Home  |  Forums  |  914 Info  |  Blogs
 
914World.com - The fastest growing online 914 community!
 
Porsche, and the Porsche crest are registered trademarks of Dr. Ing. h.c. F. Porsche AG. This site is not affiliated with Porsche in any way.
Its only purpose is to provide an online forum for car enthusiasts. All other trademarks are property of their respective owners.
 

Welcome Guest ( Log In | Register )

2 Pages V  1 2 >  
 Reply to this topicStart new topic
> Need Some Computer Help Badly
jd74914
post Jan 23 2006, 04:58 PM
Post #1


Its alive
****

Group: Members
Posts: 4,780
Joined: 16-February 04
From: CT
Member No.: 1,659
Region Association: North East States
My computer was hit with a trojan horse I believe. When I hit Control-Alt-Delete it says that the task manager has been disabled by the system admin. (IMG:http://www.914world.com/bbs2/html/emoticons/dry.gif) I am the system admin. All of the virus scans I have won't get rid of it. (IMG:http://www.914world.com/bbs2/html/emoticons/headbang.gif) Does anyone have any advice?

Thanks alot in advance
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
bd1308
post Jan 23 2006, 05:02 PM
Post #2


Sir Post-a-lot
*****

Group: Members
Posts: 8,020
Joined: 24-January 05
From: Louisville,KY
Member No.: 3,501
other people will chime in with ideas...I personally believe at this point it would be better to redo the system.

I can backup the data, reinstall the OS of your choice and put the data back in for cheaper than any store near you.

b
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Dr. Roger
post Jan 23 2006, 05:07 PM
Post #3


A bat out of hell.
****

Group: Members
Posts: 3,944
Joined: 31-January 05
From: Hercules, California
Member No.: 3,533
Region Association: Northern California
did u try booting into safe mode? then scanning for the trojan?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
KaptKaos
post Jan 23 2006, 05:09 PM
Post #4


Family
****

Group: Members
Posts: 4,009
Joined: 23-April 03
From: Near Wausau
Member No.: 607
Region Association: Upper MidWest
Unless you are a geek yourself, you are looking at some pain here. My brother-in-law keeps getting the same things on his PC. I have cleaned and reformatted three times this year for him because it is just easier and faster then trying to fix it.

However, if you can run the system restore utility, you might be able to roll back your configuration to a period prior to infection. Good luck with that.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
jd74914
post Jan 23 2006, 05:09 PM
Post #5


Its alive
****

Group: Members
Posts: 4,780
Joined: 16-February 04
From: CT
Member No.: 1,659
Region Association: North East States
i scanned for the trojan, and found a few that i got today somehow and deleted them.

Britt: you mean totally reformating the computer?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
jd74914
post Jan 23 2006, 05:10 PM
Post #6


Its alive
****

Group: Members
Posts: 4,780
Joined: 16-February 04
From: CT
Member No.: 1,659
Region Association: North East States
what goes on in the system32 folder?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
yeahmag
post Jan 23 2006, 05:11 PM
Post #7


Advanced Member
****

Group: Members
Posts: 2,421
Joined: 18-April 05
From: Pasadena, CA
Member No.: 3,946
Region Association: Southern California
Odds are the machine has had back doors and the like installed on it warranting a full reinstall. You can try a Windows Rescue Disk to get at the data:

http://www.nu2.nu/pebuilder/

I'd strongly suggest backing up the important data and doing a full reinstall. Were you running up to date anti-virus software?

-Aaron
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
bd1308
post Jan 23 2006, 05:13 PM
Post #8


Sir Post-a-lot
*****

Group: Members
Posts: 8,020
Joined: 24-January 05
From: Louisville,KY
Member No.: 3,501
sometimes that works, but now these trojans are getting so bad that they infect system files and change group policy settings, usually reserved for use to lock-down functions system admins dont want thier users to mess with...

with that being said, most of the old stuff could be fixed by going to safe mode and then scanning with a updated and recent copy of your favorite spyware/adware scanning utility.

what I *would* do is do this yourslef. At $30-50 per hour (the nomial fee for local computer shops, except mine) it gets expensive real fast.



b
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
jd74914
post Jan 23 2006, 05:14 PM
Post #9


Its alive
****

Group: Members
Posts: 4,780
Joined: 16-February 04
From: CT
Member No.: 1,659
Region Association: North East States
the software was currently up to date

it found stuff and i got rid of it but i still can't get into the task manager, does anyone know how to get into the task manager to reenable all of the user's acesses to it
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
yeahmag
post Jan 23 2006, 05:17 PM
Post #10


Advanced Member
****

Group: Members
Posts: 2,421
Joined: 18-April 05
From: Pasadena, CA
Member No.: 3,946
Region Association: Southern California
OK. You need to try and do a scan in 'Safe Mode' now.... Odds are it's modified your registry. I'd still STRONGLY recommend a rebuild. Do you remember what virus it was.

BTW - I do this for a living, hence the paranoia.

-Aaron
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
bd1308
post Jan 23 2006, 05:18 PM
Post #11


Sir Post-a-lot
*****

Group: Members
Posts: 8,020
Joined: 24-January 05
From: Louisville,KY
Member No.: 3,501
QUOTE (jd74914 @ Jan 23 2006, 05:14 PM)
the software was currently up to date

it found stuff and i got rid of it but i still can't get into the task manager, does anyone know how to get into the task manager to reenable all of the user's acesses to it

what operating system do you have?

XP, 98, Me(oh god please no), 98SE, NT, 2000, 95, 3.1, 3.11, 3.0, 2.0, 1.0? Linux, Unix, Minux, FreeBSD, OS/2?

b
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
jd74914
post Jan 23 2006, 05:20 PM
Post #12


Its alive
****

Group: Members
Posts: 4,780
Joined: 16-February 04
From: CT
Member No.: 1,659
Region Association: North East States
XP
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
jd74914
post Jan 23 2006, 05:22 PM
Post #13


Its alive
****

Group: Members
Posts: 4,780
Joined: 16-February 04
From: CT
Member No.: 1,659
Region Association: North East States
how do you restart an XP computer in safe mode?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
efeinsmith
post Jan 23 2006, 05:35 PM
Post #14


Newbie
*

Group: Members
Posts: 18
Joined: 24-November 05
From: Centre, AL
Member No.: 5,185
I believe the F8 key when you boot will get you into Safe Mode (you may have to hit it multiple times when you get the starting WIndows msg).

As an aside, no single program will catch all bugs, especially spyware. As someone said earlier, some malicious programs will change system settings, so even if you get rid of the actual program, the changes are still there. I currently have three different spyware programs on my system.

Eric
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Tettster
post Jan 23 2006, 05:40 PM
Post #15


Member
**

Group: Members
Posts: 99
Joined: 8-November 05
Member No.: 5,089
Region Association: None
To start in safe mode, turn off your computer. When it turns on, tap the F8 key continuously while it's loading. Keep hitting the F8 key rapidly until you come up with a black and white, MSDOS-looking menu. Choose Safe Mode from there.

So I was googling your problem, and I came up with some attempts at helping you:

QUOTE
This error is caused by restrictions placed in Registry. DisableTaskMgr value is set to 1. To enable Task Manager, try any of these methods:

QUOTE
Method One:
Click Start, Run and type this command exactly as given below: (better - Copy and paste)

QUOTE
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f


QUOTE
Method 2

Download and run this REGedit fix and double-click it.


QUOTE
Method 3

   * Open Registry Editor (Regedit.exe) and navigate to:

   HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies\ System

   * In the right-pane, double-click DisableTaskMgr and set it's data to 0



QUOTE
Method 4:  Using Group Policy Editor - for Windows XP Professional
   * Click Start, Run, type gpedit.msc and click OK.
   * Navigate to this path

   User Configuration
   => Administrative Templates
   ==> System
   ===> Ctrl+Alt+Delete Options
   ====> Remove Task Manager

   * Double-click the Remove Task Manager option.
   * Set the policy to Not Configured.


All of these methods are from the website http://windowsxp.mvps.org/Taskmanager_error.htm

Britt's just trying to steal your money...! (IMG:http://www.914world.com/bbs2/html/emoticons/happy11.gif) (IMG:http://www.914world.com/bbs2/html/emoticons/poke.gif) (IMG:http://www.914world.com/bbs2/html/emoticons/happy11.gif)

- Ted
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
bd1308
post Jan 23 2006, 05:56 PM
Post #16


Sir Post-a-lot
*****

Group: Members
Posts: 8,020
Joined: 24-January 05
From: Louisville,KY
Member No.: 3,501
actually Ted, I fixed Jim's computer AND did upgrades on it for free, on my end.

it probably cost some money to ship it halfway across the US....but ya know.

some trojans actually disable regedit, so you're stuck in that case.

b
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
jd74914
post Jan 23 2006, 05:58 PM
Post #17


Its alive
****

Group: Members
Posts: 4,780
Joined: 16-February 04
From: CT
Member No.: 1,659
Region Association: North East States
ok i was just in safe mode, and did my few scans. they found nothing because i had already deleted all of virus stuff i saw and had "healed" the registry files. so thats good i guess.

now, how do i change it so i can get into the task manager? Its still saying : "Task Manager has been disabled by your administrator."

how do i get into admin to change this setting? I now know how to get into safe mode but how do i change the admin settings from there?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
yeahmag
post Jan 23 2006, 06:00 PM
Post #18


Advanced Member
****

Group: Members
Posts: 2,421
Joined: 18-April 05
From: Pasadena, CA
Member No.: 3,946
Region Association: Southern California
Use one of Ted's fixes above...

-Aaron
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
jd74914
post Jan 23 2006, 06:02 PM
Post #19


Its alive
****

Group: Members
Posts: 4,780
Joined: 16-February 04
From: CT
Member No.: 1,659
Region Association: North East States
ok in method 4 it says :
---------------------------
Windows cannot find 'gpedit.msc'. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
jd74914
post Jan 23 2006, 06:06 PM
Post #20


Its alive
****

Group: Members
Posts: 4,780
Joined: 16-February 04
From: CT
Member No.: 1,659
Region Association: North East States
THANKS FOR ALL OF YOUR HELP GUYS (IMG:http://www.914world.com/bbs2/html/emoticons/biggrin.gif) (IMG:http://www.914world.com/bbs2/html/emoticons/smilie_pokal.gif) (IMG:http://www.914world.com/bbs2/html/emoticons/biggrin.gif) (IMG:http://www.914world.com/bbs2/html/emoticons/smilie_pokal.gif)

I can't believe I actually fixed it.

Thanks again (IMG:http://www.914world.com/bbs2/html/emoticons/smilie_pokal.gif)
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
« Next Oldest · 914World Garage · Next Newest »
 

2 Pages V  1 2 >
Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 

Display Mode: Standard · Switch to: Linear+ · Switch to: Outline

Track this topic · Email this topic · Print this topic · Subscribe to this forum

- Lo-Fi Version Time is now: 8th May 2024 - 09:45 AM
Invision Power Board v9.1.4 © 2024  IPS, Inc.
All rights reserved 914World.com © since 2002
914World.com is the fastest growing online 914 community!
We have it all, classifieds, events, forums, vendors, parts, autocross, racing, technical articles, events calendar, newsletter, restoration, gallery, archives, history and more for your Porsche 914 ...