Task Manager Issue

[Nik1405241546 0]

I press Cntrl Alt Del and then click Task Manager on my computer (windows 2000) but cannot open a new window to display the list of open applications, processes etc.In the status bar I can see a blank box and a small green square associated with the Task Manager. This shows the CPU usage %. Recently I installed MSDE2000 software (MSSQLServer) and I had to make a change to a Control Panel setting. I am not sure if this has corrupted Task Manager. I am wondering if there is any patch to fix this.

[WeaponX 0]

I'm not sure what you are talking about there. Are you missing the tabs where it says Applications, Processes, Performance, etc...?Give us a screenshot of your Task Manager.

[TavoxPeru 0]

Tell me something what happens when you double click the small green square on the system tray??? does it opens the Task Manager window??? Take care with this situation because it is possible that you are infected by a virus or worm, a few weeks ago some client of mine was infected by the MSNDIABLO worm and one thing that this malware do is the fact that you are not been able to open the task manager and also you can't open the registry editor, so, try to login with another admin user and check if you have the same problem, also, i suggest to make a test with your antivirus.You can open the Task Manager directly simply by pressing the CONTROL+SHIFT+ESC keys.BTW, there are some other worms that act very similar as the MSNDIABLO.Now, what setting of the control panel you change??? i'm sure that your MSDE2000 software (MSSQLServer) installation have something to do with your problem because i also installed it a few years ago and never got a problem with the task manager.Best regards,

Edited June 17, 2007 by TavoxPeru (see edit history)

[Nik1405241546 0]

Tell me something what happens when you double click the small green square on the system tray??? does it opens the Task Manager window??? Take care with this situation because it is possible that you are infected by a virus or worm, a few weeks ago some client of mine was infected by the MSNDIABLO worm and one thing that this malware do is the fact that you are not been able to open the task manager and also you can't open the registry editor, so, try to login with another admin user and check if you have the same problem, also, i suggest to make a test with your antivirus.
You can open the Task Manager directly simply by pressing the CONTROL+SHIFT+ESC keys.

BTW, there are some other worms that act very similar as the MSNDIABLO.

Now, what setting of the control panel you change??? i'm sure that your MSDE2000 software (MSSQLServer) installation have something to do with your problem because i also installed it a few years ago and never got a problem with the task manager.

Best regards,

Cntrl Shift Esc is also not opening any diaplayable window except a small box in the status bar at the bottom of screen.

The setting I had to change to install MSDE2000 in Control Panel was within Local Security Settings
Unsigned non-driver installation behaviour -> Silently succeed

[TavoxPeru 0]

Cntrl Shift Esc is also not opening any diaplayable window except a small box in the status bar at the bottom of screen.

 

The setting I had to change to install MSDE2000 in Control Panel was within Local Security Settings

Unsigned non-driver installation behaviour -> Silently succeed

That's very strange because as i said in my previous post the MSNDiablo worm prevents a user to access the task manager by pressing Ctrl Shift Esc or Ctrl Alt Del and also prevents to open the registry editor, it simply doesn't shows anything and in your case you are able to view the task manager icon on the system tray.

 

Do you scan your computer with an antivirus????

 

Some details about the MSNDiablo worm:

 

Technical Name: W32/MSNDiablo.A.worm

Alias: Win32/VB.NHI

MSNDiablo.A is written in Visual BASIC v6 programming language. This worm has a size of 122880 Bytes.

 

MSNDiablo.A create the following files:

XEYU.EXE and XSFR.EXE, in the system folder of windows.

STRAD.EXE and ZSER.EXE, in the windows folder.

These 4 files are copies of the worm.

A1.EXE and S1.EXE, in the windows folder.

D1.EXE, F1.EXE and SYSARC.EXE, in the system folder of windows.

These 5 files are copies of the file named CA.TXT, which is downloaded by the MSNDiablo.A worm.

 

MSNDiablo.A creates the following entries in the windows registry:

HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run

SystemUpdate = %sysdir%\Xeyu.exe

where %sysdir% is the system folder of Windows.

HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run

System = %sysdir%\Xsfr.exe

HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run

WindowsUpdate = %windir%\Strad.exe

where %windir% is the folder of Windows.

HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run

Windows = %windir%\Zser.exe

 

With these entries, MSNDiablo.A is able to execute itself whenever Windows starts.

 

 

HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run

WindowsK = %windir%\a1.exe

HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run

WindowsD = %windir%\s1.exe

HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run

SysteZ =%sysdir%\d1.exe

HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run

SyZ = %sysdir%\f1.exe

 

With these entries, the CA.TXT file, downloaded by MSNDiablo.A is able to execute itself whenever Windows starts.

 

 

HKEY_CURRENT_USER\ Software\ VB and VBA Program Settings\ Sys\ Baja

HKEY_CURRENT_USER\ Software\ VB and VBA Program Settings\ SysUpdate\ sistema

BTW, the change you made has nothing to do with your problem.

 

Best regards,

[twot 0]

To fix your problem just click near the top of the task manager window.Or you can right-click the green thing in the taskbar and press always on top.

[xboxrulz1405241485 0]

I think it's best just to run your antivirus scanner go manually remove the startup files for the worm. Then, remove the registry for the worm as TavoxPeru showed up top.xboxrulz

[iGuest 3]

Task Manager Disabled

Task Manager Issue

 

Replying to TavoxPeruWhat happens if you press ctrl/shift/esc and you get a prompt saying your task manager has been disabled by administrator how would you fix that?

 

-question by Dumb@**

[FirefoxRocks 0]

Task Manager Disabled

 

Task Manager Issue

<a href=http://forums.xisto.com/topic/93437-topic/?findpost=1064372305 to TavoxPeru</a>What happens if you press ctrl/shift/esc and you get a prompt saying your task manager has been disabled by administrator how would you fix that?

 

-question by Dumb@**

It means that an administrator has disabled Task Manager, simple as that. Unless you are administrator, you can't access Task Manager. My school does that to prevent us from shutting off security/network applications. It is most likely done via Group Policy Editor, which I'm assuming you are running a computer from a network, a domain, using Windows 2000, Windows XP Professional, Windows Vista Business or Windows Vista Ultimate.

 

If you can find a way to override this without knowing the Administrator password, it can be reported as a privilege escalation security threat.

[magiccode91405241511 0]

Please try this to see if it is work.

 

Copy and Paste the content below in a file and save it as disabletaskmgr.reg

 

NOTE: Before working with registry. It is always recommended backup the registry first before any operations.

 

Double the file to import data to registry.

 

Windows Registry Editor Version 5.00[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]"DisableTaskMgr"=dword:00000000

[yordan 10]

Double the file to import data to registry.

I guess you mean "double CLICK ON the file", not "double the content of the file" ?

[FirefoxRocks 0]

If Task Manager is disabled, I highly doubt that you will be able to access the Windows Registry.

[xboxrulz1405241485 0]

The task manager and the Windows registry are two completely separate things. Your system will NOT work without the registry since all the login policies are all stored in there.xboxrulz

[FirefoxRocks 0]

The task manager and the Windows registry are two completely separate things. Your system will NOT work without the registry since all the login policies are all stored in there.
xboxrulz

I meant that since the administrative group disabled Task Manager, it is very likely that they disabled accessing regedit also, because if they didn't, users could probably undo the changes.

[xboxrulz1405241485 0]

If you are not administrator, you wouldn't be able to change anything in regedit in the first place for all Windows after Windows 9x. This holds especially true on Windows Vista since the User Account Control will actually stop you and ask for an administrator password before you can even see the regedit.It also depends on the administrator, maybe the environment allows users to kill off software that may be clogging up the system but don't allow them to use the regedit.If it's something that a virus has caused, then obviously the regedit is available (unless that virus also blocked regedit access then you're screwed). Else, as you said, the regedit is access denied.xboxrulz