Printable View
Hi to everyone here,
This is my first post in anti online
i have the computer in the office and the task manager is disabled
well i am the administrator of that computer and it is running XP operating system
the problem is whenever i press alt+ctrl + Del the task manager use to open but from 2 days whenever i press clt+ctrl+del the error messege comes
The Task Manager is disabled
and without any error the computer restarts
how should i solve this problem
Hi Larren,
Welcome to AO's
well your problem i think comes from group policy..
for that open run from the start menu
type gpedit.msc which will open group policy
in that choose User Configuration>Administrative Templates>System>Ctrl+Alt+Delete>Remove Task Manager>Remove Task Manager>
since the name of the policy is Remove Task Manager, by disabling this policy, you are enabling the Task Manager.
and after that apply the policy
and check after that if your Ctrl+Alt+Delete is opening task manager or not
Hello larren, and welcome to AO. :)
I am afraid that I do not like the sound of that! If you have not been changing any administrative settings I would say that it is an indication that you have been infected by malware. Task manager is what you would use to stop running processes, so the malware will disable it to protect itself.Quote:
the problem is whenever i press alt+ctrl + Del the task manager use to open but from 2 days whenever i press clt+ctrl+del the error messege comes:
"The Task Manager is disabled"
and without any error the computer restarts
Do you have an antivirus and firewall?
To start with please follow these steps:
1. Update your antivirus
2. Disconnect your machine from the network (if it is on one) and reboot in safe mode.
3. Set your antivirus to scan everything, deep scan, basically turn everything "on"
4. Run it and see what it finds. If it does, make a careful note of what it is before cleaning/deleting it.
Let us know what happened :D
EDIT:
KK is absolutely right as to how to fix the Task Manager problem, but first you need to get rid of the virus;)
By the way, is your computer on a network? if it is then now is when the fun begins........
Well Mr. nihil,
i have installed norton 2008 yesterday and i had updated it with everything on and as per to make it secure i also did virus scan but that time it didnt gave any virus attention yes but that scan was with the network cable plugged in and it was in normal mode
but after your messege i did as you told and i found an attention "W32 Popwin" which was shown as high risk
and yes Mr. Kingkong i tried as you showed me and it is now working properly thank you for helping me to both of them
wish you luck larren
Woopss this is really a scary lineQuote:
By the way, is your computer on a network? if it is then now is when the fun begins........
You are welcomeQuote:
and yes Mr. Kingkong i tried as you showed me and it is now working properly thank you for helping me to both of them
Well i guess this is the beauty of running anti virus in a safe mode there are no much function working the background and secondly if the virus is coming from the network to your computer for that reason nihil told you to remove the network cableQuote:
i have installed norton 2008 yesterday and i had updated it with everything on and as per to make it secure i also did virus scan but that time it didnt gave any virus attention yes but that scan was with the network cable plugged in and it was in normal mode
any ways best of luck
Hi larren, and thank you for responding, it is only by knowing what works and what doesn't that we can improve our support skills?
What sort of network are you connected to?
A lot of this stuff infects through network connections, which is why KK and myself are concerned. :eek:
Hi larren, welcome to AO.Quote:
Originally Posted by larren
FYI, that particular virus you have/had will spread using USB drives so you'll need to make sure you check any that you might have connected to that PC.
Symantec info:Quote:
W32.Popwin is a worm that attempts to spread through local and removable drives.
Source: http://www.symantec.com/security_res...051114-1235-99
Thanks for the support Anti Onliners
i am connected to a workgroup of 7 computers with the help of the router
Yes Mr Ric-o has the point i have connected my USB drive to the computer which i have used in a virus infected computer 1 day before my computer got spoiled
and i think that is whats a problem here
now what should i do for protecting my removable drive
Hi larren,
I am guessing that your USB drive is one of those small pocketable devices that are also called "thumb drives", "pen drives" or "flash drives".
If that is the case you really need one with a tiny switch that makes it read only....... a bit like the switch on a 3.5" floppy. Set it to read only so that when you insert it in an infected machine you will get an "unable to write to" message.
Otherwise you want one with password protection software. When you insert that, nothing will happen other than that the PC will detect it. As soon as anything (like a virus) tries to write to it, you will be asked for the password.
My third method is very crude. I have an old 64Mb drive that I would insert first. It has nothing on it apart from a "canary" ( that is a fake set of executables to act as virus bait) so I just check available space, the size of the "canary" and the content. If something magically appears or the available space goes down, I know that I am on an infected PC.
If your drive is actually a proper external hard drive, then just use a thumb/pen drive as I have suggested to test the machine, and make sure that the drive is password protected.
None of these methods is foolproof, but they will defeat most malware of this type.
When you return to your own PC be sure to scan your drive for malware first.;)
EDIT: The term "canary" comes from the old days when miners would take a canary with them to check for poisonous gases in the mine. :)
Mr. Nihil,
but when we connect a new USB drive to the computer anti virus package does scan the removable disk (why was it not able to search the virus in the removable disk)
and the methods which you are showed are nice onces only the last one was very much confusing
and there is one more problem which has come across after this setups and installation
my folder option has gone away from the folder>tools>folderoptions
and it has also not there in the control panel
and all my hidden files have turned visible
why has this happen any solution
Hey Larren,
to get your folder option back
from start menu open run command in that type regedit.exe
in that go HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
in that there would be a file named NoFolderOption just right click on it and change the value to 0 or simply delete the key file
and then after saving restart the computer and you will find your missing folder option back
best of luck
KK
Hi larren,
1. Try Windows Explorer and this sequence:
<Folder Options>
<View>
<Hidden Files & Folders>
There are options to enable or disable viewing hidden files/folders
2. Select a hidden file and right click on it.
Select "properties" from the bottom of the drop down menu
Look at "Attributes" the "hidden" box should be checked.
3. The idea of using a USB drive with "decoy" files on it is:
{a} It tells you if the PC is infected
{b} It captures an example of the malware for analysis ;)
Hi there Larren and welcome to AO
Concerning Antivirus - no vendor is going to be able to detect all malware.
You maybe want to try out some other products however symantec is a good product.
KK: when did you become so clever :)
Hey there Cider...
thx for the concern and letting me know that you know me
well dont mind but why do you think i stay so much online on antionline
so at the same i also stay online on google and other forums...
any ways dont mind but i have completed my 1 year on AO...
and this all are registry and gp thing which i know a little bit not much but i know some of the easy formats
Regards and thx Cider
Hi guys,
I forgot to address this question:
Firstly, what Cider says is totally correct:Quote:
but when we connect a new USB drive to the computer anti virus package does scan the removable disk (why was it not able to search the virus in the removable disk)
1. Detection of rootkits is generally poor.Quote:
Concerning Antivirus - no vendor is going to be able to detect all malware.
2. Adware and spyware may look like a legitimate application.
3. The boot sector may not be scanned, but boot sector malware has started to make something of a comeback recently.
4. Your AV settings may not be optimal.
5. Polymorphic malware changes its pattern to avoid detection.
5. USB drives tend to have their own software which may have an object lock on it by the time your AV kicks in.
I would carefully examine your AV settings and scanning rules;)
Also, I think that your security model and policies could do with revisiting? for example, why do people actually need to use external media?........ who should be authorised to do so?....... and so on. :)
Hi Larren
When you have a minute give an online scanner a try
www.activescan.com
I got the above errors from your www.activescan.comQuote:
Export to:
Threats with free disinfection (3)
Medium danger level (1)
W32/Sohanat.AS... Virus Latent Hide
+ Info
1. C:\System Volume Information\_restore{886D213...8B7-DEEA04FD462B}\RP44\A0014733.exe
Low danger level (2)
Generic Trojan Virus Latent Hide
+ Info
1. C:\System Volume Information\_restore{886D213...8B7-DEEA04FD462B}\RP46\A0015844.exe
W32/Autorun.SF... Virus Latent Hide
+ Info
1. C:\System Volume Information\_restore{886D213...8B7-DEEA04FD462B}\RP44\A0014734.inf
Only available for registered users.
Register free - I'm registered
Threats disinfected with the paid version (2)
Low danger level (2)
HackTool/EvID Hack Tool Latent Hide
+ Info
1. C:\System Volume Information\_restore{886D213...8B7-DEEA04FD462B}\RP46\A0015376.exe
Cookie/Atlas D... Tracking Cookie Latent Hide
+ Info
1. C:\Documents and Settings\ALarren\Application...wb.default\cookies.txt[.atdmt.com/]
so what do have to say for this
Hey there Larren, very interesting.
I see most of those are found in the system restore folder. This is a place where ystem protected files are stored and you cannot touch them under know means that wont damage your computer.
What I suggest is pm me or email me, ill pm you my email address and I will set you up with a trial of some decent AV.
You will have to run a scan, turn off system restore, reboot PC, turn system restore back on. This should clear the malware.
The last one is a cookie which isnt too serious. The AV will pick this up as spyware and delete it.