-
[RESOLVED] Task manager
Hi it had been some time since my last visit here, too busy I guess. Anyhow, a small problem that I am facing here, the task manager is not working and I receive this error massage which reads, “Task manager has been disabled by your administrator”
well i am the admin and for sure i did not do that, but the PC was infected with some trojan which i removed already, how can I inable the task manager again.
thank you and kind regards
-
-
-
Hi Ahmed, nice to see you back :) :) :)
Here's a KB article as well:
http://support.microsoft.com/kb/555480
-
thank you so much for your replies, i try all, still not able to make it work, i also noted that even my regedit command is not working.... need more suggestions please, once again thank you all
Ahmed
-
Hello Ahmed :)
It looks like either you still have some malware there, or the trojan you removed has damaged files.
Run these scans to make sure the system is clean
Housecall http://housecall.trendmicro.com/
ewido scan http://www.ewido.net/en/
Do not download the program. Just select the online scan at the left hand side
And this is an excellent program
SUPERAntiSpyware http://www.superantispyware.com/
Post back with the results. Some repairs might be needed once the system is clean.
Elaine
-
did the scanning, few Trojan identified, cleaned. at the moment i am still working with grayed task manager, my regedit command still not working I cannot access my registry audit neither from windows nor from tuneup utility.
Regards
Ahmed
-
OK then :)
First of all here is some help until we get them working again
Emergency copies of REGEDIT, MSCONFIG and Task Manager
http://www.dougknox.com/xp/utils/xp_emerutils.htm
Then try to fix Task Manager again with one of the suggestions in the link posted by Offsider
http://windowsxp.mvps.org/Taskmanager_error.htm
Regedit
Here are a couple of things to try
Was it disabled by administrator too
http://windowsxp.mvps.org/tweakuirest.htm
OR
http://www.kellys-korner-xp.com/xp_tweaks.htm
Line 173 left hand side
Elaine
-
Assalamuálaikum Ahmad...
I try to help you. I think virus or spyware was deleted by your antivirus/spyware, but those software doesn't yet repair your registry values.
So.. I think you have to create some tools to enable its (regedit and taskmanager)
I have my own tool , so if you want It I need your email address. Or if you want to create your self I 'll list my source code here :
1.Put 2 check box for enable registry editor and the other for taskmanager
2. Copy and paste this :
'----------------------------------------------------------------------'
Option Explicit
Global Const REG_SZ As Long = 1
Global Const REG_DWORD As Long = 4
Global Const KEY_ALL_ACCESS = &H3F
Global Const HKEY_CURRENT_USER = &H80000001
Declare Function RegCloseKey Lib "advapi32.dll" (ByVal hKey As Long) As Long
Declare Function RegOpenKeyEx Lib "advapi32.dll" Alias "RegOpenKeyExA" (ByVal hKey As Long, ByVal lpSubKey As String, ByVal ulOptions As Long, ByVal samDesired As Long, phkResult As Long) As Long
Declare Function RegSetValueExString Lib "advapi32.dll" Alias "RegSetValueExA" (ByVal hKey As Long, ByVal lpValueName As String, ByVal Reserved As Long, ByVal dwType As Long, ByVal lpValue As String, ByVal cbData As Long) As Long
Declare Function RegSetValueExLong Lib "advapi32.dll" Alias "RegSetValueExA" (ByVal hKey As Long, ByVal lpValueName As String, ByVal Reserved As Long, ByVal dwType As Long, lpValue As Long, ByVal cbData As Long) As Long
Public Function SetValueEx(ByVal hKey As Long, sValueName As String, lType As Long, vValue As Variant) As Long
Dim lValue As Long
Dim sValue As String
Select Case lType
Case REG_SZ
sValue = vValue
SetValueEx = RegSetValueExString(hKey, sValueName, 0&, lType, sValue, Len(sValue))
Case REG_DWORD
lValue = vValue
SetValueEx = RegSetValueExLong(hKey, sValueName, 0&, lType, lValue, 4)
End Select
End Function
Private Sub chkObjek_Click(Index As Integer)
On Error Resume Next
Select Case Index
Case 0: 'Task manager
If chkObjek(Index).Value = 1 Then
SetKeyValue HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Policies\System", "Disabletaskmgr", 1, REG_DWORD
Else
SetKeyValue HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Policies\System", "Disabletaskmgr", 0, REG_DWORD
End If
Case 1: 'Registry
If chkObjek(Index).Value = 1 Then
SetKeyValue HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Policies\System", "DisableRegistryTools", 1, REG_DWORD
Else
SetKeyValue HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Policies\System", "DisableRegistryTools", 0, REG_DWORD
End If
End Select
End Sub
Public Function SetKeyValue(lPredefinedKey As Long, sKeyName As String, sValueName As String, vValueSetting As Variant, lValueType As Long)
' Description:
' This Function will set the data field of a value
'
' Syntax:
' QueryValue Location, KeyName, ValueName, ValueSetting, ValueType
'
' Location must equal HKEY_CLASSES_ROOT, HKEY_CURRENT_USER, HKEY_lOCAL_MACHINE
' , HKEY_USERS
'
' KeyName is the key that the value is under (example: "Key1\SubKey1")
'
' ValueName is the name of the value you want create, or set the value of (example: "ValueTest")
'
' ValueSetting is what you want the value to equal
'
' ValueType must equal either REG_SZ (a string) Or REG_DWORD (an integer)
Dim lRetVal As Long 'result of the SetValueEx function
Dim hKey As Long 'handle of open key
'open the specified key
lRetVal = RegOpenKeyEx(lPredefinedKey, sKeyName, 0, KEY_ALL_ACCESS, hKey)
lRetVal = SetValueEx(hKey, sValueName, lValueType, vValueSetting)
RegCloseKey (hKey)
End Function
'--------------------------------------------------------------------------'
Ok i hope this can help you.
Wassalam
-
I did scan my PC using McAfee, super anti spy ware, online scan as provided above, still my task manager is an accessible and so is my registry I need support.
Regards and many thanks to all
-
Did none of the fixes which I posted above for Task Manager and regedit work?
If not try system file check. Get your XP installation CD out then
Start/Run and type in
sfc /scannow (there is a space before /)
OK
System File check will run and will not give you a report at the end. You just have to check to see if the problem is fixed.
Elaine
-
You say the regedit command is not working. You should be able to import .reg files.
Download this file and rename to policies.reg (doubleclick to import to your registry)
-
First I start with big thanks to everyone helped to solve the problem, measures taken was;
1-Scan with McAfee (several Items were Identified and cleaned)
2-Scan with Nod 32(several Items were Identified and cleaned)
3-Scan with super anti spyware (several Items were Identified and cleaned)
4-Scan with Trojan remover, I think this software did the magic, immediately it informed me that my registry tools were disabled and asked if I wanted to enable which did and I was able to access my registry editor. Then continued scanning and I identified several more registry entries which needed to be deleted, I backup my registry and proceeded with deleting the identified keys (proposed by Trojan remover). After that I accessed my registry and
Hive: HKEY_CURRENT_USER
Key: Software\Microsoft\Windows\CurrentVersion\Policies\System
Name: DisableTaskMgr
Type: REG_DWORD
Value: 1=Enablethis key, that is DISABLE TaskManager
Value: 0=Disablethis key, that is Don't Disable, Enable TaskManager
This did enabled my task manager
a) asmssl thank you for your tool, it worked for a while and then it stopped and I was back to square one
b) meggypeggy thank you your link was great
c) offsider thank you your link was great
d) SuperSparks nice to see you and nice to have your support (as usual)
e) dunedin you are a real asset to V Dr.
f) XOR because my registry was inaccessible, I couldn’t use your file nevertheless thank you for your valuable input
-
Well done Ahmed :) I`m glad to see you have managed to get it fixed.
One thing I noticed, you said you scanned with McAfee and Nod 32.
It is not good to have 2 antivirus installed on your machine. They usually fight with each other and you are lucky not to already have problems with them.
Elaine
-
thank you for your remark, I am aware of it and i disabled one and run the second then disabled the second and run the first, just to make sure. now I am removing NOD 32 and keeping McAfee