msconfig.exe,regedit.exe,taskmgr.exe refuses to run

msconfig.exe,regedit.exe,taskmgr.exe refuses to run

Post by yvado » Fri, 10 Jun 2005 21:35:48


i have just bought a new set of computer and installed windows xp pro
service pack 2 integrated.but after installing all the drivers and
some utilities bundled with the set,i surprised that i can open
msconfig,regedit and taskmgr..i have tried renaming regedit.exe to
regedit.com and it works but applying that remedy to taskmgr and
msconfig did work. can anyone help please?

thanks

--
Posted using the http://www.yqcomputer.com/ interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.yqcomputer.com/
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.yqcomputer.com/
 
 
 

msconfig.exe,regedit.exe,taskmgr.exe refuses to run

Post by Bert Kinne » Fri, 10 Jun 2005 22:07:20

Hi,

The script on the following page will creates usable copies of
REGEDIT, MSCONFIG and Task Manager which were most likely disabled by
a virus.
http://www.yqcomputer.com/

Here is a combination of utilities that I have found to work very well
in the removal and prevention of virus infection, spyware, parasites,
malware and the like.
http://www.yqcomputer.com/

--
Regards,
Bert Kinney MS-MVP Shell/User
http://www.yqcomputer.com/

 
 
 

msconfig.exe,regedit.exe,taskmgr.exe refuses to run

Post by MAP » Fri, 10 Jun 2005 22:36:10


Line 275 left side
http://www.yqcomputer.com/

--
Mike Pawlak
 
 
 

msconfig.exe,regedit.exe,taskmgr.exe refuses to run

Post by Mike Hyndm » Fri, 10 Jun 2005 22:42:24

On Thu, 9 Jun 2005 09:07:20 -0400, "Bert Kinney" < XXXX@XXXXX.COM >


Bert,
What a useful script, many, many thanks.
Mike H
remove -bats- to reply
 
 
 

msconfig.exe,regedit.exe,taskmgr.exe refuses to run

Post by Bert Kinne » Fri, 10 Jun 2005 23:29:02

You're welcome, Mike.

--
Regards,
Bert Kinney MS-MVP Shell/User
http://www.yqcomputer.com/
 
 
 

msconfig.exe,regedit.exe,taskmgr.exe refuses to run

Post by Bruce Cham » Sat, 11 Jun 2005 10:36:44


The type of behavior you describe is typical behavior of more than
one virus/worm, the three below being the most common:

W32.Klez
http://www.yqcomputer.com/ @XXXXX.COM

W32.Yaha
http://www.yqcomputer.com/ @XXXXX.COM

W32.Spybot.Worm
http://www.yqcomputer.com/

Because many of the newer viruses and worms, such as the Spybot
mentioned above, can disable antivirus applications whose definitions
aren't kept up-to-date, try using one or more of the free on-line
scanners to double-check your system.

Trend Micro - Free online virus Scan
http://www.yqcomputer.com/

McAfee Security - FreeScan
http://www.yqcomputer.com/

Symantec Security Check
http://www.yqcomputer.com/

Panda ActiveScan - Free online scanner
http://www.yqcomputer.com/

Computer Associates:
http://www.yqcomputer.com/

DialogueScience:
http://www.yqcomputer.com/

F-Secure:
http://www.yqcomputer.com/

BitDefender
http://www.yqcomputer.com/

Freedom Online scanner
http://www.yqcomputer.com/


--

Bruce Chambers

Help us help you:
http://www.yqcomputer.com/
http://www.yqcomputer.com/ ~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
 
 
 

msconfig.exe,regedit.exe,taskmgr.exe refuses to run

Post by yvado » Sun, 12 Jun 2005 15:36:33


> Hi,
>
> The script on the following page will creates usable copies of
>
> REGEDIT, MSCONFIG and Task Manager which were most likely
> disabled by
> a virus.
> http://www.yqcomputer.com/
>
> Here is a combination of utilities that I have found to work
> very well
> in the removal and prevention of virus infection, spyware,
> parasites,
> malware and the like.
> http://www.yqcomputer.com/
>
> --
> Regards,
> Bert Kinney MS-MVP Shell/User
> http://www.yqcomputer.com/
>

> > i have just bought a new set of computer and installed
> > windows xp pro service pack 2 integrated.but after
> > installing all the drivers and some utilities bundled
> > with the set,i surprised that i can open
> > msconfig,regedit and taskmgr..i have tried renaming
> > regedit.exe to regedit.com and it works but applying that
> > remedy to taskmgr and msconfig did work. can anyone
> > help please?
> >
> > thanks

thanks for the reply..but i have tried xp_emergency utility already
and it still didnt work. I have tried scanning using the online scan
features of bit defender and picicillin,norton2005sytemworks,nod32 but
no virus nor trojans are detected. besides my unit is new and of
course its the hard disks first time to be written and i never
downloaded nor browse anything in the internet sans the picicillin and
bitdefenders homepage which i presume don have those trojans etc. I
have even uninstalled all software applications sans the board drivers
and the winXP itself ofcourse but to no avail....i still can run the
msconfig.exe and taskmgr.exe....i need more help pls...thank very much

--
Posted using the http://www.yqcomputer.com/ interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.yqcomputer.com/
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.yqcomputer.com/
 
 
 

msconfig.exe,regedit.exe,taskmgr.exe refuses to run

Post by Doug Knox » Mon, 13 Jun 2005 01:50:41

Try changing the names totally. Make Taskmgr.exe = manager.exe Msconfig.exe = cnfgure.exe

Some virus's look for the name, with a little more effort. Rather than an exact match, they'll terminate any process that has Taskmgr or Msconfig in the name.

Are the programs terminating as soon as you open them, or is there an error about the program being disabled by the Administrator?

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.yqcomputer.com/
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.yqcomputer.com/
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
 
 
 

msconfig.exe,regedit.exe,taskmgr.exe refuses to run

Post by yvado » Wed, 15 Jun 2005 03:36:12


thanks very much for the help.when i trying to run those
programs,(e.g.pressing ctrl-alt-del for taskmgr,start-run then typing
msconfig)nothing happens and no error messages were displayed.ie got
them running when i tried renaming these files (changing taskmgr.exe
to taskmgr.com and msconfig.exe to cnfigure.exe). i wondering why
the XPemergencyUtility program didt worked...another problem i have
just discovered is that i can open the add/remove folder on the
control panel: "Add or Remove programs has been restricted.please
check with your administrator" message appears, the fact that i am
using a single administrator account.....and i wondering why the
autoplay capability of my cd rom don work at all even when i set it
all to its default state...i am desperately in need of help here....
 
 
 

msconfig.exe,regedit.exe,taskmgr.exe refuses to run

Post by Doug Knox » Wed, 15 Jun 2005 04:51:45

As I said, some malware programs look at just the first part of the name Taskmgr, MSCONFIG, etc. Changing the extension won't help. The utility that I wrote uses Copy_of_MSConfig.exe as the file name, so MSCONFIG is there for the malware to find. Try re-naming the files to something different like MSCFG.EXE or TSKMNGR.EXE. The original name is not contained in the new file name and the malware should not be able to find it.

For the Add/Remove Programs restriction, run REGEDIT and go to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall

Look in the right pane for a value called NoAddRemovePrograms. If it exists, its probably set to 1. Double click it and set it to 0 (zero). Also look in

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall

If it the NoAddRemove value isn't in HKEY_LOCAL_MACHINE, don't worry about it.

If you can't run REGEDIT, either, try the renaming method described above.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.yqcomputer.com/
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.yqcomputer.com/
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.