[MeeD]

I downloaded AgataSoft Shutdown Pro, which allows 15 free trials. Before I knew it, it disabled my Task Manager. Even unticking the option for that didn't help. So I uninstalled it. But Task Manager is still disabled. I guess I could try a system restore, but is there a better way to do it?

[vicks]

You might try starting the computer in safe mode... When you turn it on, immediately start tapping the F8 key, this should open the safe mode window (black with white lettering). Use the arrow keys to move to "Last Known Good Configuration" option, click the enter key. Let the computer do it's thing.
Let us know if this works for you.
Good Luck
Vicks

[landme]

just go to run command

1) type gpedit.msc
2) it opens group policy
3) then select Administrative templates
4) in that A.T select start menu and taskbar
5) on its left side you'll get start menu and taskbar in that you select task manager

[MeeD]

Thanks, vicks. But the only option when doing this is 'Windows XP', and selecting it merely boots the system normally.

[MeeD]

Thanks, landme. I can select that AT, but there isn't any 'task manager' to select there.

[MeeD]

Since neither of the suggested methods works for me, I tried to do a system restore. But for some reason, that's not possible.

It goes through the whole process, including restart of the computer, but then informs me that no changes have been made to the system!

[dvk01]

Download to Desktop: DDS by sUBs from one of these locations:

http://download.bleepingcomputer.com/sUBs/dds.com
http://download.bleepingcomputer.com/sUBs/dds.scr
http://www.infospyware.net/sUBs/dds/

double click DDS.scr to run

When complete, DDS.txt will open.

Save both reports to your desktop.
DDS.txt
Attach.txt

post the contents of both logs back here.

[MeeD]

Sorry about the delay. Here they are:


.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by dell at 19:48:01 on 2012-03-28
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.503.84 [GMT 8:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
C:\WINDOWS\Twain_32\Samsung\SCX3200\Scan2pc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ICBCEbankTools\MingWah\MWREGICBC.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WandouJia\WanDouJiaHelper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
C:\Program Files\personalVPN\bin\openvpn-gui-1.0.3-en.exe
C:\Program Files\Microsoft Office\Office12\EXCEL.EXE
C:\Program Files\Tencent\QQIntl\Bin\QQ.exe
C:\Program Files\Tencent\QQ\Bin\TXPlatform.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://search.babylon.com/?AF=110004&babsrc=HP_ss&mntrId=846e209400000000000000ffeef56d15
uURLSearchHooks: Tencent SearchHook: {db8b2393-7a6c-4c76-88ce-6b1f6ff6ffe9} - c:\program files\tencent\ssplus\SAddr.dll
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Complitly: {0fb6a909-6086-458f-bd92-1f8ee10042a0} - c:\documents and settings\dell\application data\complitly\Complitly.dll
BHO: Babylon toolbar helper: {2eecd738-5844-4a99-b4b6-146bf802613b} - c:\program files\babylontoolbar\babylontoolbar\1.5.3.17\bh\BabylonToolbar.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
BHO: Tencent Browser Helper: {6ed34202-1a7f-fa7b-6b19-1164d4949490} - c:\program files\tencent\ssplus\SAddr.dll
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: DealPly: {a6174f27-1fff-e1d6-a93f-ba48ad5dd448} - c:\program files\dealply\DealPlyIE.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Foxit PDF Creator Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Foxit PDF Creator Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
TB: Babylon Toolbar: {98889811-442d-49dd-99d7-dc866be87dbc} - c:\program files\babylontoolbar\babylontoolbar\1.5.3.17\BabylonToolbarTlbr.dll
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
TB: {65F8A3D2-4C22-4A33-9633-73167EAEEC45} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
mRun: [MSPY2002] c:\windows\system32\ime\pintlgnt\ImScInst.exe /SYNC
mRun: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe
mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [openvpn-gui] c:\program files\personalvpn\bin\openvpn-gui.exe
mRun: [Samsung PanelMgr] c:\windows\samsung\panelmgr\SSMMgr.exe /autorun
mRun: [3200 Scan2PC] "c:\windows\twain_32\samsung\scx3200\Scan2pc.exe"
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [AgataSoft ShutDown Pro] c:\program files\agatasoft\agatasoft shutdown pro\AgataSoft_ShutDown_Pro.exe
mRun: [MWREGICBC.exe] "c:\program files\icbcebanktools\mingwah\MWREGICBC.exe"
StartupFolder: c:\docume~1\dell\startm~1\programs\startup\wandou~1.lnk - c:\program files\wandoujia\WanDouJiaHelper.exe
uPolicies-system: DisableTaskMgr = 1 (0x1)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {9A0B0581-B14C-4d09-A3C6-7142D9A2CACC} - c:\program files\wandoujia\openwdj.html
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
Trusted Zone: icbc.com.cn\*
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
TCP: Interfaces\{995490B5-A863-4E89-987B-7A62985C8E41} : NameServer = 211.68.208.10
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
.
============= SERVICES / DRIVERS ===============
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2012-1-11 435032]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2012-1-11 314456]
R1 QQProtect;QQProtect;c:\windows\system32\drivers\QQProtect.sys [2011-12-6 37880]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2012-1-11 20568]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2012-1-11 44768]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2012-1-13 136176]
S2 QuestBasic Service;QuestBasic Service;c:\program files\questbasic\questbasic.exe [2012-1-27 23040]
S2 SSPORT;SSPORT;\??\c:\windows\system32\drivers\ssport.sys --> c:\windows\system32\drivers\SSPORT.sys [?]
S2 SwOffScheduler;Airytec Switch Off - Task Scheduler;c:\program files\airytec\switch off\swoff.exe -service --> c:\program files\airytec\switch off\swoff.exe -service [?]
S2 SwOffWeb;Airytec Switch Off - Web Interface;c:\program files\airytec\switch off\swoff.exe -service --> c:\program files\airytec\switch off\swoff.exe -service [?]
S3 androidusb;ADB Interface Driver;c:\windows\system32\drivers\smhwadb.sys [2012-1-16 25728]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2012-1-13 136176]
S3 rasuw;ChinaNet WLAN Adapter;c:\windows\system32\drivers\rasuw.sys [2012-1-16 37088]
S3 smhwdev;SmartPhone dummy USB PNP Device (Normal);c:\windows\system32\drivers\smhwdev.sys [2012-1-16 100864]
S3 smhwser;USB Device for Legacy Serial Communication (Normal);c:\windows\system32\drivers\smhwser.sys [2012-1-16 108032]
.
=============== File Associations ===============
.
chm.file="hh.exe" %1
txtfile=c:\windows\notepad.exe %1
.
=============== Created Last 30 ================
.
2012-03-20 07:31:24 -------- d-----w- c:\program files\Freedom
2012-03-16 09:01:55 91136 ----a-w- c:\windows\system32\kswdmcap.ax
2012-03-16 09:01:55 28672 ----a-w- c:\windows\system32\vidcap.ax
2012-03-16 09:01:52 61952 ----a-w- c:\windows\system32\kstvtune.ax
2012-03-16 09:01:50 53760 -c--a-w- c:\windows\system32\dllcache\vfwwdm32.dll
2012-03-16 09:01:50 53760 ----a-w- c:\windows\system32\vfwwdm32.dll
2012-03-16 09:01:49 121984 -c--a-w- c:\windows\system32\dllcache\usbvideo.sys
2012-03-16 09:01:49 121984 ----a-w- c:\windows\system32\drivers\usbvideo.sys
2012-03-16 09:01:46 20992 ----a-w- c:\windows\system32\dshowext.ax
2012-03-16 09:01:45 43008 ----a-w- c:\windows\system32\ksxbar.ax
2012-03-13 07:51:24 -------- d-----w- c:\documents and settings\all users\application data\MingWah
2012-03-13 07:51:21 -------- d-----w- c:\documents and settings\dell\WINDOWS
2012-03-13 06:29:43 -------- d--h--w- c:\windows\system32\GroupPolicy
2012-03-12 12:28:12 464328 ----a-w- c:\windows\system32\ICBCPkcs11_v1.DLL
2012-03-12 12:28:12 24576 ----a-w- c:\windows\system32\icbccsps.dll
2012-03-12 12:28:12 -------- d-----w- c:\program files\ICBCEbankTools
2012-03-12 12:26:39 10368 -c--a-w- c:\windows\system32\dllcache\hidusb.sys
2012-03-12 12:26:39 10368 ----a-w- c:\windows\system32\drivers\hidusb.sys
2012-03-11 08:02:57 -------- d-----w- c:\program files\wellpsych
2012-03-11 08:01:58 297472 ----a-w- c:\windows\uninst.exe
2012-03-07 11:04:44 -------- d-----w- c:\program files\StormPlayer
2012-03-07 10:59:52 -------- d-----w- c:\documents and settings\all users\application data\Persist
2012-03-05 11:25:12 -------- d-----w- c:\program files\InterActual
2012-03-02 19:45:54 -------- d-----w- c:\documents and settings\dell\local settings\application data\CutePDF Writer
2012-03-02 19:37:29 87552 ----a-w- c:\windows\system32\cpwmon2k.dll
2012-03-02 19:37:10 -------- d-----w- c:\program files\Acro Software
2012-03-02 19:32:07 -------- d-----w- c:\program files\GPLGS
2012-02-29 11:46:21 107912 ------w- c:\windows\system32\Unl.exe
2012-02-28 12:51:31 -------- d-----w- c:\documents and settings\dell\application data\BabylonToolbar
2012-02-28 12:27:32 -------- d-----w- c:\documents and settings\all users\application data\Tencent
2012-02-28 12:26:01 -------- d-----w- c:\documents and settings\dell\local settings\application data\Tencent
2012-02-28 12:24:31 211856 ----a-w- c:\windows\system32\SSup.dll
2012-02-28 12:24:27 167824 ----a-w- c:\windows\system32\Scrax.dll
2012-02-28 12:24:05 421200 ----a-w- c:\windows\system32\msvcp100.dll
2012-02-28 12:24:00 770384 ----a-w- c:\windows\system32\msvcr100.dll
2012-02-28 12:19:14 61440 ----a-r- c:\documents and settings\dell\application data\microsoft\installer\{052cfb79-9d62-42e3-8a15-de66c2c97c3e}\NewShortcut2_E88611396FF84AFCB2EE5C1594058E02.exe
2012-02-28 12:19:14 106496 ----a-r- c:\documents and settings\dell\application data\microsoft\installer\{052cfb79-9d62-42e3-8a15-de66c2c97c3e}\NewShortcut311_0951773981FA4AB2BC21B7DCEC95892A.exe
2012-02-28 12:19:14 106496 ----a-r- c:\documents and settings\dell\application data\microsoft\installer\{052cfb79-9d62-42e3-8a15-de66c2c97c3e}\NewShortcut31_2F252077BA3F4362913955273A708467.exe
2012-02-28 12:19:14 106496 ----a-r- c:\documents and settings\dell\application data\microsoft\installer\{052cfb79-9d62-42e3-8a15-de66c2c97c3e}\NewShortcut1_EDD4ABB1C1B34A9D84CE33FBFB5D3639.exe
2012-02-28 12:19:13 61440 ----a-r- c:\documents and settings\dell\application data\microsoft\installer\{052cfb79-9d62-42e3-8a15-de66c2c97c3e}\ARPPRODUCTICON.exe
2012-02-28 11:50:49 -------- d-----w- c:\program files\Complitly
2012-02-28 11:50:49 -------- d-----w- c:\documents and settings\dell\application data\Complitly
2012-02-28 11:50:48 -------- d-----w- c:\program files\DealPly
2012-02-28 11:42:46 -------- d-----w- c:\program files\BabylonToolbar
2012-02-28 11:41:34 -------- d-----w- c:\documents and settings\dell\local settings\application data\Babylon
2012-02-28 11:41:30 -------- d-----w- c:\documents and settings\all users\application data\Babylon
2012-02-28 11:41:28 -------- d-----w- c:\documents and settings\dell\application data\Babylon
2012-02-28 07:56:44 -------- d-----w- c:\program files\AgataSoft
2012-02-28 07:52:53 -------- d-----w- c:\program files\Airytec
.
==================== Find3M ====================
.
2012-02-12 03:20:50 499712 ----a-w- c:\windows\system32\msvcp71.dll
2012-02-12 03:20:50 348160 ----a-w- c:\windows\system32\msvcr71.dll
2012-02-03 09:22:18 1860096 ----a-w- c:\windows\system32\win32k.sys
2012-01-29 22:46:40 0 ----a-w- c:\windows\system32\nsv3C.tmp
2012-01-13 09:17:43 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-01-11 19:06:47 3072 ------w- c:\windows\system32\iacenc.dll
2012-01-11 05:06:20 25924984 ----a-w- c:\program files\QQIntl1.2.exe
2012-01-11 02:31:03 73728 ----a-w- c:\windows\system32\javacpl.cpl
2012-01-11 02:31:03 472808 ----a-w- c:\windows\system32\deployJava1.dll
2012-01-11 00:48:06 4153796 ----a-w- c:\program files\personalVPN_Installer.exe
2012-01-09 16:20:25 139784 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-09-08 10:04:00 56167608 ----a-w- c:\program files\setup_av_free.exe
2010-04-17 02:45:44 6997480 ----a-w- c:\program files\FoxitReader321_en_Setup.exe
2010-03-14 22:36:46 13306948 ----a-w- c:\program files\ChatterBlockerDemo_1_1_0_1.exe
2002-11-18 03:20:00 275456 ----a-w- c:\program files\Reminder.exe
.
============= FINISH: 19:51:53.92 ===============







.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 1/10/2012 9:25:30 AM
System Uptime: 3/27/2012 11:28:52 PM (20 hours ago)
.
Motherboard: Dell Inc. | | 0GD366
Processor: Intel(R) Celeron(R) M processor 1.40GHz | Microprocessor | 1396/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 37 GiB total, 5.858 GiB free.
D: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP62: 3/3/2012 3:37:22 AM - Printer Driver CutePDF Writer Installed
RP63: 3/3/2012 2:07:09 PM - Removed Bonjour
RP64: 3/4/2012 2:43:37 PM - System Checkpoint
RP65: 3/5/2012 5:05:44 PM - System Checkpoint
RP66: 3/6/2012 6:03:50 PM - System Checkpoint
RP67: 3/7/2012 6:09:28 PM - System Checkpoint
RP68: 3/8/2012 7:45:10 PM - System Checkpoint
RP69: 3/10/2012 1:22:00 AM - System Checkpoint
RP70: 3/11/2012 2:46:51 PM - System Checkpoint
RP71: 3/12/2012 4:08:27 PM - System Checkpoint
RP72: 3/13/2012 2:45:23 PM - Restore Operation
RP73: 3/13/2012 2:59:13 PM - Restore Operation
RP74: 3/13/2012 3:07:58 PM - Restore Operation
RP75: 3/13/2012 3:52:55 PM - Restore Operation
RP76: 3/14/2012 9:03:06 PM - System Checkpoint
RP77: 3/15/2012 12:17:40 AM - Software Distribution Service 3.0
RP78: 3/16/2012 7:34:48 AM - Software Distribution Service 3.0
RP79: 3/17/2012 12:43:10 PM - System Checkpoint
RP80: 3/18/2012 2:43:25 PM - System Checkpoint
RP81: 3/19/2012 7:05:24 PM - System Checkpoint
RP82: 3/20/2012 10:54:55 PM - System Checkpoint
RP83: 3/22/2012 12:47:55 AM - System Checkpoint
RP84: 3/23/2012 6:46:50 PM - System Checkpoint
RP85: 3/24/2012 7:25:54 PM - System Checkpoint
RP86: 3/25/2012 11:07:34 PM - System Checkpoint
RP87: 3/27/2012 1:34:45 PM - System Checkpoint
RP88: 3/28/2012 3:55:31 PM - System Checkpoint
.
==== Installed Programs ======================
.
???????---TOMPDA??? 1.24
??????? 6.1???
??QQ2011(????)
2007 Microsoft Office Suite Service Pack 1 (SP1)
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Airytec Switch Off
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Applian FLV and Media Player 3.1.1.12
Ask Toolbar
avast! Free Antivirus
Babylon toolbar on IE
Complitly
CutePDF Writer 2.8
DealPly
Foxit Reader
Freedom
Google Chrome
Google Update Helper
Guide to ICBC USB-Shield program (Minghua) Uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Windows XP (KB2633952)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB976002-v5)
InterActual Player
Itibiti RTC
iTunes
Java Auto Updater
Java(TM) 6 Update 30
Knctr
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Office Access 2007
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Excel 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office PowerPoint 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word 2007
Microsoft Office Word MUI (English) 2007
Microsoft Software Update for Web Folders (English) 12
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
MSN
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
QQProtect
QuestBasic 1.0 build 115
RealNetworks - Microsoft Visual C++ 2008 Runtime
RealPlayer
RealUpgrade 1.1
Samsung SCX-3200 Series
Scan Assistant
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft Windows (KB2564958)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2544521)
Security Update for Windows Internet Explorer 8 (KB2618444)
Security Update for Windows Internet Explorer 8 (KB2647516)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2510581)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2544521)
Security Update for Windows XP (KB2544893-v2)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2567680)
Security Update for Windows XP (KB2570222)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB2584146)
Security Update for Windows XP (KB2585542)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB2598479)
Security Update for Windows XP (KB2603381)
Security Update for Windows XP (KB2618444)
Security Update for Windows XP (KB2618451)
Security Update for Windows XP (KB2619339)
Security Update for Windows XP (KB2620712)
Security Update for Windows XP (KB2621440)
Security Update for Windows XP (KB2624667)
Security Update for Windows XP (KB2631813)
Security Update for Windows XP (KB2633171)
Security Update for Windows XP (KB2639417)
Security Update for Windows XP (KB2641653)
Security Update for Windows XP (KB2646524)
Security Update for Windows XP (KB2647518)
Security Update for Windows XP (KB2660465)
Security Update for Windows XP (KB2661637)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982665)
Skype Click to Call
Skype™ 5.5
SOSO AddressBar Search
Synaptics Pointing Device Driver
Tencent QQ
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 8 (KB2598845)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB2541763)
Update for Windows XP (KB2641690)
Update for Windows XP (KB898461)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
WebFldrs XP
Windows Internet Explorer 8
WiTopia.Net personalVPN 1.8
.
==== Event Viewer Messages From Past Week ========
.
3/25/2012 2:41:49 AM, error: Dhcp [1002] - The IP address lease 10.119.6.70 for the Network Card with network address 00FFEEF56D15 has been denied by the DHCP server 10.119.6.69 (The DHCP Server sent a DHCPNACK message).
3/25/2012 2:41:35 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the QuestBasic Service service to connect.
3/25/2012 2:41:35 PM, error: Service Control Manager [7000] - The SSPORT service failed to start due to the following error: The system cannot find the file specified.
3/25/2012 2:41:35 PM, error: Service Control Manager [7000] - The DgiVecp service failed to start due to the following error: The system cannot find the file specified.
3/21/2012 10:34:47 PM, error: Dhcp [1002] - The IP address lease 10.119.1.142 for the Network Card with network address 00FFEEF56D15 has been denied by the DHCP server 10.119.6.69 (The DHCP Server sent a DHCPNACK message).
.
==== End Of File ===========================

[vic2pc]

Originally Posted by MeeD

is there a better way to do it?

First thing to check is to open RegEdit and navigate to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

Then check if the value of DisableTaskMgr is set to 1. If so, change it to 0, and see if it works now.

Or, if such a value doesn't exist, create it (it's of "DWord" type) and set it 0.

Let me know if that helped.

[dvk01]

Moving this to malware forum, because therte is quite a lot of potential problems there including several potentially unwanted toolbars & programs
Delete any existing version of ComboFix you have sitting on your desktop

Please read and follow all these instructions very carefully

Do not edit or remove any information or user names etc, otherwise we cannot fix the problem. If you insist on editing out anything then I will close the topic & refuse to offer any help.

Download ComboFix from Here or Hereto your Desktop.
As you download it rename it to username123.exe


**Note: It is important that it is saved directly to your desktop and run from the desktop and not any other folder on your computer**
--------------------------------------------------------------------
1. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

• Very Important! Temporarily disable your anti-virus and anti-malware real-time protection and any script blocking components of them or your firewall before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results" or stop combofix running at all
• Click on THIS LINK to see instructions on how to temporarily disable many security programs while running combofix. The list does not cover every program. If yours is not listed and you don't know how to disable it, please ask.
• Remember to re enable the protection again after combofix has finished

--------------------------------------------------------------------
2. Close any open browsers and any other programs you might have running

Double click on renamed combofix.exe & follow the prompts.

If you are using windows XP It might display a pop up saying that "Recovery console is not installed, do you want to install?"
Please select yes & let it download the files it needs to do this. Once the recovery console is installed Combofix will then offer to scan for malware. Select continue or yes.
When finished, it will produce a report for you.
Please post the "C:\ComboFix.txt" for further review


****Note: Do not mouseclick combofix's window while it's running. That may cause it to stall or freeze ****

Note: ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.
Note: Combofix prevents autorun of ALL CDs, floppies and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you -- please tell us when you reply. Read HERE why we disable autoruns

Please do not install any new programs or update anything (always allow your antivirus/antispyware to update) unless told to do so while we are fixing your problem. If combofix alerts to a new version and offers to update, please let it. It is essential we always use the latest version.

Please tell us if it has cured the problems or if there are any outstanding issues