Task Manager disabled (Home Edition)

[Smedlynf]

I have recently removed a hostile program from my computer that disabled
several functions. Among them are my task manager, access to a control panel
and the ability to right click on certain icons to access their properties.

The error messages I receive are one of two:
1. This function has been disabled by your administrator (this is new and I
am the sole owner)
2. You do not have access to this operation.

Can someone please tell me how to take back my computer. I know there are
several operations running when I turn it on that I cannot stop or control.
I am unable to install virus software, everything else installs fine. I
cannot restore my desktop either.

Thanks

 

[David H. Lipman]

From: "Smedlynf" <[email protected]>

| I have recently removed a hostile program from my computer that disabled
| several functions. Among them are my task manager, access to a control panel
| and the ability to right click on certain icons to access their properties.
|
| The error messages I receive are one of two:
| 1. This function has been disabled by your administrator (this is new and I
| am the sole owner)
| 2. You do not have access to this operation.
|
| Can someone please tell me how to take back my computer. I know there are
| several operations running when I turn it on that I cannot stop or control.
| I am unable to install virus software, everything else installs fine. I
| cannot restore my desktop either.
|
| Thanks

The following will fix the alterations in the local policies as well as scan the PC for
additional infectors.

Download MULTI_AV.EXE from the URL --
http://www.pctipp.ch/downloads/dl/35905.asp

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file.

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *

 

[Renata]

Dear Mr. Lipman!
Your advice for the post was very helpful in my case, as well. I didn't have
Task Manager, as well as Run command in the main menu.
I still have some kind of related problem.
I don't have Shut Down button with all the options in the main menu, Just
"Switch the users" one.
I did Sophos scanning, but it returned me just Run.
What can I do to return Shut Down button to the main menu?
Thank you very much in advance!

Regards,
Renata

From: "Smedlynf" <[email protected]>

| I have recently removed a hostile program from my computer that disabled
| several functions. Among them are my task manager, access to a control panel
| and the ability to right click on certain icons to access their properties.
|
| The error messages I receive are one of two:
| 1. This function has been disabled by your administrator (this is new and I
| am the sole owner)
| 2. You do not have access to this operation.
|
| Can someone please tell me how to take back my computer. I know there are
| several operations running when I turn it on that I cannot stop or control.
| I am unable to install virus software, everything else installs fine. I
| cannot restore my desktop either.
|
| Thanks

The following will fix the alterations in the local policies as well as scan the PC for
additional infectors.

Download MULTI_AV.EXE from the URL --
http://www.pctipp.ch/downloads/dl/35905.asp

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file.

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *

 

[David H. Lipman]

From: "Renata" <Renata @discussions.microsoft.com>

| Dear Mr. Lipman!
| Your advice for the post was very helpful in my case, as well. I didn't have
| Task Manager, as well as Run command in the main menu.
| I still have some kind of related problem.
| I don't have Shut Down button with all the options in the main menu, Just
| "Switch the users" one.
| I did Sophos scanning, but it returned me just Run.
| What can I do to return Shut Down button to the main menu?
| Thank you very much in advance!
|
| Regards,
| Renata
|

Hi Renata:

It's Dave or David. Please don't be so formal

Blocking the use of the "Run" command is a Local Policy under...
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
That malware will disable to limit your functionality to remove the malware and the Multi AV
Scanning Tool will restore this capability.

Presently the Multi AV utility doesn't have a capability to enable it so that's why it did
not help in this issue.

See the following...
http://msdn2.microsoft.com/en-us/library/ms811595.aspx

Go to; Start --> Run
execute; gpedit.msc

Browse...
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

You'll find...
"Remove run menu from the start menu"

Make sure this is DISABLED

You'll find...
"Disable and remove the Shut Down command "
Make sure this is DISABLED

If I can find what Registry settings this Group Policy setting alters, I will add it to the
Multi AV Scanning Tool.