Member Avatar for ashkalaan

hi i got attacked by a virus/malware i dont know what it was.it created a file svhost.exe in my windows system folder.it disabled my task manager. i got some help from microsoft website and i went into msconfig and changed some setings and restarted the pc as told. when i went into the start menu i cant see run there. please help me.i tried going to the properties but it does not show the run command option there. please help. i am new to this website.:sad:

  • 4 Contributors
  • 11 Replies
  • 183 Views
  • 1 Year Discussion Span
  • Latest Post Latest Post by je80ss

Dani AI

Generated

Good to see the Run command returned in the thread. ’s follow-up indicates ’s registry hint did the trick while and pointed out the UI and keyboard shortcuts. Because the original problem involved a suspicious svhost.exe and a disabled Task Manager, a short, practical cleanup checklist is appropriate to reduce the chance of a lingering infection.

Malware often uses names that look like system processes. The legitimate Windows host is svchost.exe (with a "c"); a file named svhost.exe or any host-like executable located outside C:\Windows\System32 is almost certainly malicious. Inspect the running process with a process viewer (Process Explorer is useful) to get the full path and check the digital signature. If Task Manager is blocked, boot to Safe Mode or use rescue media to examine the file and note its hash for online scanning before removal.

Task Manager can be re-enabled via the registry if still blocked — back up the registry or create a restore point first. Check for a DisableTaskMgr value under both HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System and HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System; removing that value or setting it to zero restores Task Manager. On machines with Group Policy available, verify the corresponding policy there as well. After restoring access, terminate suspicious processes and use Autoruns (Sysinternals) to remove persistent startup entries and services.

Final cleanup steps: run a full scan with an up-to-date antivirus and an antimalware scanner (for example, Malwarebytes or Defender Offline), run sfc /scannow to detect and repair altered system files, then re-scan from Safe Mode. If multiple core files were modified or rootkit behavior is suspected, back up personal data and consider a repair install or full OS reinstall. Always keep backups and create a restore point before editing the registry or deleting system files.

Recommended Answers

All 11 Replies

Member Avatar for ashkalaan

is there no one who can help me.

Member Avatar for BFreimann

Here is a link that may help:

Since the run command is missing you can't run the registry editor from there. Browse to: C:\WINDOWS and run the regedit.exe file. You must be an Administrator to run the editor.

Good Luck

Member Avatar for ashkalaan

thanks let me try

Member Avatar for BFreimann

Here is another document that I found:
To remove the Run command from the Start Menu,

Fire up the registry editor.
Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Double-click NoRun on the right pane and change it to from 0 to 1.
To restore the Run command, reverse the steps by changing 1 to 0.

The same will apply as above to run the registry editor.

Member Avatar for ashkalaan

there is no explorer in the first solution u provided and in the second there is no Norun.

Member Avatar for BFreimann

there is no explorer in the first solution u provided and in the second there is no Norun.

Add Norun as a DWORD with 1 as the value.

Member Avatar for ashkalaan

the run is back.thank you so much.

Member Avatar for gerbil

....and then there is the straightforward way. Go Start, rclick in the header or tail, click Properties >start menu > customise > advanced, and check run command.
It's actually a neat lil spot if u use the Start menu much.....

Member Avatar for ashkalaan

....and then there is the straightforward way. Go Start, rclick in the header or tail, click Properties >start menu > customise > advanced, and check run command.
It's actually a neat lil spot if u use the Start menu much.....

wat do u think i wudnt have tried that.read the first post properly.

Member Avatar for gerbil

ah.. you can never tell... but apologies... i somehow missed the import of your antepenultimate sentence.... i can do that when i scan a post too quickly.. :(

Member Avatar for je80ss

use window button plus r "win+r"...it brings it right up!

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.