Reading Windows

Apr 05, 2006 10:14 # 42455

Disposable_Fishspastic ** posts about...

Sgrunt virus on windows 2000

Basically im pretty sure i found the threat but cant delete it as its in use and when i ctrl alt delete to prompt the option of task manager so i can cancel the running virus in order to have power to delete it while not in use the task manager button is inactive so basically i think ive got the solution sorted if only i could access task manager?

Any wizz kids got an idea?

Cheers guys

themoreyouknowthemoreyouknowyoudontknowwhatyouknow

Apr 05, 2006 13:03 # 42456

null *** has a suggestion...

Re: Sgrunt virus on windows 2000

?% | 1

When you press Control-Shift-Esc, do you get a message saying "Task Manager has been disabled by your administrator"?
If yes, your registry has been messed with. More info here.

In the meantime...

  • Give Process Explorer a try. It's like Task Manager de luxe on steroids.

  • If you have access to another computer, build a BartPE CD with at least the Ad-Aware and McAfee plugins. Then boot your computer from this clean CD and let the scanners loose.

Good luck, and yell if you run into problems!

"God is dead." - Nietzsche, 1882 "Nietzsche is dead." - God, 1900

Apr 05, 2006 17:49 # 42457

Disposable_Fishspastic ** replies...

Re: Sgrunt virus on windows 2000

I went ahead with that process explorer and cant believe how easy it is to use man, i havent completely had a clean up but i was able to kill the virus files detected in my scan from running, then i went to their locations in the p.c. and deleted them no problemo...

Big yourself up haha

thanks

themoreyouknowthemoreyouknowyoudontknowwhatyouknow

Oct 20, 2006 17:13 # 43522

taskfix * replies...

Re: Sgrunt virus on windows 2000

To access your Task Manager you need a fix.

Download the FREE tool from here Task Manager Fix

Oct 23, 2006 11:53 # 43530

yoshi314 * throws in his two cents...

Sometimes it's almost hopeless

That might not be enough.

Back in the day, when i still used windows i encountered a worm that registered itself as a system service. Custom process manager killed its process, but the system restored it in a few seconds. Killing it again causes system to shutdown.

The solution was to start winpe cd (or linux) and scan the drive from there. You could also launch a separate windows installation and scan the disk from there.

"Life is a queue. You come in, hang around for a bit, get some service, then depart."


Favorites (edit)

Small text Large text

Netalive Amp (Skin for Winamp)