This one has me pulling out my hair!
Client brought in a PC with Vista 32. They had installed Office 2010 Beta (Click-to-Run) and couldn't uninstall it or install the full version which they later purchased. They also suspected a virus. - The have 5 user accounts, 2 children- with Parental Controls enabled.
System is a Compaq SR5233WM with Vista 32 SP 1.
I did a full AV workthrough with ADWcleaner, JRT, Rkill, MBAM, even Combofix. They had MSE installed but at first it wouldn't complete an update. Finally got an update and did a Full scan overnight, with no issues.
MBAM did find a Trojan.Downloader, but it had been on the system since 2010.
This is where I'm getting frustrated:
*The time/date was set to 2003. I don't know yet if the CMOS battery is bad, but I can't change the time OR date. When I select "Change Time/Date" from the clock window the cursor blinks but thats all. I managed to change the time/date in BIOS.
*The resolution is set to 800x600 and all windows take up the whole screen. I hit "Personalize" then "Display Settings" and the cursor just blinks, the Display menu doesn't load.
*There were a ton of programs running at Startup, so I entered "msconfig" in the Run box. I get a UAC, click Ok, and MSCONFIG never loads. I had to use AutoRuns to make the necessary changes.
*I tried opening Task Manager to stop the processes from running, as the system seemed slow (only 1Gb RAM). I opened Task Manager, right clicked on the processes, selected "End Process" (tried every alternative too) and the cursor blinks but doesn't end or close the program/process.
*When opening Notepad, if you type anything in the text box, the program won't let you close unless you save the file first. I don't use Vista- is this normal behavior? I had to delete the text in order to close the program!
This Vista OS seems to be possessed (Happy Halloween!) I keep thinking it might be the Parental Controls but I'm using the Admin (parent's) account.
I've run SFC twice and it found corruption in the system files.
I've considered doing a Repair install but the Compaq Recovery Manager has a Factory Reinstall only option, and I know that if I use a Vista disc it will disable access to the Recovery drive.
What is causing all this?