Task manager and regedit are disabled

[l0ngb1t]

hey,
apparently me PC is infected by kind of a virus...
OS: XP professionnal SP2
Symptoms :
-blocked task manager ( "your task manager has been blocked by your admin...")
-blocked regedit
-can visit microsoft site but symantec it seems to be blocked

am not able to afford an AV, i can't use MSE due to some reasons
anyone can help me one this one i need to clean my pc.

PS: the shutdown doesn't seams to work.. it i have to click the switch user button and then shutdown from the user logon page... this could be related to the virus or just a windows error

[Gogeta70]

Let's see if we can't get you into the task manager. Finding any processes in the process list that don't belong there might help you identify which virus you may have. Do the following:

Start > Run > type "cmd" (without quotes) and press enter
Check the current time on your computer, you'll need it.
Now, in cmd type the following: at TIME /interactive cmd.exe
TIME = 1 minute past the current time, in 24 hour format (so if time is 6:32 PM, you would put 18:33)
Press enter, it should say a task has been added and give you an ID number. Wait for one minute, and another CMD window will pop up. This is a system level shell. You should be able to run the task manager from here without restrictions.
Type: taskmgr
Press enter and the taskmanager should pop up. Look through the list of processes for anything that seems out of place, post results. Good luck ^_^

[ayu]

See if this one works instead of the regular task manager

Code: Select all

http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

[crashacid]

Try this for regedit Start>Run>gpedit.msc>System>Prevent Access to Registry Editing Tools (set this to DISABLED)

And for task manager http://en.kioskea.net/faq/5700-task-manager-disabled" onclick="window.open(this.href);return false;
and as you can't afford AV and can't use MSI why don't you give a shot to Avira
http://www.avira.com/en/index" onclick="window.open(this.href);return false;.

[l0ngb1t]

ok here's wha ti did
i restored my pc and it went back to normal
than i got myself a kasperky bootable rescue disk and scaned my PC with it
apparently i was infecrted by "sality" and 4 other torjans maybe more, i sotped checking the report after it said that i have 2489 file infected by sality
and did the clean up

@gogeta sorry i couldn't post the result for you coz i restored my pc before i check the topic...
@Cats thank you for the useful tool
@crash too late now to try it lol
and so far every thing is working good and am thinking to repaire windows

Thank you all