Task Manager Disabled

[Cathy Bowen]

Recently detected Malware/Spyware and removed using Spyware Doctor software.
However, when I use the Ctl-Alt-Delete function to access Task Manager I get
the message "Task Manager has been Disabled by your administrator".

I noted on another forum that this problem could be fixed using a file that
is available.

Any information regarding how to fix this problem?

Thanks for any help.

Randy

 

[David H. Lipman]

From: "Cathy Bowen" <[email protected]>

| Recently detected Malware/Spyware and removed using Spyware Doctor software.
| However, when I use the Ctl-Alt-Delete function to access Task Manager I get
| the message "Task Manager has been Disabled by your administrator".
|
| I noted on another forum that this problem could be fixed using a file that
| is available.
|
| Any information regarding how to fix this problem?
|
| Thanks for any help.
|
| Randy
|

Download MULTI_AV.EXE from the URL --
http://www.pctipp.ch/ds/28400/28470/Multi_AV.exe

http://www.pctipp.ch/downloads/dl/35905.asp

English:
http://www.raymond.cc/blog/archives/2008/01/09/scan-your-computer-with-multiple-anti-virus-for-free/

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file.

Additional Instructions:
http://pcdid.com/Multi_AV.htm

* * Please report back your results * *

 

[edward]

Recently detected Malware/Spyware and removed using Spyware Doctor software.
However, when I use the Ctl-Alt-Delete function to access Task Manager I get
the message "Task Manager has been Disabled by your administrator".

I noted on another forum that this problem could be fixed using a file that
is available.

Any information regarding how to fix this problem?

Thanks for any help.

Randy

I would not download a .exe to fix this,thats a good way to get virus/spyware
copy these and save as .reg files and just click it Should fix you right up



Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=dword:00000000

and this key

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=dword:00000000

 

[David H. Lipman]

From: "edward" <[email protected]>


|
| I would not download a .exe to fix this,thats a good way to get virus/spyware
| copy these and save as .reg files and just click it Should fix you right up
|
| Windows Registry Editor Version 5.00
|
| [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
| "DisableTaskMgr"=dword:00000000
|
| and this key
|
| Windows Registry Editor Version 5.00
|
| [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
| "DisableTaskMgr"=dword:00000000

Yes. However that solves the symptoms but not the cause.

The problem is malware that sets these Local Policies to make it more difficult to remove
the malware that is resident on the PC.

 

[edward]

From: "edward" <[email protected]>


|
| I would not download a .exe to fix this,thats a good way to get virus/spyware
| copy these and save as .reg files and just click it Should fix you right up
|
| Windows Registry Editor Version 5.00
|
| [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
| "DisableTaskMgr"=dword:00000000
|
| and this key
|
| Windows Registry Editor Version 5.00
|
| [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
| "DisableTaskMgr"=dword:00000000

Yes. However that solves the symptoms but not the cause.

The problem is malware that sets these Local Policies to make it more difficult to remove
the malware that is resident on the PC.

True but as stated he already removed the mailware.
So the only thing he needs to do is reset his registry Not download
something else that can destroy his computer.

 

[David H. Lipman]

From: "edward" <[email protected]>



| True but as stated he already removed the mailware.
| So the only thing he needs to do is reset his registry Not download
| something else that can destroy his computer.

That's an assumption only. Spyware Doctor is an anti spyware/adware application and may not
detect other Trojans that also do this.

The fact is, one software may catch what another software may miss.

You also have to ask, why couldn't Spyware Doctor fix these Local policies if it detected
malware that may have set them ?
The answer may be that it didn't find all the malware on the PC.

 

[edward]

From: "edward" <[email protected]>



| True but as stated he already removed the mailware.
| So the only thing he needs to do is reset his registry Not download
| something else that can destroy his computer.

That's an assumption only. Spyware Doctor is an anti spyware/adware application and may not
detect other Trojans that also do this.

The fact is, one software may catch what another software may miss.

You also have to ask, why couldn't Spyware Doctor fix these Local policies if it detected
malware that may have set them ?
The answer may be that it didn't find all the malware on the PC.

The reason that Spyware docter did not change these policies is because
this is a common setting.I personally have it set up on my kids account and
if any adware cleaner changed it on me I would be pretty pissed.The fact of
the matter is your just tring to push this program on people.There are plenty
of adware cleaners out there.To list two I personally use.
adaware
Spybot

 

[David H. Lipman]

From: "edward" <[email protected]>


| The reason that Spyware docter did not change these policies is because
| this is a common setting.I personally have it set up on my kids account and
| if any adware cleaner changed it on me I would be pretty pissed.The fact of
| the matter is your just tring to push this program on people.There are plenty
| of adware cleaners out there.To list two I personally use.
| adaware
| Spybot
|

What do you mean "push this program on people" ?

 

[edward]

From: "edward" <[email protected]>


| The reason that Spyware docter did not change these policies is because
| this is a common setting.I personally have it set up on my kids account and
| if any adware cleaner changed it on me I would be pretty pissed.The fact of
| the matter is your just tring to push this program on people.There are plenty
| of adware cleaners out there.To list two I personally use.
| adaware
| Spybot
|

What do you mean "push this program on people" ?

Appearently your trying to push this program on this guy.
The original post read
Recently detected Malware/Spyware and removed using Spyware Doctor software.
However, when I use the Ctl-Alt-Delete function to access Task Manager I get
the message "Task Manager has been Disabled by your administrator".

I noted on another forum that this problem could be fixed using a file that
is available.



And your response was to download another adware cleaner.Will that program
modify his registry?
I was painting my windowsill earlier today the brush slipped and I got paint
on the window.
Your solution

Repaint the window sill
My solution

wipe the paint off the window

 

[David H. Lipman]

From: "edward" <[email protected]>


| Appearently your trying to push this program on this guy.
| The original post read
| Recently detected Malware/Spyware and removed using Spyware Doctor software.
| However, when I use the Ctl-Alt-Delete function to access Task Manager I get
| the message "Task Manager has been Disabled by your administrator".
|
| I noted on another forum that this problem could be fixed using a file that
| is available.
|
| And your response was to download another adware cleaner.Will that program
| modify his registry?
| I was painting my windowsill earlier today the brush slipped and I got paint
| on the window.
| Your solution
|
| Repaint the window sill
| My solution
|
| wipe the paint off the window

I'm sorry but that was vague response.

If you are inferring that I am "pushing" my Multi AV Scanning Tool, that is totally
incorrect.

The fact is I wrote it to deal with exactly what is going on "here", in this thread.

Not only will the Multi-AV undo the Local Policies that malware use in a self preservation
techniques but it provides hundreds of thousands of signature and heuristic based malware
detection using main-stream anti virus company command line scanners.

Therefore in using the Multi AV not only would it deal specifically with the Local Policy
settings noted by Cathy but it will also undo other policies that may be set that she is
presently unaware of. Additionally through signature and heuristic based malware detection
it may find some latent malware on the PC that Spyware Doctor missed or in fact, doesn't
even target.

And to again address the concept of "pushing" my Multi-AV, I provide it as CareWare (aka;
charity-ware).

 

[edward]

From: "edward" <[email protected]>


| Appearently your trying to push this program on this guy.
| The original post read
| Recently detected Malware/Spyware and removed using Spyware Doctor software.
| However, when I use the Ctl-Alt-Delete function to access Task Manager I get
| the message "Task Manager has been Disabled by your administrator".
|
| I noted on another forum that this problem could be fixed using a file that
| is available.
|
| And your response was to download another adware cleaner.Will that program
| modify his registry?
| I was painting my windowsill earlier today the brush slipped and I got paint
| on the window.
| Your solution
|
| Repaint the window sill
| My solution
|
| wipe the paint off the window

I'm sorry but that was vague response.

If you are inferring that I am "pushing" my Multi AV Scanning Tool, that is totally
incorrect.

The fact is I wrote it to deal with exactly what is going on "here", in this thread.

Not only will the Multi-AV undo the Local Policies that malware use in a self preservation
techniques but it provides hundreds of thousands of signature and heuristic based malware
detection using main-stream anti virus company command line scanners.

Therefore in using the Multi AV not only would it deal specifically with the Local Policy
settings noted by Cathy but it will also undo other policies that may be set that she is
presently unaware of. Additionally through signature and heuristic based malware detection
it may find some latent malware on the PC that Spyware Doctor missed or in fact, doesn't
even target.

And to again address the concept of "pushing" my Multi-AV, I provide it as CareWare (aka;
charity-ware).

So my thoughts were correct you wrote this program.If I downloaded this
program would it change my registry too.How would your program know what the
correct policies are.

 

[David H. Lipman]

From: "edward" <[email protected]>


| So my thoughts were correct you wrote this program.If I downloaded this
| program would it change my registry too.How would your program know what the
| correct policies are.

The default is none. That is either the key is set to '0' or the key doesn't exist.
Therefore it sets the policies to the default on those policies that limit the capability of
a person to remove malware or inhibit the use of the OS.

One example has to do SmitFraud Trojan type infections which force the background to display
a partcular HTML file and lock down active desktop so you can't change the background.

BTW: It is completely open source interpreted code.

 

[Jezel]

Hi edward,
Your information seems to be able to help my problem with my task manager
being disabled and I didn't do it....can you please give me step by step on
following the instructions you gave below....to correct the problem. I'm just
little lost. Thanks so much! Have a great day...
jezel mcqueen

Recently detected Malware/Spyware and removed using Spyware Doctor software.
However, when I use the Ctl-Alt-Delete function to access Task Manager I get
the message "Task Manager has been Disabled by your administrator".

I noted on another forum that this problem could be fixed using a file that
is available.

Any information regarding how to fix this problem?

Thanks for any help.

Randy

I would not download a .exe to fix this,thats a good way to get virus/spyware
copy these and save as .reg files and just click it Should fix you right up



Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=dword:00000000

and this key

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=dword:00000000