unable to run system commands

  • Thread starter Thread starter RGA Cajun
  • Start date Start date
R

RGA Cajun

I am unable to open Task Manager, MSConfig or Registry
Editor. This inability is recent. I was able to do these
until recently.
What happened? What can I do the fix this?
 
I am unable to open Task Manager, MSConfig or Registry
Editor. This inability is recent. I was able to do these
until recently.
What happened? What can I do the fix this?

Many viruses, worms and trojans will block the running of MSCONFIG, Task
Manager and the Registry Editor -thus making the removal of the intrusion
more difficult. Since the system tools are usually blocked by name,
renaming their executables is a common workaround. Example: Rename
regedit.exe to regedit.com

Or you can run the tool created by MVP Doug Knox that creates an emergency
"backup set" of those three programs for you:
http://www.dougknox.com/xp/utils/xp_emerutils.htm

NOTE: You will also want to check your system thoroughly for virus and
parasites.
 
-----Original Message-----


Many viruses, worms and trojans will block the running of MSCONFIG, Task
Manager and the Registry Editor -thus making the removal of the intrusion
more difficult. Since the system tools are usually blocked by name,
renaming their executables is a common workaround. Example: Rename
regedit.exe to regedit.com

Or you can run the tool created by MVP Doug Knox that creates an emergency
"backup set" of those three programs for you:
http://www.dougknox.com/xp/utils/xp_emerutils.htm

NOTE: You will also want to check your system thoroughly for virus and
parasites.
I have run Norton Antivirus and check up with no viruses
found. I ran an update prior to the scan.
I am not well enough versed in computers to rename those
executables. Where can I go for help?
As to the creation of a "backup set" again, not
comfortable with doing this... Can you elaborate?

thanks..... robert
 
I have run Norton Antivirus and check up with no viruses
found. I ran an update prior to the scan.
I am not well enough versed in computers to rename those
executables. Where can I go for help?
As to the creation of a "backup set" again, not
comfortable with doing this... Can you elaborate?

thanks..... robert

Robert, the link that I gave you earlier goes to a page that explains the
Emergency Utilities program. I rarely, if ever, post direct links to
executable files as I strongly believe that the reader deserves more
detailed info about a recommendation and that they should have the final
decision to download or not.

I've used this particular download on my own systems. It is in ZIP form.
Right click on it and select Extract All to unpack its contents to a
folder. Then run the EXE file inside the folder.

If it makes you more comfortable, scan this EXE file with your antivirus
program before running it.

The setup screen that appears explains that it is going to make copies of
the task manager, registry editor and msconfig executable files. It tells
you what the new names will be (your old files will be left alone!) and it
tells you where the new files will be placed (C:\EmergencyUtils).

If you do have a nasty on your system that is blocking the running those 3
standard tools by name, you will be able to run the renamed tools. They
work just like the originals and let you "end task," remove startup items
and check registry RUN keys etc. All those necessary things when trying to
weed out an intrusion.

The link again for the page with the info and download link for Doug's
program is:
http://www.dougknox.com/xp/utils/xp_emerutils.htm
 
As to the creation of a "backup set" again, not
comfortable with doing this... Can you elaborate?

PS - Want to compliment you on being cautious.

I often wonder about folks that blithely download AdAware and new updates
without asking questions for more info. While AdAware is a good reliable
fix to many problems caused by parasites, indiscriminate downloading is
what caused many of the original poster's problems in the first place.
 
Greetings --

The behavior you've described is typical behavior of more than one
virus/worm, the three below being the most common:

W32.Klez
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Yaha
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
Back
Top