task manager disabled on win xp pro

[frankierx]

Edit: I*** may have inadvertantly turned off the task manager but messing around in registry one night. I need to turn it back on. I get admin disabled task manager rejection when i use the ctrl, atl, delete keys.

 

[mechBgon]

That is most likely a symptom of virus infection. What antivirus software do they have?

 

[frankierx]

none

 

[amdhunter]

Click Start - Run - Enter gpedit.msc in the Open box and click OK - In the Group Policy settings window - Select User Configuration - Select Administrative Templates - Select System - Select Ctrl+Alt+Delete options - Double Click Remove Task Manager- Click Disabled, then apply.

 

[mechBgon]

Originally posted by: frankierx
none

Follow the instructions for setting up free Kaspersky on this page. If you have problems installing it, as if the viruses might be preventing it, let me know.

After installing it, configure it as shown. Then run a full scan of the system. Bonus points for running the scan in Safe Mode

 

[John]

http://windowsxp.mvps.org/Taskmanager_error.htm

 

[frankierx]

Originally posted by: amdhunter
Click Start - Run - Enter gpedit.msc in the Open box and click OK - In the Group Policy settings window - Select User Configuration - Select Administrative Templates - Select System - Select Ctrl+Alt+Delete options - Double Click Remove Task Manager- Click Disabled, then apply.

Thank you. But that did not work. Also, how do I enable regedit? It says it was diabled by admin.

 

[mechBgon]

It was probably disabled by malware using the Admin's powers, unless your relatives are sysadmins. How about checking for malware at some point here

 

[John]

Are you logged on to an Administrator account? Please click the URL in my OP and then follow mechBgon's advice. If you do not wish to install an AV please do the following.

You can use the McAfee command line scanner in DOS or Windows without having to install the program. McAfee's detection rate is very respectable, and this will allow you to leave your current AV installed and get a second opinion.

[*]Make a new folder called McAfee in the root of the c:\ drive of the computer you're going to scan.
[*]Download the win_betaengdat.zip and extract the contents of the file into C:\McAfee
[*]Download and save this batch file to c:\McAfee since it is responsible for launching the command-line scanner with all of its options enabled, including heuristics and adware/spyware options. You can run scan.exe /? to get a list of available options.
[*]I usually recommend starting the system in Safe Mode with Command Prompt (so explorer.exe doesn't run) and then running the command c:\McAfee\RUNSCAN.bat to launch the scanner. It'll run in normal mode too, but if malware has multiple processes that watch each others' backs, and they're running, then they'll just repair each other up after the scanner kills them off.
[*]When the scan is done, it will put a report.html file in c:\ showing what it found.

"The scanner runs faster if its window is minimized. It's normal for the text in the window to get all jumbled and overwritten. The virus definitions in this scanner get updated several times per day, and although McAfee is not our favorite anti-virus vendor in the home-user realm, they do sometimes find stuff heuristically and this does use their full threat database, for what it's worth." - mechBgon

 

[frankierx]

Originally posted by: mechBgon

Originally posted by: frankierx
none

Follow the instructions for setting up free Kaspersky on this page. If you have problems installing it, as if the viruses might be preventing it, let me know.

After installing it, configure it as shown. Then run a full scan of the system. Bonus points for running the scan in Safe Mode

I tried a few things, like the gpedit.msc command in run. I also tried to run spybot and delete flash game progs in remove control panel. I am trying this free kaspersky now , running a complete scan and it is finding a lot of trojans. Deleting them as it scans, I will be finished by 9:30pm est. I will post update later.

 

[stash]

Nuke from orbit.

 

[mechBgon]

If you do nuke from orbit, consider taking the opportunity to give each person their own non-Admin account while you're at it. Password-protect the Admin account, and only give the password to the most responsible person there. Educate the designated Admin about avoiding downloading and installing trash from the Internet.

Also, more basic security suggestions here. Easy stuff

 

[frankierx]

Update: The quest profile can access task manager and also regedit. My admin can not. Also if I creat another admin profile ( I name 'Test') , that can access task manager and regedit. I am supposed to look under hk local machine/software/microsoft/windows/current version/policies/system. But i can not find what I am looking for once I get in system.....

 

[nweaver]

Originally posted by: stash
Nuke from orbit.

Originally posted by: frankierx
Update: The quest profile can access task manager and also regedit. My admin can not. Also if I creat another admin profile ( I name 'Test') , that can access task manager and regedit. I am supposed to look under hk local machine/software/microsoft/windows/current version/policies/system. But i can not find what I am looking for once I get in system.....

Originally posted by: stash
Nuke from orbit.

 

[wiin]

Originally posted by: frankierx

Originally posted by: amdhunter
Click Start - Run - Enter gpedit.msc in the Open box and click OK - In the Group Policy settings window - Select User Configuration - Select Administrative Templates - Select System - Select Ctrl+Alt+Delete options - Double Click Remove Task Manager- Click Disabled, then apply.

Thank you. But that did not work. Also, how do I enable regedit? It says it was diabled by admin.

Dude, click on Not Configured.

 

[frankierx]

Originally posted by: wiin

Originally posted by: frankierx

Originally posted by: amdhunter
Click Start - Run - Enter gpedit.msc in the Open box and click OK - In the Group Policy settings window - Select User Configuration - Select Administrative Templates - Select System - Select Ctrl+Alt+Delete options - Double Click Remove Task Manager- Click Disabled, then apply.

Thank you. But that did not work. Also, how do I enable regedit? It says it was diabled by admin.

Dude, click on Not Configured.

did that already. the values are all set on not configured.

 

[stash]

Seriously. Cut your losses, back up your data and blow it away.

You could've been back up and running in the time you've spent troubleshooting this hopeless issue. It's hopeless because you can never trust this box to be clean. It has been owned, and you are no longer in control of it, no matter how much crap you think you've cleaned out.

The only way to regain control is to flatten it.

 

[John]

Originally posted by: stash
Seriously. Cut your losses, back up your data and blow it away.

You could've been back up and running in the time you've spent troubleshooting this hopeless issue. It's hopeless because you can never trust this box to be clean. It has been owned, and you are no longer in control of it, no matter how much crap you think you've cleaned out.

The only way to regain control is to flatten it.

What's to prevent him from getting infected again if he insists on using an admin acct. and doesn't implement proper prevention methods? Should he reinstall windows once per week?

 

[frankierx]

I just reinstalled the os.....next thread subject to come, is it worth it to buy vista or stick with xp pro, given that I have to purchase either one. ( don't ask me about xp pro please)

 

[mechBgon]

I vote for Vista. Better security, especially if you set them up with non-Admin accounts. ALL of them. The Admin account is only for doing Admin duties, no one should be using it routinely as their "daily driver" account. And with Vista, running non-Admin is easier.

Also, if they have kids, Vista offers parental controls if needed.

/me studiously refrains from asking about the WinXP Corp... uh, Pro.


edit: you should hit Microsoft's site and run the Vista Upgrade Advisor to make sure the system can handle Vista, however.

 

[stash]

Originally posted by: John

Originally posted by: stash
Seriously. Cut your losses, back up your data and blow it away.

You could've been back up and running in the time you've spent troubleshooting this hopeless issue. It's hopeless because you can never trust this box to be clean. It has been owned, and you are no longer in control of it, no matter how much crap you think you've cleaned out.

The only way to regain control is to flatten it.

What's to prevent him from getting infected again if he insists on using an admin acct. and doesn't implement proper prevention methods? Should he reinstall windows once per week?

Some people like pain and suffering, what can I say?