HELP! HELP! HELP!

[aquaniner 0]

Hey Guyz, i'm using microsoft XP and i think i got somekind of virus / spyware, my internet explorer didnt work and when i press the ctrl+alt+del button, it says "task manager has been disabled by your administrator. What should i do? PLZ HELP!

i'm now browsing with windows explorer..

[fpin 0]

Have you got good antivirus, antispyware software? If you have, you should scan your computer in the safe mode (press f8 when computer is starting up). If you haven't, let me know, I'll recommend you some of them... Also you may try to scan your computer in the internet.

[ScinteX 0]

hi,

 

You probably ran a program that either (or even maybe did both):

 

Set local group policies

Change restriction settings in the registry that arent part of GP

 

The easiest thing to do is either create another user, or try to reset everything. After youve created a new user, see if things are better.

 

I had something like this on my machine a while ago- i got so paranoid thinking "what else did it do"?, I backed up my own files then formatted and reinstalled XP

 

This link might help on your quest:

http://support.microsoft.com/default.aspx?scid=kb;en-us;307882&sd=tech

 

Antivirus might pick this kind of thing up, however its more of a malcious script than a virus/worm.

 

I'd highly suggest not running as local admin in Windows, use a restricted/limited user instead (one that cannot change system settings)

 

S

 

 

[aquaniner 0]

i've used Mcafee Stinger version 2.5.4.0 and it didnt find anything, and i also used Norton antivirus 2003 auto-protect, when i turn on my computer Norton detects lots of trojan, and it says that the trojan has been deleted, but everytime i starts the computer, it kept on detecting the same trojan virus.

 

i have made a new user, but also as a administrator, the internet explorer runs well, but still cant open task manager...

 

btw, what's SQLDebugger? i found it as one of the user but with limited account and password protected user. i dont think i have created that one.

 

if i use another user account and it works well, dan i just deleted the previous user? would it make the virus go away?

one more question.. what is it that i'm having? virus? spyware?

 

thanx before guys!

[ScinteX 0]

Hi,

 

SQLDebugger is the local account created when you install SQL Server. Its a bit like installing .Net Framework- you get a ASP.Net account.

 

If you are not usin SQL Server 2000, in any shape or form, you can disable it, or maybe delete it if you are sure.

 

i think you got hit by a trojan and some nasty scripts that disabled some things on your PC. The task manager setting is local to your PC- so it will affect every user

 

You can try this software for removal of trojans:

 

http://www.emsisoft.com/en/software/free/

 

And also this, although it is a trial program (it still works fine for 30 days)

 

http://www.majorgeeks.com/TDS_d3951.html

 

If Norton is deleting the trojan, one way it can come back is via the System Restore functionailty. Read here how to disable it: http://service1.symantec.com/SUPPORT/tsg...src=sec_doc_nam

 

You should disable system restore, scan using Norton or the above programs, then finally enable system restore again.

 

S

 

[aquaniner 0]

Hey!! i used systen restore to last week ... and than voilaaa!!! i can use my IE and task manager againn... and norton doesnt detect any trouble! is the virus gone yet? dunno.. but my computer's fixed!

 

Thanx for the help anyway!!