Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

TaskManager unaccessible-No virus found.


  • Please log in to reply
34 replies to this topic

#1 shaly777

shaly777

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Texas
  • Local time:09:04 PM

Posted 22 June 2009 - 07:51 PM

Can you help me figure out why I cannot access my Task Manager? I have tried everything. My fiancee brought this computer with him to my home in Dallas from his business in Houston. He had it for his business and he never used it. Since I've been using it, I discovered that I couldn't pull up Taskman by right-clicking on task bar. Nor could I get it by cont+alt+del. I did find the icon in windows folder, but it wouldn't open. I tried to do a sfc /scannow but that didn't work either because he doesn't have his disc. And after doing the scannow I find that I can no longer access my spreadsheets from excel! Please tell me you can help me! THANKS!
Logs below:

HiJackThis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:38:27 PM, on 6/22/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Washer\WasherSvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\LTMSG.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\WINDOWS\SYSTEM32\USRmlnkA.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Belkin\F5D7050v3\Belkinwcui.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\WINDOWS\SYSTEM32\USRshutA.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\SYSTEM32\USRmlnkA.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

{REMOVED HJT LOG~~ boopme}

SUPERantiSpyware:

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 06/22/2009 at 06:44 PM

Application Version : 4.26.1004

Core Rules Database Version : 3950
Trace Rules Database Version: 1892

Scan type : Complete Scan
Total Scan Time : 00:56:58

Memory items scanned : 461
Memory threats detected : 0
Registry items scanned : 5035
Registry threats detected : 0
File items scanned : 39549
File threats detected : 0


MalwareBytes:
The one from today was clean.
HOWEVER...while looking in the quarantine of MBAM, I noticed that there was something about the task manager in there. I opened the log, and this is what it says:

Malwarebytes' Anti-Malware 1.37
Database version: 2247
Windows 5.1.2600 Service Pack 2

6/8/2009 9:06:14 AM
mbam-log-2009-06-08 (09-06-14).txt

Scan type: Quick Scan
Objects scanned: 88138
Time elapsed: 5 minute(s), 48 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
c:\WINDOWS\system32\taskmgr.exe (Trojan.Downloader) -> Quarantined and deleted successfully.



HOPE THAT HELPS! Thank you!



Edited by boopme, 22 June 2009 - 09:12 PM.

Who is this King of glory?.....Psalm 24:8
He is the Way, the Truth and the Life...John 14:6
His Name is Jesus!...Matthew 1:21

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,762 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:04 PM

Posted 22 June 2009 - 09:18 PM

Hello . I removed the HJT log as they aren'y allowed here in this forum and to prevent this topic from being moved for now. if needed we will post it.

Are you receiving any error message about task manager?
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 shaly777

shaly777
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Texas
  • Local time:09:04 PM

Posted 22 June 2009 - 09:28 PM

OOPS...sorry. No error. It just simply doesn't come up. When I go to C:\>Windows>Taskman the Taskman icon has blue font. But when I went to the Windows>System32>Taskmgr.exe it was black font. For whatever that might be worth!
That MBAM log from 6-8-2009 doesn't sound odd to you?
What do you think about a system restore back to that date, and then try it again? I DON'T KNOW. :thumbsup:
Who is this King of glory?.....Psalm 24:8
He is the Way, the Truth and the Life...John 14:6
His Name is Jesus!...Matthew 1:21

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,762 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:04 PM

Posted 22 June 2009 - 09:42 PM

Yes actually that is odd,the version is also outdated . Let's do this next.
Was the task manager working prior to tjhe MBAM scan?
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 shaly777

shaly777
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Texas
  • Local time:09:04 PM

Posted 22 June 2009 - 09:50 PM

Ya know, I don't know. When the computer got to me, it had expired Norton on it, which I uninstalled and I immediately installed MBAM, avast! & SUPERantiSpyware. Ran scans, and I can't remember if I had cause to use the task manager before that time or not. Maybe, but I'm not certain.
Who is this King of glory?.....Psalm 24:8
He is the Way, the Truth and the Life...John 14:6
His Name is Jesus!...Matthew 1:21

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,762 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:04 PM

Posted 22 June 2009 - 10:04 PM

Ok ..let's do it this way. Go here and see if System restore IS enabled. See .. Enabling System Restore
http://www.bleepingcomputer.com/tutorials/...l56.html#enable

RErun MBAM .post full log.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 shaly777

shaly777
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Texas
  • Local time:09:04 PM

Posted 23 June 2009 - 12:58 AM

Malwarebytes' Anti-Malware 1.38
Database version: 2323
Windows 5.1.2600 Service Pack 3

6/23/2009 12:56:14 AM
mbam-log-2009-06-23 (00-56-14).txt

Scan type: Full Scan (C:\|D:\|E:\|)
Objects scanned: 139963
Time elapsed: 1 hour(s), 3 minute(s), 27 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
Who is this King of glory?.....Psalm 24:8
He is the Way, the Truth and the Life...John 14:6
His Name is Jesus!...Matthew 1:21

#8 shaly777

shaly777
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Texas
  • Local time:09:04 PM

Posted 23 June 2009 - 08:54 AM

I didn't have that subkey. :thumbsup:

And yes, boop, Sytem Restore appears to be enabled. It shows to be monitoring C:\

Edited by shaly777, 23 June 2009 - 09:11 AM.

Who is this King of glory?.....Psalm 24:8
He is the Way, the Truth and the Life...John 14:6
His Name is Jesus!...Matthew 1:21

#9 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,762 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:04 PM

Posted 23 June 2009 - 11:22 AM

Ok i wanted to have a restore point if this doesn't work.

This step involves making changes in the registry. Always back up your registry before making any changes.

Go to Start Run and type: regedit
Click OK.
On the left side, click to highlight My Computer at the top.
Go up to File Export
Make sure in that window there is a tick next to "All" under Export Branch.
Leave the "Save As Type" as "Registration Files".
Under "Filename" put RegBackup.
Choose to save it to C:\
Click save and then go to File Exit.
Or you can download and use ERUNTwhich is an excellent free tool that allows you to to take a snapshot (backup) of your registry before making changes and restore it when needed.

Click on the link below:
http://www.kellys-korner-xp.com/xp_tweaks.htm
Scroll down to #275 and click "Lift Restrictions - TM, Regedit and CMD" in the left column. Go to File, choose "Save page as" All Files and save regtmcmdrestore.vbs to your desktop. Double-click on that file to allow the script to run and reboot when done. Since the script modifies certain registry settings your anti-virus package may warn you about it. Ignore the warning and allow it to run.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#10 shaly777

shaly777
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Texas
  • Local time:09:04 PM

Posted 23 June 2009 - 08:19 PM

boop, I'm on the process of rebooting now.

wj...some of your terminology is over my head.
"process monitor" "win-logon"....you lost me. I'm just learning! :thumbsup:
Who is this King of glory?.....Psalm 24:8
He is the Way, the Truth and the Life...John 14:6
His Name is Jesus!...Matthew 1:21

#11 shaly777

shaly777
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Texas
  • Local time:09:04 PM

Posted 23 June 2009 - 08:27 PM

Ok...DONE. I'm back up. :thumbsup: What now? And just FYI: The anti-virus (avast!) didn't warn me to stop.
Who is this King of glory?.....Psalm 24:8
He is the Way, the Truth and the Life...John 14:6
His Name is Jesus!...Matthew 1:21

#12 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,762 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:04 PM

Posted 23 June 2009 - 08:45 PM

Great job shaly, so it's all good now right?
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#13 shaly777

shaly777
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Texas
  • Local time:09:04 PM

Posted 23 June 2009 - 08:55 PM

No. :thumbsup: Unless I did something wrong. I got the regtmsmgrestore.vbs and double-clicked on iy and it sadi OK Finished. I rebooted, but task manager still isn't working. But, thank you for trying!! :flowers:
Who is this King of glory?.....Psalm 24:8
He is the Way, the Truth and the Life...John 14:6
His Name is Jesus!...Matthew 1:21

#14 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,762 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:04 PM

Posted 23 June 2009 - 09:00 PM

Ok , to play it safe I think we either should run HJT next or do a Repair (not full) install. What do you prefer.
BTW I forgot to say God Bless you posts ago :thumbsup:

Edited by boopme, 23 June 2009 - 09:02 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#15 shaly777

shaly777
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Texas
  • Local time:09:04 PM

Posted 23 June 2009 - 09:09 PM

Hey, I DID find this in the registry:
HKCU>Software>Micro>WingowsNT>CurrVers>TaskManager

Subkeys are
(Default) REG_SZ (value not set)
Preferences REG_BINARY ...and a whole bunch of numbers
UsrColumnSettings REG_BINARY ...and a whole bunch of numbers.


Does that mean anything?


I'll do HJT. If that'll help you diagnose. Or whatever you recommend. Also did I mention that my Excel has stopped working through all of this? It happened right after I did a sfc /scannow.

God Bless You too!!! And thanks! :thumbsup:

Edited by shaly777, 24 June 2009 - 02:42 PM.

Who is this King of glory?.....Psalm 24:8
He is the Way, the Truth and the Life...John 14:6
His Name is Jesus!...Matthew 1:21




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users