Re: Registry Editor and Task Manager disabled
From: Doug Knox MS-MVP (dknox_at_mvps.org)
Date: 11/20/04
- Next message: Doug Knox MS-MVP: "Re: Admin Cannot Install SP2"
- Previous message: saita: "Re: Unable to install new software"
- In reply to: spongebobiwan: "Re: Registry Editor and Task Manager disabled"
- Next in thread: spongebobiwan: "Re: Registry Editor and Task Manager disabled"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 19 Nov 2004 22:40:37 -0500
Glad you got it sorted out! :-)
-- Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display Win 95/98/Me/XP Tweaks and Fixes http://www.dougknox.com -------------------------------- Per user Group Policy Restrictions for XP Home and XP Pro http://www.dougknox.com/xp/utils/xp_securityconsole.htm -------------------------------- Please reply only to the newsgroup so all may benefit. Unsolicited e-mail is not answered. "spongebobiwan" <spongebobiwan@discussions.microsoft.com> wrote in message news:784D02C6-A6DE-4842-9935-D60AB9B84E4A@microsoft.com... > SUCCESS!!!! > > The following procedure removed the found possible virus as previously > posted, and restored function of both Registry Editor, and Task Manager: > > Re-started my computer in Safe Mode with Networking > > Started up Internet Explorer > > Went to http://housecall.trendmicro.com/ > > Ran Housecall and found the previously listed files > (C:\windows\system32\tapi32init.exe and C:\windows\intranet32.exe) > > Deleted those two files > > Re-started Windows in Standard Mode > > Ran the regtools.vbs program posted on this newsgroup to enable Registry > Editor (re-start of computer is necessary to enable Registry Editor) > > Re-started computer > > Executed Registry Editor (Start - run - regedit - okay) to open up Registry > Editor > > In Registry Editor - went to HK_USERS, > S-1-5-20-507921405-436374069-17085537768-1004, Software, Microsoft, Windows, > CurrentVersion, Policies, System > > Edited the Value of "Disable TaskMgr" from "1" to "0" to return enabling of > Task Manager > > > This prodecure returned my ability to use both Registry Editor and Task > Manager and removed the virus or spyware that was disabling it. I hope this > helps others with this problem. > > spongebobiwan > > "Doug Knox MS-MVP" wrote: > >> Something that is being executed on your system is doing this. Windows XP Home does not support Group Policies, so these restrictions are not being enforced from there. Take a close look at what's being loaded at Startup. You can use MSCONFIG, or for a more readable presentation, see www.dougknox.com, Win XP Utilities, Startup Programs Tracker. >> >> -- >> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display >> Win 95/98/Me/XP Tweaks and Fixes >> http://www.dougknox.com >> -------------------------------- >> Per user Group Policy Restrictions for XP Home and XP Pro >> http://www.dougknox.com/xp/utils/xp_securityconsole.htm >> -------------------------------- >> Please reply only to the newsgroup so all may benefit. >> Unsolicited e-mail is not answered. >> >> "spongebobiwan" <spongebobiwan@discussions.microsoft.com> wrote in message news:EDBF9B73-FEF6-4F1E-A3D6-CB4F746E538D@microsoft.com... >> > Doug Knox, >> > >> > I am not in a Domain nor a corporate environment. This is a home >> > computerthus the WindowsXP Home Edition :). I have run Ad-Aware SE Personal >> > and Ad-Aware 6.0 several times a day, always checking for an update on each >> > execution, hoping they would have a new list which would permanently delete >> > whatever I am infected with. I have followed the same procedure using SpyBot >> > Search and Destroy, also checking daily for new update list, as well as >> > several other anti-virus (Nortons, McAfee, MicroTrend, etc) and other spy bot >> > removal programs. Still no success. Any other suggestions? >> > >> > Thanks, >> > >> > spongebobiwan >> > >> > "Doug Knox MS-MVP" wrote: >> > >> >> Are you in a Domain or corporate environment? If so, then they can enforce policies like these, even if you don't want them to. If not, then you are infected with some type of virus/malware that is reinforcing these settings. In addition to AdAware, check out SpyBot Search and Destroy, www.safer-networking.org. Also ensure that your AV software is up to date, and scan your system in Safe Mode. >> >> >> >> -- >> >> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display >> >> Win 95/98/Me/XP Tweaks and Fixes >> >> http://www.dougknox.com >> >> -------------------------------- >> >> Per user Group Policy Restrictions for XP Home and XP Pro >> >> http://www.dougknox.com/xp/utils/xp_securityconsole.htm >> >> -------------------------------- >> >> Please reply only to the newsgroup so all may benefit. >> >> Unsolicited e-mail is not answered. >> >> >> >> "spongebobiwan" <spongebobiwan@discussions.microsoft.com> wrote in message news:A0A57BD1-F714-4F0A-8643-FF9B53183ADE@microsoft.com... >> >> >I also have been struggling with the "Registry Editor disabled by System >> >> > Administrator" and "Task Manager disabled by >> >> > System Administrator" issue. I have run many anti-virus and spy-ware >> >> > removal programs suggested here several times, >> >> > including running them in "Safe Mode". I have also followed the suggested >> >> > procedures or programs for editing my Registry >> >> > via some other method to to restore the value to "0" which enables the >> >> > Registry Editor and Task Manager from the "1" that >> >> > has been placed in the "value", to no avail as well. >> >> > >> >> > The only program that seems to catch this problem is Ad-Aware SE Personal >> >> > (or Ad-Aware 6.0) which consistantly find this >> >> > object even after I have just removed it with that program. Upon a >> >> > consequtive run of the Ad-Aware, those objects continue >> >> > to be consistantly found again and again. >> >> > >> >> > Here is a description of what Ad-Aware is finding: >> >> > >> >> > Vendor:Windows >> >> > Category:Vulnerability >> >> > Object Type:RegData >> >> > Size:4 Bytes >> >> > Object:HKEY_USERS:S-1-5-21-507921405-436374069-1708537768-1004\software\microsoft\windows\currentversion\policies\system"DisableRegistryTools"() >> >> > Location:...\software\microsoft\windows\currentversion\policies\system >> >> > "DisableRegistryTools" () >> >> > Last Activity:11-17-2004 >> >> > Risk Level:Low >> >> > TAC index:3 >> >> > Comment:Possible unintended lockout from Registry Editor (Regedit access >> >> > disabled) >> >> > Description:General Windows Security Issue. Your system security may be >> >> > compromised. The specifics of the possible compromised item are listed in the >> >> > comments section. >> >> > >> >> > >> >> > Vendor:Windows >> >> > Category:Vulnerability >> >> > Object Type:RegData >> >> > Size:4 Bytes >> >> > Object:HKEY_USERS:S-1-5-21-507921405-436374069-1708537768-1004\software\microsoft\windows\currentversion\policies\system"DisableTaskMgr"() >> >> > Location:...\software\microsoft\windows\currentversion\policies\system >> >> > "DisableTaskMgr" () >> >> > Last Activity:11-17-2004 >> >> > Risk Level:Low >> >> > TAC index:3 >> >> > Comment:Possible unintended lockout from Task Manager (Task manager access >> >> > disabled) >> >> > Description:General Windows Security Issue. Your system security may be >> >> > compromised. The specifics of the possible compromised item are listed in the >> >> > comments section. >> >> > >> >> > I am running WindowsXP Home Edition, Service Pack 2 (SP2). I even tried to >> >> > un-install SP2 and re-install it again to no >> >> > avail. >> >> > >> >> > HELP!!! >> >> >>
- Next message: Doug Knox MS-MVP: "Re: Admin Cannot Install SP2"
- Previous message: saita: "Re: Unable to install new software"
- In reply to: spongebobiwan: "Re: Registry Editor and Task Manager disabled"
- Next in thread: spongebobiwan: "Re: Registry Editor and Task Manager disabled"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
