Windows OS
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
 
 
User Name:
Password:
Remember me
Go Back   ASP Free ForumsSystem AdministrationWindows OS

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread ASP Free Forums Sponsor:
  #1  
Old June 7th, 2004, 06:37 PM
sumone4life sumone4life is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Jun 2004
Posts: 1 sumone4life User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Task Manager Problem

ok so when ever i try to go into task manager... CTRL+ALT+DEL then chose
task manager it jsut quits. It will pop up for about a 1/2 second then it will
just quite out...is there a way to stop it from doing this?

Reply With Quote
  #2  
Old June 21st, 2004, 07:17 AM
edwinbrains's Avatar
edwinbrains edwinbrains is offline
Contributing User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Mar 2004
Location: UK
Posts: 140 edwinbrains User rank is Private First Class (20 - 50 Reputation Level)edwinbrains User rank is Private First Class (20 - 50 Reputation Level) 
Time spent in forums: 8 h 44 m 10 sec
Reputation Power: 5
I would imagine that you have some form of sypware/adware. Try programs like Spybot and see if you find anything.

Reply With Quote
  #3  
Old July 11th, 2004, 11:15 AM
mike1138 mike1138 is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Jul 2004
Posts: 2 mike1138 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Exclamation Task Manager

I've been having the same issue. What is the cause? I've run Ad-Aware twice and virus scanned and still nothing. Can someone please help me?

Reply With Quote
  #4  
Old July 13th, 2004, 08:08 AM
ralf_solo ralf_solo is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Jul 2004
Posts: 1 ralf_solo User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Angry Yes it's a stupid spyware

i have find some DMAP.exe running in my task manager , when i deleted it then the task manager was not able to pop up. I have run Pestpatrol 4 then it goes .

Reply With Quote
  #5  
Old July 13th, 2004, 09:05 PM
mike1138 mike1138 is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Jul 2004
Posts: 2 mike1138 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Thumbs down Still Doesn't Work

Right. That still didn't work. I scanned with PestPatrol 4 Home and TaskManager still won't show for more than a second.

And let's not forget that CTRL-ALT-DEL isn't doing anything either.

Someone please e-mail me with a solution!

Mike

Reply With Quote
  #6  
Old July 18th, 2004, 08:03 PM
jmurrayhead's Avatar
jmurrayhead jmurrayhead is offline
The Drunken Moderator
ASP Free God 17th Plane (13000 - 13499 posts)
 
Join Date: Feb 2004
Location: Reston, VA, USA
Posts: 13,069 jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)  Folding Points: 82412 Folding Title: Advanced FolderFolding Points: 82412 Folding Title: Advanced FolderFolding Points: 82412 Folding Title: Advanced FolderFolding Points: 82412 Folding Title: Advanced FolderFolding Points: 82412 Folding Title: Advanced Folder
Time spent in forums: 3 Months 6 Days 17 h 9 m 50 sec
Reputation Power: 1580
Facebook
Another thing to check is the registry. You most likely won't be able to open the registry editor just like the task manager unless you go into safe mode. Once in safe mode, go to Start Menu, Run, type: regedit
Under HKEY_CURRENT_USER and HKEY_LOCAL_MACHINE browse to the following: Software/Microsoft/Windows/Current Version/Run

Check for suspicious items in this key. In the data field there will be a path to the program that is being run on startup. This may help you find where to delete these programs and prevent future problems.

Reply With Quote
  #7  
Old July 19th, 2004, 07:46 PM
Qazzian Qazzian is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Jul 2004
Location: Toronto, Canada
Posts: 15 Qazzian User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Send a message via AIM to Qazzian Send a message via MSN to Qazzian
You can also use HijackThis to check your registry for changed values. If you decide to use that program, before you choose to fix everything that comes up remember that it logs EVERY change. So if you set your homepage to something new, it's there. If you have anything that loads on bootup, it'll be there too. You can save the log and post it, I'm sure there are a few people who would be more than willing to go through it and look for potential problems.

Reply With Quote
  #8  
Old August 15th, 2004, 05:34 PM
jseitz jseitz is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Aug 2004
Posts: 2 jseitz User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Unhappy Help!

Quote:
Originally Posted by jmurrayhead
Another thing to check is the registry. You most likely won't be able to open the registry editor just like the task manager unless you go into safe mode. Once in safe mode, go to Start Menu, Run, type: regedit
Under HKEY_CURRENT_USER and HKEY_LOCAL_MACHINE browse to the following: Software/Microsoft/Windows/Current Version/Run

Check for suspicious items in this key. In the data field there will be a path to the program that is being run on startup. This may help you find where to delete these programs and prevent future problems.



I have this same problem. When I go into regedit in safe mode, there are no names or paths in the data field describing the location - just one word things like "default" or "no change." How do I get info so I can check it out the way you suggest? PS I am not a techie, so plain answer for the computer challenged set.

Reply With Quote
  #9  
Old August 15th, 2004, 05:37 PM
jseitz jseitz is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Aug 2004
Posts: 2 jseitz User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Unhappy Help?

I have this same problem. When I go into regedit, there are no descriptions of path in data field, so I am afraid to just start deleting. how do I get the info so I can try this method? PS - regedit is the only technical word I know, so please keep answer compatible with the computer challenged set. Thanks.

Reply With Quote
  #10  
Old August 15th, 2004, 06:44 PM
jmurrayhead's Avatar
jmurrayhead jmurrayhead is offline
The Drunken Moderator
ASP Free God 17th Plane (13000 - 13499 posts)
 
Join Date: Feb 2004
Location: Reston, VA, USA
Posts: 13,069 jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)  Folding Points: 82412 Folding Title: Advanced FolderFolding Points: 82412 Folding Title: Advanced FolderFolding Points: 82412 Folding Title: Advanced FolderFolding Points: 82412 Folding Title: Advanced FolderFolding Points: 82412 Folding Title: Advanced Folder
Time spent in forums: 3 Months 6 Days 17 h 9 m 50 sec
Reputation Power: 1580
Facebook
If you cannot find anything suspicious, or don't know what my be suspicious content in your registry, you may want to try the following:

*Browse to Symantec's web site: http://www.symantec.com
*On the left-hand side under "Downloads", click the "Symantec Security Check" link.
*Maximize the new window that opens and click "Go".
*Maximize the new window that opens and click "Start" under "Virus Detection".

This may take a while depending on your computer and your internet connection, but this is Symantec's free virus scan which may help you determine what is on your computer.

Another alternative is purchasing Norton Internet Security. It's usually around $60, but it has a personal firewall, Norton AntiVirus, Norton Anti-Spam, and either prevents known adware/spyware from being installed on your computer, or displays them as a threat after you use it to scan your computer.

Hope this helps.

Reply With Quote
  #11  
Old August 25th, 2004, 06:56 PM
delimeat101 delimeat101 is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Aug 2004
Posts: 2 delimeat101 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
I have the same problem, could someone look over my HijackThis list?

This is my log file that HijackThis gave me. My task manager hasn't been working, it will pop up for a 1/2 second or so and then disappear. I looked through the registry in safe mode, but I don't really know what to look for and didn't find anything. Any help would be greatly appreciated. Thanks!

Logfile of HijackThis v1.97.7
Scan saved at 6:51:32 PM, on 8/25/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Dell\AccessDirect\dadapp.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\WINDOWS\System32\MSGINAV.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\AWS\WeatherBug\Weather.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Austin\Desktop\HijackThis.exe

O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [DadApp] C:\Program Files\Dell\AccessDirect\dadapp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Yahoo Instant Messenger] MSGINAV.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\RunOnce: [Yahoo Instant Messenger] MSGINAV.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM (HKLM)
O9 - Extra button: PartyPoker.com (HKLM)
O9 - Extra 'Tools' menuitem: PartyPoker.com (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O9 - Extra button: WeatherBug (HKCU)
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-9.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://download.yahoo.com/dl/mail/ymmapi.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://download.yahoo.com/dl/mail/autocomplete.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Reply With Quote
  #12  
Old August 26th, 2004, 08:23 PM
jmurrayhead's Avatar
jmurrayhead jmurrayhead is offline
The Drunken Moderator
ASP Free God 17th Plane (13000 - 13499 posts)
 
Join Date: Feb 2004
Location: Reston, VA, USA
Posts: 13,069 jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)jmurrayhead User rank is General 9th Grade (Above 100000 Reputation Level)  Folding Points: 82412 Folding Title: Advanced FolderFolding Points: 82412 Folding Title: Advanced FolderFolding Points: 82412 Folding Title: Advanced FolderFolding Points: 82412 Folding Title: Advanced FolderFolding Points: 82412 Folding Title: Advanced Folder
Time spent in forums: 3 Months 6 Days 17 h 9 m 50 sec
Reputation Power: 1580
Facebook
This file looks suspicious:
C:\WINDOWS\System32\MSGINAV.EXE

Try backing it up, deleting it, and then see what happens. I did some research and it appears to be an AIM virus of some sort. Unfortunately, I have not been able to fine any accredited sources, so make sure you back it up.

Reply With Quote
  #13  
Old August 30th, 2004, 01:27 PM
delimeat101 delimeat101 is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Aug 2004
Posts: 2 delimeat101 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Thanks!

It tooks some doing, but I think everything worked out. I would delete the file and then it would come right back. I finally deleted it and then restarted right away, and everything worked out. Thanks for the help!



Quote:
Originally Posted by jmurrayhead
This file looks suspicious:
C:\WINDOWS\System32\MSGINAV.EXE

Try backing it up, deleting it, and then see what happens. I did some research and it appears to be an AIM virus of some sort. Unfortunately, I have not been able to fine any accredited sources, so make sure you back it up.

Reply With Quote
  #14  
Old April 3rd, 2005, 02:57 PM
proverbmo proverbmo is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Apr 2005
Posts: 1 proverbmo User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 4 m 27 sec
Reputation Power: 0
Exclamation

I'am having the same problem with my task manager.

i ran a virus scan, spybot, adware
my HijackThis scan came back with

Logfile of HijackThis v1.99.1
Scan saved at 2:50:36 PM, on 4/3/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
D:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
D:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
D:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Norton AntiVirus\navapsvc.exe
D:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Common Files\stardock\TrayServer.exe
D:\WINDOWS\system32\MCAFEEANTIVIRUS.EXE
D:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\Program Files\Common Files\Symantec Shared\ccApp.exe
D:\WINDOWS\system32\ctfmon.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Documents and Settings\mo\Desktop\DT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ircspy.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr6/*http://www.yahoo.com
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - D:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {ED103D9F-3070-4580-AB1E-E5C179C1AE41} - (no file)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - D:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [1A:Stardock TrayMonitor] "D:\Program Files\Common Files\stardock\TrayServer.exe"
O4 - HKLM\..\Run: [McAfee Antivirus] MCAFEEANTIVIRUS.EXE
O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [webHancer Survey