Task Manager Issue

	Task Manager Issue
	Discussion by Nik with 16 Replies. Last Update: July 18, 2009, 4:08 am (View Latest)	Page 1 of 2 pages.

Nik

I press Cntrl Alt Del and then click Task Manager on my computer (windows 2000) but cannot open a new window to display the list of open applications, processes etc.

In the status bar I can see a blank box and a small green square associated with the Task Manager. This shows the CPU usage %.

Recently I installed MSDE2000 software (MSSQLServer) and I had to make a change to a Control Panel setting. I am not sure if this has corrupted Task Manager. I am wondering if there is any patch to fix this.

Sat Jun 16, 2007 Reply New Discussion

WeaponX

I'm not sure what you are talking about there. Are you missing the tabs where it says Applications, Processes, Performance, etc...?

Give us a screenshot of your Task Manager.

Sat Jun 16, 2007 Reply New Discussion

TavoxPeru

Tell me something what happens when you double click the small green square on the system tray??? does it opens the Task Manager window??? Take care with this situation because it is possible that you are infected by a virus or worm, a few weeks ago some client of mine was infected by the MSNDIABLO worm and one thing that this malware do is the fact that you are not been able to open the task manager and also you can't open the registry editor, so, try to login with another admin user and check if you have the same problem, also, i suggest to make a test with your antivirus.

You can open the Task Manager directly simply by pressing the CONTROL+SHIFT+ESC keys.

BTW, there are some other worms that act very similar as the MSNDIABLO.

Now, what setting of the control panel you change??? i'm sure that your MSDE2000 software (MSSQLServer) installation have something to do with your problem because i also installed it a few years ago and never got a problem with the task manager.

Best regards,

Sun Jun 17, 2007 Reply New Discussion

Nik

QUOTE (TavoxPeru)

Cntrl Shift Esc is also not opening any diaplayable window except a small box in the status bar at the bottom of screen.

The setting I had to change to install MSDE2000 in Control Panel was within Local Security Settings
Unsigned non-driver installation behaviour -> Silently succeed

Wed Jun 20, 2007 Reply New Discussion

TavoxPeru

QUOTE (Nik)

That's very strange because as i said in my previous post the MSNDiablo worm prevents a user to access the task manager by pressing Ctrl Shift Esc or Ctrl Alt Del and also prevents to open the registry editor, it simply doesn't shows anything and in your case you are able to view the task manager icon on the system tray.

Do you scan your computer with an antivirus????

Some details about the MSNDiablo worm:

Technical Name: W32/MSNDiablo.A.worm
Alias: Win32/VB.NHI
MSNDiablo.A is written in Visual BASIC v6 programming language. This worm has a size of 122880 Bytes.

MSNDiablo.A create the following files:

XEYU.EXE and XSFR.EXE, in the system folder of windows.
STRAD.EXE and ZSER.EXE, in the windows folder.

These 4 files are copies of the worm.

A1.EXE and S1.EXE, in the windows folder.
D1.EXE, F1.EXE and SYSARC.EXE, in the system folder of windows.

These 5 files are copies of the file named CA.TXT, which is downloaded by the MSNDiablo.A worm.

MSNDiablo.A creates the following entries in the windows registry:

HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
SystemUpdate = %sysdir%\Xeyu.exe
where %sysdir% is the system folder of Windows.
HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
System = %sysdir%\Xsfr.exe
HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
WindowsUpdate = %windir%\Strad.exe
where %windir% is the folder of Windows.
HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
Windows = %windir%\Zser.exe

With these entries, MSNDiablo.A is able to execute itself whenever Windows starts.
HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
WindowsK = %windir%\a1.exe
HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
WindowsD = %windir%\s1.exe
HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
SysteZ =%sysdir%\d1.exe
HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
SyZ = %sysdir%\f1.exe

With these entries, the CA.TXT file, downloaded by MSNDiablo.A is able to execute itself whenever Windows starts.
HKEY_CURRENT_USER\ Software\ VB and VBA Program Settings\ Sys\ Baja
HKEY_CURRENT_USER\ Software\ VB and VBA Program Settings\ SysUpdate\ sistema

BTW, the change you made has nothing to do with your problem.

Best regards,

Wed Jun 27, 2007 Reply New Discussion

twot

To fix your problem just click near the top of the task manager window.

Or you can right-click the green thing in the taskbar and press always on top.

Mon Jul 30, 2007 Reply New Discussion

xboxrulz

I think it's best just to run your antivirus scanner go manually remove the startup files for the worm. Then, remove the registry for the worm as TavoxPeru showed up top.

xboxrulz

Mon Jul 30, 2007 Reply New Discussion

iGuest-Dumb@**

Task Manager Disabled
Task Manager Issue

Replying to TavoxPeruWhat happens if you press ctrl/shift/esc and you get a prompt saying your task manager has been disabled by administrator how would you fix that?

-question by Dumb@**

Sun Jul 27, 2008 Reply New Discussion

FirefoxRocks

QUOTE (iGuestDumb)

Task Manager Disabled

Task Manager Issue
<a href=http://www.astahost.com/index.php?showtopic=16057&view=findpost&p=105534>Replying to TavoxPeru</a>What happens if you press ctrl/shift/esc and you get a prompt saying your task manager has been disabled by administrator how would you fix that?

-question by Dumb@**
Link: view Post: 126633

It means that an administrator has disabled Task Manager, simple as that. Unless you are administrator, you can't access Task Manager. My school does that to prevent us from shutting off security/network applications. It is most likely done via Group Policy Editor, which I'm assuming you are running a computer from a network, a domain, using Windows 2000, Windows XP Professional, Windows Vista Business or Windows Vista Ultimate.

If you can find a way to override this without knowing the Administrator password, it can be reported as a privilege escalation security threat.

Sun Oct 19, 2008 Reply New Discussion

magiccode9

Please try this to see if it is work.

Copy and Paste the content below in a file and save it as disabletaskmgr.reg

NOTE: Before working with registry. It is always recommended backup the registry first before any operations.

Double the file to import data to registry.

CODE

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=dword:00000000

Sun Oct 19, 2008 Reply New Discussion

yordan

QUOTE

Double the file to import data to registry.

I guess you mean "double CLICK ON the file", not "double the content of the file" ?

Sun Oct 19, 2008 Reply New Discussion

FirefoxRocks

If Task Manager is disabled, I highly doubt that you will be able to access the Windows Registry.

Sun Oct 19, 2008 Reply New Discussion

xboxrulz

The task manager and the Windows registry are two completely separate things. Your system will NOT work without the registry since all the login policies are all stored in there.

xboxrulz

Mon Oct 20, 2008 Reply New Discussion

FirefoxRocks

QUOTE (xboxrulz)

The task manager and the Windows registry are two completely separate things. Your system will NOT work without the registry since all the login policies are all stored in there.

xboxrulz
Link: view Post: 129619

I meant that since the administrative group disabled Task Manager, it is very likely that they disabled accessing regedit also, because if they didn't, users could probably undo the changes.

Mon Oct 20, 2008 Reply New Discussion

xboxrulz

If you are not administrator, you wouldn't be able to change anything in regedit in the first place for all Windows after Windows 9x. This holds especially true on Windows Vista since the User Account Control will actually stop you and ask for an administrator password before you can even see the regedit.

It also depends on the administrator, maybe the environment allows users to kill off software that may be clogging up the system but don't allow them to use the regedit.

If it's something that a virus has caused, then obviously the regedit is available (unless that virus also blocked regedit access then you're screwed). Else, as you said, the regedit is access denied.

xboxrulz

Mon Oct 20, 2008 Reply New Discussion