also @ TechSpot: OCZ Vertex 450 Review

Task manager has been disabled

Discussion in 'Virus and Malware Removal' started by iceinsun, Feb 25, 2009.

  1. iceinsun Newcomer, in training Posts: 21

    i have gone through this process and i succeded in my laptop.
    and its now time for the same process in my desktop

    but the problem is that i lost the process which i had gone through.

    the major problem is that when i press
    ctrl+alt+del

    it says the task manager has been disabled by your computer.

    so tell me those process like going to safe mode then safe mode with networking and then follow 8 steps of virus removal in detail.
  2. kimsland Ex-TechSpotter Posts: 18,353

    Ah huh ;)

    Try this first

    Download RatsCheddar

    It contains a program written by Rathat, and it is a Policy Controller.
    Save and extract this program to the desktop.
    Once extracted, Double click on the RatsCheddar.exe file.
    Enable everything, then click Exit
    Reboot your Computer.
  3. iceinsun Newcomer, in training Posts: 21

    i'll try this process.but alongwith this problem there is another problem.i cannot run the installed programs.for eg. when i double click the mp3 audio ,it shows no response,the only way is to open media player and the open from it.so what is the better way

    ok i have completed it and it works perfectly.
    now wht about the second problem that i mentioned above.
    also when i open my computer run.dll opens automaticallly
    got any idea for this also?
  4. kimsland Ex-TechSpotter Posts: 18,353

  5. iceinsun Newcomer, in training Posts: 21

    logs

    this are the logs that i got when i scanned.
    so help me out
  6. kimsland Ex-TechSpotter Posts: 18,353

    Here's your first help. i ... I mean, I, hope you're happy with that ;)

    -> No action taken on MBAM scan, for found issues
    Please re-run Malwarebytes
    Confirm updated (third tab)
    Then do the above quoted message, but this time "Remove all found issues"

    By the way, you will need to then restart, and run (and attach) a new HJT log
     
  7. iceinsun Newcomer, in training Posts: 21

    logs again

    as ur request i have attached by following the listed procedures
  8. kimsland Ex-TechSpotter Posts: 18,353

    Wow lots of bad entries in HJT log, where to begin :confused:

    Reopen HJT and do a scan only
    Place a tick next to every R entry (there's a few R0 R1 R3 entries)
    Place a tick next to every entry that has "file missing" at the end of the entry itself
    Place a tick on all these too:
    Close any Internet browser (really any other program just close)
    Then select Fix

    Then close HJT blank window

    --------------

    Then run the AVG removal tool
    Here is the 32Bit version (most users): http://www.avg.com/filedir/util/avg_arm_sup_____.dir/avgremover.exe
    Here is the 64Bit version: http://www.avg.com/filedir/util/avg_arv_sup_____.dir/avgremoverx64.exe

    --------------

    Then download Combofix
    Lots of info on its use h e r e
    Direct download h e r e

    Locate the downloaded Combofix. Double click on it to run, answering any prompts along the way
    Note: during Combofix scan (lasting up to 10mins) your Desktop and clock may reset (all normal)
    ComboFix will also restart your computer (eventually) and then (eventually) create a log

    Save this log file to be attached to a new reply

    Also do another scan with HJT (scan and log file) and attach this to a new reply as well

    Whilst waiting for my reply, you may want to re-open Malwarebytes; update it again; and then run another full scan (I'm thinking there may still be more uncovered malwares to remove) I would do this ;)
  9. iceinsun Newcomer, in training Posts: 21

    photo of problem

    ommm guess ?
    i was just updating the malwarebytes
    then the problem as posted in the picture occured

    got any clue
    plz help
  10. kimsland Ex-TechSpotter Posts: 18,353

    Anyway, your HJT log is one of the worst infected logs I've seen, please do the above in full
  11. iceinsun Newcomer, in training Posts: 21

    it tells that version of combofix id old
    ?t to do
  12. kimsland Ex-TechSpotter Posts: 18,353

    Running it in Normal mode with Internet access, just update it, when it asks
  13. iceinsun Newcomer, in training Posts: 21

    when i updated and scanned malware
    same 5 object infected occurs and thus tells to reboot the computer

    i guess malwarebytes itself should reboot it but it didn't show any response
    so since i don't know what does it meant by reboot and how to do it

    i just restarted the computer
    thus again scanning same 5 object infected occurs
    can u tell me ?t to do
  14. mflynn Newcomer, in training Posts: 2,793

  15. iceinsun Newcomer, in training Posts: 21

    well i again updated and scanned through malwarebytes
    but i guess the logs report are the same as previous mbam log

    i guess none of them have been deleted because it stated delete on reboot
    but reboot doesnt took place.can u tell me about this

    again i have attached mbam log and combofix log

    where can i go and download drweb plz post link and the procedures after scanning
  16. mflynn Newcomer, in training Posts: 2,793

    OK I forgot the Link to DrWeb in my last post. I put it in.

    But now that we have the logs do the below before running DrWeb.

    Reboot to allow fixing of the issues.

    Then run another MBAM Quick scan to confirm they are in fact gone and no more found!

    Then another ComboFix for same reason.

    Attach logs.

    My bed time is close I will be here another 15-20 minutes.

    Mike
  17. iceinsun Newcomer, in training Posts: 21

    does reboot and restart mean same?
    plz make me clear
    and tell me how to reboot
    coz i'm unknown ?t actually reboot mean
  18. mflynn Newcomer, in training Posts: 2,793

    Reboot restart are the same!

    mike
  19. kimsland Ex-TechSpotter Posts: 18,353

    Hey you forgot reset :haha:
    iceinsun just do the above already!
  20. iceinsun Newcomer, in training Posts: 21

    logs again

    oh my god
    no way out
    got any other clue

    same objects r detected

    plz look at the logs

    Attached Files: