| |||||||||
![]() |
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
#1
|
|||
|
|||
|
Task Manager Problem
ok so when ever i try to go into task manager... CTRL+ALT+DEL then chose
task manager it jsut quits. It will pop up for about a 1/2 second then it will just quite out...is there a way to stop it from doing this? |
|
#2
|
||||
|
||||
|
I would imagine that you have some form of sypware/adware. Try programs like Spybot and see if you find anything.
|
|
#3
|
|||
|
|||
|
I've been having the same issue. What is the cause? I've run Ad-Aware twice and virus scanned and still nothing. Can someone please help me?
|
|
#4
|
|||
|
|||
|
i have find some DMAP.exe running in my task manager , when i deleted it then the task manager was not able to pop up. I have run Pestpatrol 4 then it goes .
|
|
#5
|
|||
|
|||
|
Right. That still didn't work. I scanned with PestPatrol 4 Home and TaskManager still won't show for more than a second.
And let's not forget that CTRL-ALT-DEL isn't doing anything either. Someone please e-mail me with a solution! Mike |
|
#6
|
||||
|
||||
|
Another thing to check is the registry. You most likely won't be able to open the registry editor just like the task manager unless you go into safe mode. Once in safe mode, go to Start Menu, Run, type: regedit
Under HKEY_CURRENT_USER and HKEY_LOCAL_MACHINE browse to the following: Software/Microsoft/Windows/Current Version/Run Check for suspicious items in this key. In the data field there will be a path to the program that is being run on startup. This may help you find where to delete these programs and prevent future problems. |
|
#7
|
|||
|
|||
|
You can also use HijackThis to check your registry for changed values. If you decide to use that program, before you choose to fix everything that comes up remember that it logs EVERY change. So if you set your homepage to something new, it's there. If you have anything that loads on bootup, it'll be there too. You can save the log and post it, I'm sure there are a few people who would be more than willing to go through it and look for potential problems.
|
|
#8
|
|||
|
|||
|
Quote:
I have this same problem. When I go into regedit in safe mode, there are no names or paths in the data field describing the location - just one word things like "default" or "no change." How do I get info so I can check it out the way you suggest? PS I am not a techie, so plain answer for the computer challenged set. |
|
#9
|
|||
|
|||
|
I have this same problem. When I go into regedit, there are no descriptions of path in data field, so I am afraid to just start deleting. how do I get the info so I can try this method? PS - regedit is the only technical word I know, so please keep answer compatible with the computer challenged set. Thanks.
|
|
#10
|
||||
|
||||
|
If you cannot find anything suspicious, or don't know what my be suspicious content in your registry, you may want to try the following:
*Browse to Symantec's web site: http://www.symantec.com *On the left-hand side under "Downloads", click the "Symantec Security Check" link. *Maximize the new window that opens and click "Go". *Maximize the new window that opens and click "Start" under "Virus Detection". This may take a while depending on your computer and your internet connection, but this is Symantec's free virus scan which may help you determine what is on your computer. Another alternative is purchasing Norton Internet Security. It's usually around $60, but it has a personal firewall, Norton AntiVirus, Norton Anti-Spam, and either prevents known adware/spyware from being installed on your computer, or displays them as a threat after you use it to scan your computer. Hope this helps. |
|
#11
|
|||
|
|||
|
I have the same problem, could someone look over my HijackThis list?
This is my log file that HijackThis gave me. My task manager hasn't been working, it will pop up for a 1/2 second or so and then disappear. I looked through the registry in safe mode, but I don't really know what to look for and didn't find anything. Any help would be greatly appreciated. Thanks!
Logfile of HijackThis v1.97.7 Scan saved at 6:51:32 PM, on 8/25/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Dell\AccessDirect\dadapp.exe C:\WINDOWS\System32\hkcmd.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe C:\WINDOWS\System32\MSGINAV.EXE C:\WINDOWS\System32\ctfmon.exe C:\Program Files\AIM\aim.exe C:\Program Files\AWS\WeatherBug\Weather.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Windows Media Player\wmplayer.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Austin\Desktop\HijackThis.exe O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [DadApp] C:\Program Files\Dell\AccessDirect\dadapp.exe O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" O4 - HKLM\..\Run: [Yahoo Instant Messenger] MSGINAV.EXE O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1 O4 - HKCU\..\RunOnce: [Yahoo Instant Messenger] MSGINAV.EXE O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: AIM (HKLM) O9 - Extra button: PartyPoker.com (HKLM) O9 - Extra 'Tools' menuitem: PartyPoker.com (HKLM) O9 - Extra button: Related (HKLM) O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM) O9 - Extra button: WeatherBug (HKCU) O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-9.cab O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://download.yahoo.com/dl/mail/ymmapi.cab O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://download.yahoo.com/dl/mail/autocomplete.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab |
|
#12
|
||||
|
||||
|
This file looks suspicious:
C:\WINDOWS\System32\MSGINAV.EXE Try backing it up, deleting it, and then see what happens. I did some research and it appears to be an AIM virus of some sort. Unfortunately, I have not been able to fine any accredited sources, so make sure you back it up. |
|
#13
|
|||
|
|||
|
Thanks!
It tooks some doing, but I think everything worked out. I would delete the file and then it would come right back. I finally deleted it and then restarted right away, and everything worked out. Thanks for the help!
Quote:
|
|
#14
|
|||
|
|||
|
I'am having the same problem with my task manager. i ran a virus scan, spybot, adware my HijackThis scan came back with Logfile of HijackThis v1.99.1 Scan saved at 2:50:36 PM, on 4/3/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe D:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe D:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe D:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe D:\WINDOWS\system32\spoolsv.exe D:\Program Files\Norton AntiVirus\navapsvc.exe D:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe D:\WINDOWS\system32\nvsvc32.exe D:\WINDOWS\System32\svchost.exe D:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe D:\WINDOWS\Explorer.EXE D:\Program Files\Common Files\stardock\TrayServer.exe D:\WINDOWS\system32\MCAFEEANTIVIRUS.EXE D:\Program Files\Common Files\Real\Update_OB\realsched.exe D:\Program Files\Common Files\Symantec Shared\ccApp.exe D:\WINDOWS\system32\ctfmon.exe D:\WINDOWS\System32\svchost.exe D:\Program Files\Mozilla Firefox\firefox.exe D:\Documents and Settings\mo\Desktop\DT\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ircspy.com/ R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr6/*http://www.yahoo.com O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - D:\Program Files\Norton AntiVirus\NavShExt.dll O2 - BHO: (no name) - {ED103D9F-3070-4580-AB1E-E5C179C1AE41} - (no file) O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - D:\Program Files\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [1A:Stardock TrayMonitor] "D:\Program Files\Common Files\stardock\TrayServer.exe" O4 - HKLM\..\Run: [McAfee Antivirus] MCAFEEANTIVIRUS.EXE O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [webHancer Survey |