I press Cntrl Alt Del and then click Task Manager on my computer (windows 2000) but cannot open a new window to display the list of open applications, processes etc. In the status bar I can see a blank box and a small green square associated with the Task Manager. This shows the CPU usage %. Recently I installed MSDE2000 software (MSSQLServer) and I had to make a change to a Control Panel setting. I am not sure if this has corrupted Task Manager. I am wondering if there is any patch to fix this.

Reply

I'm not sure what you are talking about there. Are you missing the tabs where it says Applications, Processes, Performance, etc...?

Give us a screenshot of your Task Manager.

Reply

Tell me something what happens when you double click the small green square on the system tray??? does it opens the Task Manager window??? Take care with this situation because it is possible that you are infected by a virus or worm, a few weeks ago some client of mine was infected by the MSNDIABLO worm and one thing that this malware do is the fact that you are not been able to open the task manager and also you can't open the registry editor, so, try to login with another admin user and check if you have the same problem, also, i suggest to make a test with your antivirus.

You can open the Task Manager directly simply by pressing the CONTROL+SHIFT+ESC keys.

BTW, there are some other worms that act very similar as the MSNDIABLO.

Now, what setting of the control panel you change??? i'm sure that your MSDE2000 software (MSSQLServer) installation have something to do with your problem because i also installed it a few years ago and never got a problem with the task manager.

Best regards,

Reply

Cntrl Shift Esc is also not opening any diaplayable window except a small box in the status bar at the bottom of screen.

The setting I had to change to install MSDE2000 in Control Panel was within Local Security Settings
Unsigned non-driver installation behaviour -> Silently succeed

 

 

 

Reply

That's very strange because as i said in my previous post the MSNDiablo worm prevents a user to access the task manager by pressing Ctrl Shift Esc or Ctrl Alt Del and also prevents to open the registry editor, it simply doesn't shows anything and in your case you are able to view the task manager icon on the system tray.

Do you scan your computer with an antivirus????

Some details about the MSNDiablo worm:

Technical Name: W32/MSNDiablo.A.worm
Alias: Win32/VB.NHI
MSNDiablo.A is written in Visual BASIC v6 programming language. This worm has a size of 122880 Bytes.

MSNDiablo.A create the following files:

• XEYU.EXE and XSFR.EXE, in the system folder of windows.
• STRAD.EXE and ZSER.EXE, in the windows folder.

These 4 files are copies of the worm.

• A1.EXE and S1.EXE, in the windows folder.
• D1.EXE, F1.EXE and SYSARC.EXE, in the system folder of windows.

These 5 files are copies of the file named CA.TXT, which is downloaded by the MSNDiablo.A worm.

MSNDiablo.A creates the following entries in the windows registry:

• HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
  SystemUpdate = %sysdir%\Xeyu.exe
  where %sysdir% is the system folder of Windows.
• HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
  System = %sysdir%\Xsfr.exe
• HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
  WindowsUpdate = %windir%\Strad.exe
  where %windir% is the folder of Windows.
• HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
  Windows = %windir%\Zser.exe
  
  With these entries, MSNDiablo.A is able to execute itself whenever Windows starts.
  
  
• HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
  WindowsK = %windir%\a1.exe
• HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
  WindowsD = %windir%\s1.exe
• HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
  SysteZ =%sysdir%\d1.exe
• HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
  SyZ = %sysdir%\f1.exe
  
  With these entries, the CA.TXT file, downloaded by MSNDiablo.A is able to execute itself whenever Windows starts.
  
  
• HKEY_CURRENT_USER\ Software\ VB and VBA Program Settings\ Sys\ Baja
• HKEY_CURRENT_USER\ Software\ VB and VBA Program Settings\ SysUpdate\ sistema

BTW, the change you made has nothing to do with your problem.

Best regards,

Reply

To fix your problem just click near the top of the task manager window.

Or you can right-click the green thing in the taskbar and press always on top.

Reply

I think it's best just to run your antivirus scanner go manually remove the startup files for the worm. Then, remove the registry for the worm as TavoxPeru showed up top.

xboxrulz

Reply

Task Manager Disabled
Task Manager Issue

Replying to TavoxPeruWhat happens if you press ctrl/shift/esc and you get a prompt saying your task manager has been disabled by administrator how would you fix that?

-question by Dumb@**

Reply

It means that an administrator has disabled Task Manager, simple as that. Unless you are administrator, you can't access Task Manager. My school does that to prevent us from shutting off security/network applications. It is most likely done via Group Policy Editor, which I'm assuming you are running a computer from a network, a domain, using Windows 2000, Windows XP Professional, Windows Vista Business or Windows Vista Ultimate.

If you can find a way to override this without knowing the Administrator password, it can be reported as a privilege escalation security threat.

Reply

Please try this to see if it is work.

Copy and Paste the content below in a file and save it as disabletaskmgr.reg

NOTE: Before working with registry. It is always recommended backup the registry first before any operations.

Double the file to import data to registry.

Reply