any ideas??? I just don't know what to do.

Thanking you in advance :help:

Sounds a bit like something ie7 does to my computer. out of interest ctrl-alt-delete and click on the processes tabs and see if there are any 'iexplores' lurking - if so close them. The chances of that are slim, have you tried starting in safe mode. Can you click on start then go to accessories,system tools and open th system restore console (do this either from safe mode or normal) try restoring it to an earlier time.

there are viruses that switch off firewalls, disable antivirus programs and disable access to various parts of the system to stop you removing them

if you are running vista then I doubt it's a virus though, it sounds a bit like reduced functionality mode (http://support.microsoft.com/kb/925582) which vista will enter if :-

you fail to activate vista within the allowed time

or you make significant mods to the hardware so vista thinks it's a new machine, gives you 3 days to reactivate (30 if it's a volume license) and you fail to reactivate it

or WGA thinks your license isn't legit

I have heard that if a vista system isn't connected to the interweb periodically it will do the RFM thing because it can't verify the license, don't know how true that is though, can't see it myself as businesses who don't allow net access for their employees would be screaming at M$ to sort it

anyway have a read thriugh the page on the link and see if it matches your problem

if it won't let you remaster cos it's denying you permissions
try and change it in "user accounts" in control panel

Unable to do a system restore as it says I don't have right permissions - I am the only user, it't my home laptop and therefore I am the administrator!

Start up in Safe Mode and you can then log in as the administrator, or create a shortcut on your desktop to mmc.exe and then while holding shift right click the shortcut. Select 'Run As' and type in the username and password for the admin account. You can then add snapins to the program where you can get to the users section and add yourself to the Administrators group.

Restart and you will be an administrator and be able to do a system restore.

Esme - I'm runnig XP (sorry forgot to say).

I now believe this to be a virus. I was logged in as the administrator but still unable to system restore

Dave20046 - have been unable to access the system restore in this way either. Will try and remove all personal data tonight and boot up in safe mode (how do I do this again?)

wwp8 - unable to access user accounts

Many, many thanks for all your suggestions!

Thats sounds nasty, could even be some sort of corruption, system restore might not fix this, and if it was a virus it could have been lurking for ages. Try a few virus checkers

I recomend some free ones such as AVG:
http://www.download.com/AVG-Anti-Virus-Free-Edition/3000-2239_4-10320142.html?tag=lst-2&cdlPid=10834624
and spyware checkers:
http://www.download.com/Spyware-Doctor-Starter-Edition/3000-8022_4-10704508.html?tag=lst-5&cdlPid=10816516
what app is eating up your resources when you do ctr-alt-del? Try turning lots of them off, its okay they will start again when you reboot, if you turn them off one by one, you might be able to identify the app killing your system, try not to off the processes need for the systerm (they will have a user name of system)

Dont give up!

Don’t use AVG as almost useless these days. You get what you pay for and its Free. Spyware Doctor is good but you need to pay for it and if this is a virus, that’s not going to help. Try downloading a trial of Microsoft OneCare, its very good and in a lot of cases better then the well known alternatives.

Sheff Tutor - unfortunately one of the symptons is that I cannot download anything! I keep trying but I get an error message stating the programme cannot be saved because you cannot change contents of the folder. Everytime I've tried to download it tries a temp folder pathway in local settings. Try as I might I cannot get it to save elsewhere. Once again a sympton of the virus i think.

Serapis - I currently use the Panda antivirus security system (paid for it too). Not too impressed that its let this mutha through! But am gonna upgrade to their full internet security as previosuly i had been very happy with it.

Sheff tutor - forgot to say that when I looked at the task manager there didn't appear to be anythign using up resources. Odd I know.

Anyway, thanks everyone, got a fwe things to try when I get home this evening. Will let you know if anything is successful.

well, turn them off one by one anyway, viruses are usually very small, its only the one that’s try to buffer overload or slow your computer to a halt that use up the resources, sounds like this one is doing all sorts odd things

-oh and if its free it cant harm in trying, download somewere else, IT cafe? and save to CD.


If possible can you write down here the full list of each app thats running
ctl-alt-del>process.

Or if you want, grab each name, stick it through google, most of the common viruses will have been identified by odd app names. You should then be able to figure out which one to turn off, but you'll still need to get rid off it

I've had to ask an expert. Fortunately I have a work colleague who knows far about these things than I do. He has managed to system restore however the virus is still in there (I think) as I still can't run anything from double clicking an icon. He has a few more tricks up his sleeve but if all else fails will recover all my personal data then rebuild the system.

Thanks for all the help and advice