Need Help With Task Manager

[SixxSixxSixx]

I press Crtl+alt+delete and the task manager does not show up.
i ran spybot and ad aware and cleared all infections.
please help me someone
i need the task manager to disable non-responding programs

 

[howard_hopkinso]

Hello and welcome to Techspot.

Your system may be infected with some kind of worm.

Go HERE and follow the instructions carefully.

Once you have done that, go HERE for instructions on how to post your Hijackthis log.

Also try opening the task manager by clicking start,run, and typing taskmgr.exe

Regards Howard :wave: :wave:

 

[SixxSixxSixx]

heres what i got from the hijink

 

[howard_hopkinso]

Sorry, but there`s nothing attatched.

Regards Howard

 

[SixxSixxSixx]

heres the txt file

 

[SixxSixxSixx]

Logfile of HijackThis v1.99.1
Scan saved at 6:13:04 PM, on 6/20/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\mHotkey.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\winupdates\winupdates.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\ISTsvc\istsvc.exe
C:\WINDOWS\hxlirqr.exe
C:\Program Files\BullsEye Network\bin\bargains.exe
C:\WINDOWS\system32\msxct.exe
c:\program files\180solutions\sais.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\10irmkqk.exe
C:\program files\internet explorer\iexplore.exe
C:\DOCUME~1\SIXXSI~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe
C:\DOCUME~1\SIXXSI~1\LOCALS~1\Temp\Temporary Directory 2 for hijackthis.zip\HijackThis.exe

R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: BAHelper Class - {A3FDD654-A057-4971-9844-4ED8E67DBBB8} - C:\Program Files\SideFind\sfbho.dll
O2 - BHO: ADP UrlCatcher Class - {F4E04583-354E-4076-BE7D-ED6A80FD66DA} - C:\WINDOWS\system32\msbe.dll
O3 - Toolbar: ISTbar - {FAA356E4-D317-42a6-AB41-A3021C6E7D52} - C:\Program Files\ISTbar\istbarcm.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [Tr1P] C:\WINDOWS\hxlirqr.exe
O4 - HKLM\..\Run: [BullsEye Network] C:\Program Files\BullsEye Network\bin\bargains.exe
O4 - HKLM\..\Run: [msxct] msxct.exe
O4 - HKLM\..\Run: [sais] c:\program files\180solutions\sais.exe
O4 - HKLM\..\Run: [itulah] C:\WINDOWS\itulah.exe
O4 - HKLM\..\Run: [Power Scan] C:\Program Files\Power Scan\powerscan.exe
O4 - HKLM\..\Run: [10irmkqk] C:\WINDOWS\system32\10irmkqk.exe
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://ny.contentmatch.net (HKLM)
O20 - Winlogon Notify: IntelWireless - C:\Program Files\Intel\Wireless\Bin\LgNotify.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

 

[howard_hopkinso]

It`s ok. The HJT text attatchment is working.

Your system is absolutely infested with malware.

I also notice that you haven`t any antivirus programme, or firewall programme on there either.

Get yourself a good free firewall like Zonealarm from http://www.zonelabs.com/store/content/catalog/products/sku_list_za.jsp?lid=dbtopnav_zass

Also a good free antivirus programme like AVG free from http://free.grisoft.com/freeweb.php/doc/1

Once you`ve got those programmes, burn them to cd.

Now backup any important files you have, and reformat you computer.

As soon as you`ve completed the format and reinstalled your os. Install the firewall before you connect your internet.

This is only my opinion of what I think you should do.

Regards Howard

 

[SixxSixxSixx]

dumb question

i know this is a really dumb question.

but when my computer came in, it only came with a recovery disc.
no boot-discs. is the recovery disc enough? and what do i exactly need
to do, to reboot my comp. thanks man

 

[howard_hopkinso]

No it`s not a dumb question.

Unfortunately I don`t have an answer for you, because I`ve never had a recovery disk.

Is it only a single disk, or a set of disks?

Make sure your computer is set to boot from the cd first. You may have to change the boot order in your bios.

If so set it to boot from A/floppy drive(if applicable), then D/cd-rom, then C/hard disk drive. Put your recovery disk into the cd drive, and save and exit bios.

During boot up your computer should ask you to press any key to boot from cd.

If it does, press any key, and see what options the recovery disk gives you.

Post back with the options it gives.

Regards Howard

 

[SixxSixxSixx]

yeah

you've probably never heard of a single recovery disc because you have a regular computer. from what i've read, only laptops come with recovery discs instead of like 4 boot-discs. maybe im wrong. who knows. but now i have another question.

What programs and software should i get so i wont get this problem again? I'm going to be downloading music and videos off of LimeWire and probably playing a bunch of online games and downloading all kinds of crap off the internet. Can you just make like a list of all the software i should get? that would be sweet. thanks a lot bro

 

[howard_hopkinso]

Unfortunately there is no safe p2p programme content. That`s probably where you got all the crap in the first place. Even a good firewall wont protect you from things you download.

Install the two programmes I suggested.

Once installed check for updates. Now turn off system restore, and boot into safemode, and run a full system scan using the AVG programme. Delete anything it finds.


The antispyware programmes that are linked in my first post are also really good.

The bottom line is that unless you change your downloading habbits your computer will soon be reinfected.

You didn`t say what options your recovery disk gives you.

Assuming that you can`t reformat and reinstall your os. Once you have done the above please post a new HJT log. I will see what I can do for you.

Regards Howard

 

[SixxSixxSixx]

oh no dude

no dude, i was able to reformat the computer. i just didn't know whether or not it was going to be sufficient enough to reboot windows. you know what i mean? i didn't wanna like get rid of my system and not have the right c.d's to reboot it up again. but yeah, i was just asking like in general, what are the good programs to get to keep out bad stuff.

 

[howard_hopkinso]

Oh well that`s ok then.

Just try and keep it as clean as possible this time lol

Deffinitely no connecting to the net without a firewall eh?

Regards and good luck Howard