Nifty little Trjoan disabled my Task Manager in XP.. help

[03DSGSnake]

I got a notice the Tuesday night when surfing the WEB that a trojan was detected (running McAfee Virus Scan) so I had it scan and delete it. I ran another scan right after it and it picked up a new one that couldn't be deleted, so I would quarantine it then delete it from the quarantine manager. Consecutive scans would continue to come up with that one trojan. Quarantine, delete, then rescan and it would come up again.

So I rebooted to safe mode, and ran another scan and deleted everything. Rebooted to normal mode, ran the scan there and it came up clean. All seemed cool.

Last night without even surfing the internet I got another Trojan notice.. I had it delete the file. I booted it this morning with the McAfee 'Rescue Disk' and scanned all executables and drives. Nothing found.

So it looks like it MIGHT be gone. However, when I go to open Task Manager.. I get a notice that it has been disabled by the administrator... I"M THE $@#^@& @ ADMINISTRATOR. So how do I re-enable it? And is there a download I can get somewhere to make sure EVERYTHING is gone?

Thanks guys!



And btw... obviosuly running a Virus Scan and Firewall are not enough. What else can I do to avoid this problem again? Thank you!

[Sterling_Aug]

Start reading:

http://www.sysopt.com/forum/showthread.php?t=161595

[thxmanu]

I had that problem on a laptop and I ended up running the restore disks. I never really did any research though, I'm sure there are ways to clean that up. Sorry I'm not of much help. Oh, BTW, trojans will sometimes hide in your restore files. That way when you reboot, they come right back.

[Midknyte]

you mean you only have antivirus and a firewall? where's your antispyware?

[03DSGSnake]

you mean you only have antivirus and a firewall? where's your antispyware?

Well I use Ad Aware 6? on a daily basis as well...

[03DSGSnake]

Start reading:

http://www.sysopt.com/forum/showthread.php?t=161595

That will help get rid of the virus (done) but I need to find out how to restore my task manager.

[Midknyte]

Adaware is mediocre at best. Same story with spybot. I don't even bother with those anymore.

If you don't want to pay, then you can use the MS Antispyware beta. For a reasonable fee, Counterspy and Spysweeper are tops. CS and SS have trial versions on their websites.

once the system is clean, try a repair install.
http://www.michaelstevenstech.com/XPrepairinstall.htm

[Rocketmech]

You can replace Task Manager with this ultility

http://www.dougknox.com/xp/utils/xp_emergencyutil.zip

It will create usable copies of Regedit , Msconfig and Task Manager

[Midknyte]

Nice one, RM.

[03DSGSnake]

I'm saving the Repair Install as my last hope. Is there anything in the REG I can look for?



thanks guys, still trying to sort this one out.

[03DSGSnake]

Also, instead of a Repair Install, can't I use System Restore?

[Rocketmech]

We assumed you were able to resolve your problem . So, what are you trying to sort out ? What are the symtoms ?

System Restore will only help if you can restore to a point before the infection . Any point after is infected . It will restore only so much and usually doesn't help. Its always recommended you disable / re-enable System Restore to cleanse all your restore points .