| | |
Task manager and registry editor disabled
![]() |
•
•
Join Date: Aug 2008
Posts: 92
Reputation:
Solved Threads: 2
When I open any executing (.exe) file....Ur computer might be at risk..automatic upadtes are turned off...etc,and task manager and registry are disabled.when I press alt+ctrl+del it says "The task manager is disabled by your administrator"When i enable it from Gp editor,it comes and again goes when i open .exe files.Please share your idea.
Hi deepugtm
Have you searched the forum for similar problems? Usually this problem is caused by something malicious (other than prokorn) which immediately destroys any control by modifying your registry.
The first thing I would do is to try and regain control so that you can properly get rid of the trojan/virus that has caused all this.
In C:\windows, copy REGEDIT.EXE, paste it and rename it to FRED.EXE or something. Then see if it runs as FRED.EXE. Might do, might not.
In C:\WINDOWS\SYSTEM32, copy TASKMGR.EXE, paste it and rename it to BILL.EXE or something. Try to run that.
Search this forum and google the string regedit & task manager disabled. Stacks of stuff there to support what I'm advising.
Then go to the Virus form here, read the Readmes and post a HijackThis log there.
Have you searched the forum for similar problems? Usually this problem is caused by something malicious (other than prokorn) which immediately destroys any control by modifying your registry.
The first thing I would do is to try and regain control so that you can properly get rid of the trojan/virus that has caused all this.
In C:\windows, copy REGEDIT.EXE, paste it and rename it to FRED.EXE or something. Then see if it runs as FRED.EXE. Might do, might not.
In C:\WINDOWS\SYSTEM32, copy TASKMGR.EXE, paste it and rename it to BILL.EXE or something. Try to run that.
Search this forum and google the string regedit & task manager disabled. Stacks of stuff there to support what I'm advising.
Then go to the Virus form here, read the Readmes and post a HijackThis log there.
Last edited by Suspishio; Mar 22nd, 2009 at 6:27 pm.
Suspishio
My advice is at your risk
Qosmio G50-10H; T9400 2.53GHz Core 2 Duo; 4GB RAM; Vista HP (32)
nForce 680i LT; Q6600 Quad Core 2.4GHz; 8GB RAM; XP Pro (64)
Dell XPS M1710; T7200 2GHz Core 2 Duo; 2GB RAM; XP Pro (32)
My advice is at your risk
Qosmio G50-10H; T9400 2.53GHz Core 2 Duo; 4GB RAM; Vista HP (32)
nForce 680i LT; Q6600 Quad Core 2.4GHz; 8GB RAM; XP Pro (64)
Dell XPS M1710; T7200 2GHz Core 2 Duo; 2GB RAM; XP Pro (32)
•
•
Join Date: Aug 2008
Posts: 92
Reputation:
Solved Threads: 2
I have done what you have said..but doesn't work all.I have searched in the internet but couldn't find proper answer.Everywhere i found that enabling it from group editor and deleting values from registry.First problem is that enabling by this method opens registry and task manager for a short time and disappears,however i able to delete values from registry in that short interval of time,but deleting value doesn't solve the problem because new value added automatically,ranaming also doesn't solve the problem.iIf you know virus name I could search it from linux ( I have dual OS).Please help me.
•
•
Join Date: Mar 2009
Posts: 4
Reputation:
Solved Threads: 0
•
•
•
•
When I open any executing (.exe) file....Ur computer might be at risk..automatic upadtes are turned off...etc,and task manager and registry are disabled.when I press alt+ctrl+del it says "The task manager is disabled by your administrator"When i enable it from Gp editor,it comes and again goes when i open .exe files.Please share your idea.
This error is caused if the DisableTaskMgr restriction is enabled. To enable Task Manager, try one of these methods
•
•
•
•
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f
•
•
•
•
Click Start, Run and type Regedit.exe
Navigate to the following branch:
HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies\ System
In the right-pane, delete the value named DisableTaskMgr
Close Regedit.exe
@verceti
deepugtm's problem now is that his registry changes don't persist. Ergo, there is a trojan screwing things up. He should follow the malwarebytes route and post his logs in the Virus forum.
deepugtm's problem now is that his registry changes don't persist. Ergo, there is a trojan screwing things up. He should follow the malwarebytes route and post his logs in the Virus forum.
Suspishio
My advice is at your risk
Qosmio G50-10H; T9400 2.53GHz Core 2 Duo; 4GB RAM; Vista HP (32)
nForce 680i LT; Q6600 Quad Core 2.4GHz; 8GB RAM; XP Pro (64)
Dell XPS M1710; T7200 2GHz Core 2 Duo; 2GB RAM; XP Pro (32)
My advice is at your risk
Qosmio G50-10H; T9400 2.53GHz Core 2 Duo; 4GB RAM; Vista HP (32)
nForce 680i LT; Q6600 Quad Core 2.4GHz; 8GB RAM; XP Pro (64)
Dell XPS M1710; T7200 2GHz Core 2 Duo; 2GB RAM; XP Pro (32)
•
•
Join Date: Oct 2008
Posts: 42
Reputation:
Solved Threads: 0
The only problem with the malwarebytes solution and the hijackthis solution is that he has to be able to execute them. They are both executable files, which he already stated he cannot commit. That is why I think that he should go online and have one of the free online scanners remove as much as possible and then, post the malwarebyte and hijackthis log.
![]() |
Similar Threads
- Task Manager disabled (Viruses, Spyware and other Nasties)
- Help Needed!, Virus problem! (Windows NT / 2000 / XP)
- How to enable Task Manager (Windows NT / 2000 / XP)
- help on virus (Viruses, Spyware and other Nasties)
- Windows XP SP1 problem with Task Mgr (Windows NT / 2000 / XP)
- Taskmanager is disabled ! (Viruses, Spyware and other Nasties)
- Virus trouble... (Viruses, Spyware and other Nasties)
- Virus Trouble (Windows NT / 2000 / XP)
- System 32 Coming Up at Startup (Viruses, Spyware and other Nasties)
Other Threads in the Windows NT / 2000 / XP Forum
- Previous Thread: "Access denied" to most admin tools
- Next Thread: problem with windows starting
| Thread Tools | Search this Thread |
.net 64bit 2007 2010 a.exe activedirectory address android apache application appstore automatically black blue bsod bulletin canonical chinese codeplex combofix cursor deployment deployments desktop dns domain drive eartlink error explorer fax fontmanagers fonts format framework freeze hardware home interoperability laptop laptops lcd linux login mac markshuttleworth memory microsoft minimalizes monitor motionle1600 netbooks novell nvidia open opensource operatingsystems options oracle osinstallationproblem osx outlook palm printer program proxy raid reformat remotedesktop repair replacingraiddrive retail retrieve screen security server. sharepoint simplifiedchinese sitetositevpn slowperformance sp3 spyware studios technology ubuntu update upgrade videodrivers virus vista visual vpn win win32/heur windows windows7 windowsxp windowsxpnotstartingup. xp xpde






