Windows 7 UAC (user access control) is being disabled on every reboot

Question

To put it simply, I noticed UAC was disabled so I enabled it. I was prompted to reboot the computer for the changes to take effect. Upon my reboot I checked the settings again as I hadn't disabled UAC in the first place. It was again set to off (never notify). For the heck of it I repeated the process a couple of more times. Same result each time.

I have Microsoft Security Essentials running a full scan nightly so I should be protected from viruses. I also did an on demand scan with the online tool at www.antivirus.com. Nothing was found.

Other than the fact that UAC is being disabled on each reboot I have no other reason to suspect a virus.

So my question is does anyone have insight into if this is a possible problem with a virus or other malware changing my UAC settings on each boot or is it possibly a problem with Windows and UAC itself? If it is malware are there suggestions for other products outside of the ones I have used to detect and remove it.

Answer 1

I finally figured out the cause of my problem. It was in fact malware. Unfortunately none of the various antivirus, malware and rootkit scanners I tried detected it so I had to figure it out through lots of googling.

In my case the offender seems to be Hoax.Win32.BadJoke.Formatter.ct or something similar. It doesn't do any harm other than turning off UAC and eating up all my bandwidth by creating background connections to youtube and various google IPs.

Further details can be found here. http://greatis.com/blog/how-to-remove-malware/removed-regsrv-exe-stdrt-exe.htm