Welcome to the TechSpot OpenBoards. Please read the FAQ if you have any questions. Sign up or Login to participate.
Collaborate in the cloud with Office, Exchange, SharePoint, and Lync
|
|||||||
Collaborate in the cloud with Office, Exchange, SharePoint, and Lync
Task Manager, Regedit, MSConfig wont work
|
|
Thread Tools | Search this Thread |
|
#21
11-13-2004
|
||||
|
||||
|
actually, the system files should be able to be pulled off that Dell XP CD, the ONLY differnece in it and a retail one is that it doesn't come with a box or manual, and the COA(certificate of Authenticity) is on the machine. Contrary to popular belief, it doesn't even check for a "dell" BIOS. It also doesn't have any "extras" such as Dell Wallpaper or screensaver that may have been on the machine to begin with. The Windows CD is just a Wondows CD with Dell printed on the label.
PS: Dell told you to reinstall XP because they do not support advanced functions of the OS such as regedit, they also don't support virus/spyware removal or any other such repairs. Dell will only support the proper functioning of your hardware and basic OS functions relating to it. Also, you should have gone to support.dell.com to get the video driver, not Intel, same for all your other drivers. Last edited by StormBringer; 11-13-2004 at 04:49 PM.. |
|
|
#22
11-15-2004
|
|||
|
|||
|
Great, now msconfig works, task manager works, but this new function sfc / scannow doesn't. Just like the other two did before, it seems to open but then closes before I can see what it says??? I'm really starting to hate computers (more than I already did). Ideas?
|
|
#23
11-15-2004
|
|||
|
|||
|
i did all that and im still having the same problems. haha. everything works fine its just that i cant open task manager, msconfig, and regedit. theres no way it could be a virus. at least i dont think so. ive tried everything i can think of. any ideas?
|
|
#24
11-16-2004
|
||||
|
||||
|
Two threads merged about the same subject, this and "msconfig, task manager open/close
|
|
#25
11-17-2004
|
||||
|
||||
|
bbf,
You have to insert the Windows XP CD and exit its installation menu before you do sfc/scannow. When sfc/scannow runs it will take quite some time (45 mins on my laptop PC) and the progress bar will creep along very very slowly. You have to look at very closely to see any slight movement - otherwise you might think, wrongly, that it has stalled. When it finishes it will simply end - it won't give any kind of feedback or anything. |
|
|
#26
11-27-2004
|
|||
|
|||
|
Taskmanager,Regedit problem
I experienced same problem with my pc running winxp-task manager, regedit,msconfig would not open. I tried numerous programs-norton, spybot, adaware, etc. The only thing that worked (as WINEJAB mentioned) was Panda
Titanium Antivirus 2005 trial version. Panda found and deleted the problem virus and my pc is working fine. If anyone has this problem I would recommend going to Panda website and downloading trial version of their AV software. |
|
#28
01-30-2005
|
|||
|
|||
|
Another trick that sometimes helps to overcome this kind of problem is to make a copy of the programs that won't work (msconfig.exe, regedit.exe, etc.) and GIVE THE COPY A NEW NAME. For example, change the EXE extension to COM. If there is a virus that is watching for these files, the virus might miss them if they have a new name. This technique worked for me on numerous occasions when I worked Tech Support and our customers had a particular kind of virus.
This won't necessarily help you get rid of the virus, but it might at least give you access to regedit, msconfig, etc. until you figure out what the problem is. If your AV and anti-spyware programs come up with nothing, and you don't want to reformat, here are some sleuthing/troubleshooting steps to take that might help: Start with the System Information utility, which you can run by typing in MSINFO32 at Start | Run (if it doesn't work, you might need to change the extension to COM first, as suggested above). You might also be able to find it under Start | Programs | Administrative Tools or Start | Programs | Accessories | System Tools. Click on "Software Environment" and then "Loaded Modules", and wait a bit for it to put together all the info. The list of exe's and dll's running is far more extensive than in Task Manager. Sort all the entries by manufacturer by clicking on the word "Manufacuturer" at the top of that column. Examine the list and be suspicious of any company name that is not known to be related to your programs (e.g., ignore "Microsoft", "Symantec" if you use Norton Anti-virus, "Adobe" if you use Acrobat, etc.). Once you find some suspicious-looking files, find them on your hard drive using Explorer's standard search utility. (Make sure that Explorer's "Folder Options" are set to "show hidden files".) Right-click on the files and choose "Properties". Write down the Created and Modified dates shown on the "general" tab, then click on the "version" tab to get more details about the file, it's name, it's purpose, etc. Next, use the standard Search feature to find other files created or modified on the same date(s) as the suspicious file(s). Also, go into the registry and search for the suspicious files. When you find them, write down any new information, such as related files, folder locations, and especially GUIDs. (A GUID is the long, cryptic, serial-number type ID that the registry uses to organize things. The output from HyjackThis in previous posts shows a bunch of GUIDS.) Search the registry for any instances of the new file names or GUIDs. As you do this, you hopefully will start to build a picture of what's going on, what files are related to each other, how they are starting up, and how the whole thing might be related to something you did (e.g., you downloaded a picture from the Web on that day around that time). Once you have a decent idea what files are the culprit, try to delete them. If you can't delete the files because they are currently in use, start in Safe Mode to delete. Also delete the related registry info as well, but make sure to "Export" the info first -- just in case you made a mistake and the thing you are deleting isn't actually bad, you'll be able to add the info back into the registry later. Then reboot into normal mode and run MSINFO32 again. If the files have mysteriously returned (don't be surprised), that means there is something else going on, usually a service or some other low-level O/S kind of activity. If that's the case, you'll have to experiment with turning services on and off (BE CAREFUL: some services, like Remote Procedure Call, are required for other things to work, and if you turn them off, you'll seriously handicap your ability to fix things later). Strange as it sounds, Device Manager can also help solve malware issues. I recently had a malware problem that wouldn't go away, and I finally figured out that the thing had installed itself in the hardware section of the registry. I couldn't remove it directly from the registry because the "hardware" was in use, but I was able to remove the "device" using the Device Manager, and the problem finally went away. NOTE: you might need to check "hidden devices" in the View menu in order to see the bad guys. I know that's a lot, and it might take all day or all weekend to go through all this. But reformatting takes a while too, and if you don't want to lose all your files and settings, you'll also have to spend time backing things up before reformatting. Either way, it'll take time. |
|
#29
01-30-2005
|
||||
|
||||
|
Quote:
Last edited by Paul; 01-30-2005 at 04:18 PM.. |
|
#30
05-21-2005
|
|||
|
|||
|
help please
i ran hijack this and this is what my hijackthis log reported
|
|
#31
05-22-2005
|
|||
|
|||
|
crazyforbball31
Your log is clean. |
|
#32
06-14-2005
|
|||
|
|||
|
Win98se - msconfig & System Configuration Utility will not work any mode.
My neighbor is experiencing many of the problems described in this thread. Computer freezes on startup with a wintask error. She has a Win98se system and most of the posts here deal with XP...
System Configuration Utility & msconfig will NOT run in SafeMode. Thinking this was a simple case of adware/spyware... I ran AdAware full scan which only found abt 500 entries (a lot but have seen more). I ran Scandisc & defrag. Still won't start in regular mode & msconfig will not run. Cannot get on the internet there either. My goal is to get online there so that I can run Trend Micro's Housecall. She has an old version of Norton which I will remove using the program from Norton - downloaded here to install there. Have already lectured her about this & will (hopefully) talk her into PC-cillin (which I love). Will try to download the Panda software for installation there... Now that I think about it - it was probably an old version AdAware - will rerun once I can get online there. She had "alot" of toolbars I have never heard of... What else can I do to get msconfig back & get online there... Thanks so much for your help! |
|
#33
06-14-2005
|
|||
|
|||
|
Go to this post here first, and follow the instructions EXACTLY, especially about UPDATING and HJT-location.
How to remove Begin2Search/Coolwebsearch and Other Nasties Copy the file at the bottom of that post onto your PC, download all those programs, and burn the lot on a CD. Take that to your neighbour. Then see How to post your Hijackthis log-files as an attachment. |
|
#34
06-14-2005
|
|||
|
|||
|
> What else can I do to get msconfig back
To get msconfig working, first see if the file is there (it may have been deleted or moved or something). Look in the Windows/system directory. If it is there but won't run, try renaming the file -- either change the "exe" to "com", or change "msconfig" to "myconfig" or "mscfg" or anything else unique (the malware might be looking for the exact file "msconfig.exe", so if you name the file to msconfig.com or something, you might be able to fly under the radar). If you get msconfig to work, you should concentrate on the "win.ini" and "system.ini" tabs -- the other tabs (autoexec.bat, config.sys, and startup) are completely disabled in Safe Mode, so if you're having trouble in Safe Mode, the problem is not located on any of these disabled tabs. Win.ini and system.ini are mostly disabled in Safe Mode, but a few lines stay enabled. These lines are described a few paragraphs below. If you don't get msconfig to work, try the "sysedit" program. It opens several configuration files, including win.ini and system.ini. Assuming the malware doesn't prevent you, you'll be able to edit these file directly. If you don't get sysedit to work, try to edit win.ini and system.ini directly. The files should be located in the Windows directory. If you can't edit the files directly (the malware might prevent this also), or if you edit them and the malware undoes your edits moments later, boot to a floppy disk (or restart in MS-DOS mode, but I'm not sure if the malware can run if you do this -- the floppy might be safer). Change to the Windows directory (cd c:\windows), and then use the EDIT program to edit win.ini and system.ini (e.g., EDIT win.ini). Once you're in win.ini, go to the [boot] section and look for any lines beginning with "LOAD=" or "RUN=". Place a semicolon ( ; ) in front of anything that looks suspicious (or in front of all such lines if you're not sure what suspicious looks like). Save and close the file (Alt-F for file menu, then S for save or X for save & exit). Next, open system.ini and go to the [386enh] section. Place a semicolon in front of any lines that start with "DEVICE=" and end with ".386". Save and close the file, then start in Safe Mode and try msconfig. If it works, you should be home free. If msconfig *still* won't work, even after disabling the lines in win.ini and system.ini, there's one more possibility that I can think of. Background: When Windows 95 first came out, there were 20 or so .VXDs (a filetype similar to the ".386" mentioned in the previous paragraph) that all started up separately when Windows started. In some later version of Windows, these files were combined into one big file (VMM32.vxd) that started much more quickly than the 20 separate ones. That is, there is now one big file that contains about 20 smaller "sub-files". However, if there is a separate file in the Windows (or Windows\System) folder that has the same name as one of the "sub-files", Windows will use the separate file rather than the "sub-file" version of it. For example, MTRR.VXD was one of the original separate Win95 VXDs. MTRR is no longer a separate file but is now included as part of VMM32.VXD. But if your PC has a file called MTRR.VXD, Windows will used that file instead of the MTRR that is buried inside VMM32. That means that a malware could disguise itself using the name of one of the original Windows VXDs (e.g., MTRR.VXD), thereby taking the place of the real Windows code that is inside VMM32. As far as I know, there is no utility that detects and/or corrects this. You must do this by hand. I cannot find a web site that lists the "sub-files" in the Win98SE VMM32, so you'll have to look on your neighbor's PC (or another 98SE). To get the list, open the registry and search (Edit-Find) for "StaticVXD". Make sure that "Values" and "Data" are checked in the "Find" dialog box. When it finds one, look in the right pane of the regedit window. You'll see "StaticVxd" highlighted in the "Name" column, and in the "Data" column will be one of several possibilities. Anything starting with an asterisk is part of VMM32. For example, MTRR will be listed as "*MTRR". Make a list of anything that starts with an asterisk. Hit the F3 key to find the next instance of "StaticVxd" and add any asterisks to the list. Once you have a list of the "sub-files" of VMM32, look through the Windows and Windows\System folders for VXDs with any of these names. Move or rename any that you find (the malware may prevent this, so you may have to move/rename the files in DOS mode). Hopefully, the above advice works. Good luck. Mike |
|
#35
03-28-2006
|
|||
|
|||
|
Fix task manager taskmgr.exe regedit.exe and msconfig.exe closed by winhost32.exe
I fixed this problem in this way: (There are many viruses that do these things, but winhost32.exe is probably the most common)
1. Start up your computer in safemode and log in as your username NOT administrator. 1a. Open my computer and navigate to c:\windows\system32 1b. Find taskmgr.exe and rename it to taskmgr.com. Do the same with regedit.exe (in your c:\windows) folder and msconfig.exe (in your c:\windows folder). If you do not find these files then search for them. 2. Open taskmanager (START-RUN...-"taskmgr.com"-OK) and close winhost32.exe if it is running 3. End all processes EXCEPT explorer.exe, services.exe, svchost.exe(there may be more than one), taskmgr.exe, system idle process, and system.exe. 4. Close taskmanager and open regedit (START-RUN...-"regedit.com"-OK) 5. Click on the top of the registry tree (my computer) and press ctrl-f. 6. Type in "command service" and press search 7. Delete all keys (folders) and values with the name "microsoft command service". You will find LEGACY_ something and you will not be able to delete it so right-click the kay (folder) and select "permissions" then click "full control" and press ok. You can now delete this key. 8. Close regedit and open msconfig (START-RUN...-"msconfig.com"-OK) 9. Go to the "startup" tab and uncheck everything there. Go to the services tab and check the "Hide all microsoft services" checkbox. 10. If "Microsoft Command Service" is still there then go back to step 6 11. Next, open "My Computer" and click on "search" 12. Click on "advanced settings on the left window panel and make sure the "Search in hidden Files/Folders" is selected. 14. Click on the "tools" menu and select "folder options". 15. Go to the "view" tab and UNCHECK "hide protected operating system files", CHECK "Display the contents of system folders", and select "Show Hidden Files and Folders" and press OK 16. Search for winhost32.exe (it should come up as a hidden system file in c:\windows\) and delete it. optional steps (may make your success rate much higher) 17. Now uninstall any antivirus program you have running but DO NOT RESTART YOUR COMPUTER. 18. Install another antivirus (other than the one you were using) like AVG (http://free.grisoft.com/doc/1) END of optional steps 19. Restart your computer into your regular desktop and everything should be working NOW DO THE OPPOSITE OF STEPS 1a, 1b, 9 and 15 so your computer is back to normal! 20. Download Adaware, Spybot S&D, AVG, Hijack This, and LSP Fix and do a complete cleaning on your OS! Have fun! Brian Fix task manager taskmgr.exe regedit.exe and msconfig.exe closed by winhost32.exe Last edited by shevus; 03-28-2006 at 08:52 PM.. Reason: forgot a step |
 |
| Similar Topics | ||||
| Topic | Replies | Forum | ||
 Task Manager, Regedit, msconfig all disabled
|
2 | Windows OS | ||
|
Cmd, msconfig, regedit and task manager aren't working for XP prof SP2
|
4 | Windows OS | ||
|
Task manager, regedit and msconfig blocked + more stuff
|
2 | Virus and Malware Removal | ||
|
no task manager/regedit/cmd/msconfig
|
1 | Virus and Malware Removal | ||
|
Task manager/msconfig/regedit problem...
|
10 | Windows OS | ||
| Thread Tools | Search this Thread |
|
|
All times are GMT -4. The time now is 04:49 PM.