RE: Can't run TaskManager

remotely but actually was not. Strange. From: Jeff Bunting [mailto:bunting.j...@gmail.com] Sent: Tuesday, September 08, 2009 12:00 PM To: NT System Admin Issues Subject: Re: Can't run TaskManager Richard, There was a thread last week about a fake antivirus that disabled task manager

Re: Can't run TaskManager

This is a new virus that works on the honor system. Please forward this message to all your friends, then delete some random files from your hard drive. Thanks! -- Virus ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

Re: Can't run TaskManager

Thanks for infecting us all Jeff! John W. Cook Systems Administrator Partnership For Strong Families Sent to you from my Blackberry in the Cloud From: Jeff Bunting To: NT System Admin Issues Sent: Fri Sep 11 16:51:17 2009 Subject: Re: Can't run TaskManager

Re: Can't run TaskManager

nting.j...@gmail.com] > *Sent:* Tuesday, September 08, 2009 12:00 PM > *To:* NT System Admin Issues > *Subject:* Re: Can't run TaskManager > > > > Richard, > > > There was a thread last week about a fake antivirus that disabled task > manager. It apparently d

RE: Can't run TaskManager

r "it" is. From: Jeff Bunting [mailto:bunting.j...@gmail.com] Sent: Tuesday, September 08, 2009 12:00 PM To: NT System Admin Issues Subject: Re: Can't run TaskManager Richard, There was a thread last week about a fake antivirus that disabled task manager. It apparent

Re: Can't run TaskManager

his one and have been > > following this thread closely, I was hoping to find out what it was > > even though I have no systems with this issue. > > > > Dave > > > > -Original Message- > > From: Ben Scott [mailto:mailvor...@gmail.com] > &g

Re: Can't run TaskManager

Not really. Tripwire or one of its workalikes such as samhain can do a great job for executables, though samhain requires cygwin. If you really want, you can use the md5sum from gnuwin32.sf.net, and use that against the Windows and Program Files directories, and store those on CD. Storing the ha

RE: Can't run TaskManager

g [mailto:richardmccl...@aspca.org] Sent: Wednesday, September 09, 2009 8:47 AM To: NT System Admin Issues Subject: RE: Can't run TaskManager I can give you a quick summary (I've already told Help Desk to wipe it, fearing a bot): TaskMgr.exe will not run from the task bar menu or fro

Re: Can't run TaskManager

:27 AM: > > > > Quicker yes, but I'm super curious about this one and have been > > following this thread closely, I was hoping to find out what it was > > even though I have no systems with this issue. > > > > Dave > > > > -Original Message- &

RE: Can't run TaskManager

this thread closely, I was hoping to find out what it was > even though I have no systems with this issue. > > Dave > > -Original Message- > From: Ben Scott [mailto:mailvor...@gmail.com] > Sent: Wednesday, September 09, 2009 7:55 AM > To: NT System Admin

RE: Can't run TaskManager

2009 7:55 AM To: NT System Admin Issues Subject: Re: Can't run TaskManager On Wed, Sep 9, 2009 at 10:36 AM, wrote: > Anyway, like Ben and another or two have said, it's time to wipe this one. >  Don't know when a very-well-hidden bot is going to show up (but not show up &

Re: Can't run TaskManager

On Wed, Sep 9, 2009 at 10:36 AM, wrote: > Anyway, like Ben and another or two have said, it's time to wipe this one. >  Don't know when a very-well-hidden bot is going to show up (but not show up > in TaskMgr because that's been whacked). It might not even be malware, but some accidentally scr

RE: Can't run TaskManager

ues Subject: Re: Can't run TaskManager Yes, and sorry for the confusion. It was a neighbor's home machine that would not let me boot into SafeMode. That one is frightening! (I told her that, as her son built it up for her and supposedly maintains it, it would really be up to him to

Re: Can't run TaskManager

Yes, and sorry for the confusion. It was a neighbor's home machine that would not let me boot into SafeMode. That one is frightening! (I told her that, as her son built it up for her and supposedly maintains it, it would really be up to him to wipe and re-build.) This machine here, again, th

Re: Can't run TaskManager

At 8:46 am today you wrote this. "I've checked the other symptoms. All "pass", except for not being able to run TaskMgr.exe. The CLI app "TaskList.exe" runs fine, as does the ability to lock the screen, change password, run Windows Update, turn IE tool bars on-and-off, etc. I have now booted in

Re: Can't run TaskManager

Who said anything about finding a root kit on THIS machine? We are finding absolutely nothing but losing the ability to run taskmgr.exe. -- RMc Jon Harris wrote on 09/09/2009 09:15:40 AM: > I would have thought that when he found a root kit on the machine. > Once one of those has been found

Re: Can't run TaskManager

I would have thought that when he found a root kit on the machine. Once one of those has been found only God will know if you find all the rest of the stuff that may have been installed. Jon On Wed, Sep 9, 2009 at 10:01 AM, Ben Scott wrote: > It's time to cut your losses and wipe-and-reload t

Re: Can't run TaskManager

It's time to cut your losses and wipe-and-reload the system. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

RE: Can't run TaskManager

n is XP SP3 and the MD5 sum of taskmgr.exe is > 2cd1c3506a85b38e2d17e61aded175c4. It has a create date of February > 28, 2006, 8:00:00 AM. > > > From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] > Sent: Wednesday, September 09, 2009 8:47 AM > To: NT System Admin Issues

RE: Can't run TaskManager

gt; Sent: Wednesday, September 09, 2009 8:47 AM > To: NT System Admin Issues > Subject: Re: Can't run TaskManager > > > Thanks... > > I've checked the other symptoms. All "pass", except for not being > able to run TaskMgr.exe. The CLI app "TaskList

RE: Can't run TaskManager

: Wednesday, September 09, 2009 8:58 AM To: NT System Admin Issues Subject: RE: Can't run TaskManager Thanks! As I just tolk Ken, that didn't seem to work. However, I had copied it onto the desktop rather than into [admin$\system32\. I'll check the permissions (as well as time

RE: Can't run TaskManager

ge removed] > > From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] > Sent: Wednesday, September 09, 2009 8:47 AM > To: NT System Admin Issues > Subject: Re: Can't run TaskManager > > > Thanks... > > I've checked the other symptoms. All "pa

RE: Can't run TaskManager

om: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] > Sent: Wednesday, 9 September 2009 8:47 PM > To: NT System Admin Issues > Subject: Re: Can't run TaskManager > > > Thanks... > > I've checked the other symptoms. All "pass", except for not being

RE: Can't run TaskManager

er 09, 2009 8:47 AM To: NT System Admin Issues Subject: Re: Can't run TaskManager Thanks... I've checked the other symptoms. All "pass", except for not being able to run TaskMgr.exe. The CLI app "TaskList.exe" runs fine, as does the ability to lock the s

RE: Can't run TaskManager

, September 09, 2009 8:47 AM To: NT System Admin Issues Subject: Re: Can't run TaskManager Thanks... I've checked the other symptoms. All "pass", except for not being able to run TaskMgr.exe. The CLI app "TaskList.exe" runs fine, as does the ability to lock th

RE: Can't run TaskManager

cl...@aspca.org] Sent: Wednesday, 9 September 2009 8:47 PM To: NT System Admin Issues Subject: Re: Can't run TaskManager Thanks... I've checked the other symptoms. All "pass", except for not being able to run TaskMgr.exe. The CLI app "TaskList.exe" runs fine, as do

Re: Can't run TaskManager

Thanks... I've checked the other symptoms. All "pass", except for not being able to run TaskMgr.exe. The CLI app "TaskList.exe" runs fine, as does the ability to lock the screen, change password, run Windows Update, turn IE tool bars on-and-off, etc. I have now booted into Safe Mode (I ran a

Re: Can't run TaskManager

On 8 Sep 2009 at 10:42, richardmccl...@aspca.org wrote: > I still cannot run Task Manager on this machine - either by right- clicking > the task bar and selecting it, or by Ctrl-Alt-Del and clicking the Task > Manager button. > > SO, I go to the machine and run "taskmgr.exe".To that I get a res

RE: Can't run TaskManager

From: paul chinnery [mailto:pdw1...@hotmail.com] Sent: Tuesday, September 08, 2009 3:46 PM To: NT System Admin Issues Subject: RE: Can't run TaskManager This was an issue I ran into last week on one user's pc. Tried everything I could including comparing the registry of a "goo

RE: Can't run TaskManager

are.com Subject: RE: Can't run TaskManager From: richardmccl...@aspca.org Date: Tue, 8 Sep 2009 14:04:23 -0500 Thanks! However, now that I can look at it, that value is indeed the "good" "%1" %* -- RMc "Damien Solodow" wrote on 09/08/2009 01:20:33 PM:

RE: Can't run TaskManager

ca.org [mailto:richardmccl...@aspca.org] > Sent: Tuesday, September 08, 2009 2:20 PM > To: NT System Admin Issues > Subject: Re: Can't run TaskManager > > > Intersting, thanks! > > HelpDesk is running a full MalwareBytes scan on it anyway. VIPRE is > scheduled to run a

RE: Can't run TaskManager

To see HKEY_CLASSES on a remote machine look under HKLM\Software\Classes From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] Sent: Tuesday, September 08, 2009 2:20 PM To: NT System Admin Issues Subject: Re: Can't run TaskManager Intersting, thanks! HelpDesk is runn

Re: Can't run TaskManager

another thought: have you tried *tasklist *from a command prompt? On Tue, Sep 8, 2009 at 12:45 PM, wrote: > > Is this registry key hidden? I can't find anything like this in either > HKCU or HKUsers... > > However, the file "taskman.exe" shows, both in Explorer and from a "dir" > command. How

Re: Can't run TaskManager

Intersting, thanks! HelpDesk is running a full MalwareBytes scan on it anyway. VIPRE is scheduled to run a deep scan as well late tonight. Other than TASKMGR.EXE returning a "not found", all _appears_ to be running correctly. HKEY_CLASSES will not display on a remote registry connection, so w

Re: Can't run TaskManager

No, I think all is good if that key doesn't exist. I don't have a "System" subkey under policies on my XP workstation either. This malware did modify the .exe associations in the registry too, but it sounds like you are able to launch other executables OK, your problem could be something else. M

Re: Can't run TaskManager

Is this registry key hidden? I can't find anything like this in either HKCU or HKUsers... However, the file "taskman.exe" shows, both in Explorer and from a "dir" command. However, if in Explorer I double-click the file icon, I get the "file not found" error pop-up. I'm about to do some deep

Re: Can't run TaskManager

Richard, There was a thread last week about a fake antivirus that disabled task manager. It apparently disabled it via a registry key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableTaskMgr" Jeff On Tue, Sep 8, 2009 at 11:42 AM, wrote: > > I have a desk