Task Manager is un-click-able!

eagerJO

New Member
Hi, all.
newbie here.

I don't know what's wrong with my pc at the moment. About three days ago, when i opened too many applications on my pc, it started to hang for several minutes. During that 'hang' period, i tried finding what programs were running actually; but when i pressed CTRL+ALT+DEL to get the windows security windows come up, i couldn't click on the Task Manager tab, it seemed to be faded out (un-click-able).

Could anyone tell me what to do?
Any suggestion and troubleshooting is very much welcomed.


Regards,
Jo.



P.S. in case you need HijackThisLog, here it is!
 

Attachments

There are a few infections showing here.

You may want to print out these instructions for reference, since you will have to restart your computer during the fix.

Please download FixWareout from one of these sites:
http://downloads.subratam.org/Fixwareout.exe
http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe

Save it to your desktop and run it. Click Next, then Install, make sure Run fixit is checked and click Finish.
The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.

Once the desktop loads please post the text that will open (report.txt) and a new Hijackthis log.

Please download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press Enter; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a RiskTool; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between good and malicious use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/proc...processutil.htm

Please post:
  • The FixWareOut report
  • The Smitfraudfix report
  • A new HijackThis log
 
After restarting (due to the fixing of FixWareout), it showed report on the window. But after I copied the windows by rightclicking and choosing the copy action, my pc started to stall/hang.
I had waited at least 10 minutes before I decided to shut it down by pressing the cpu and holding it for a few seconds.

The next step I did was to run the SmitfraudFix and copy the text file that appeared afterwards, nothing was wrong here, and so was the HijackThis logfile.

Then, since I didn't have the copy of FixWareout report, I ran it again and waited till it asked to reboot and copy-paste the report file to desktop.

Does what I did affect anything on you?

Note: The Task Manager is cick-able now, but the problem is out of 4 attempts of booting, two of them always ends up in 'hang' situation. Is it because of what I have done??



ANyway, here are the posts that you'd like to see:
 

Attachments

It's looks like FixWareout has done it's job, judging by the changes in your HijackThis logfile. There's still malware to remove, so let's get that first and deal with any damage it's done after you're clean.

Please download SDFix and save it to your Desktop.

Double click SDFix.exe and it will extract the files to C:\SDFix

You may wish to print out these instructions or copy them to a notepad document since you will be unable to access the Internet while in Safe Mode to read from this site.

Please then reboot your computer in Safe Mode (tap F8 just before Windows starts to load and select Safe Mode from the list).
  • Open the extracted SDFix folder and double click RunThis.bat to start the script.
  • Type Y to begin the cleanup process.
  • It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
  • Press any Key and it will restart the PC.
  • When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
  • Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
    (Report.txt will also be copied to Clipboard ready for posting back on the forum).
  • Paste the contents of the Report.txt back on the forum

Once done,

Please reboot to Safe Mode again.

Once in Safe Mode, open the SmitfraudFix folder again and double-click smitfraudfix.cmd
Select option #2 - Clean by typing 2 and press Enter to delete infected files.

You will be prompted :

Registry cleaning - Do you want to clean the registry ?; answer Yes by typing Y and press Enter in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer Yes by typing Y and press Enter.

The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart anyway into normal Windows. A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply along with a new HijackThis log.
The report can also be found at the root of the system drive, usually at C:\rapport.txt

Warning : running option #2 on a non infected computer will remove your Desktop background.

Please post:
  • The SDFix report
  • The Smitfraudfix report
  • A new HijackThis log
 
The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer Yes by typing Y and press Enter.
Warning : running option #2 on a non infected computer will remove your Desktop background. [/list]

The tool did not prompt any infected file. In fact, it directly popped up a text file. But, after rebooting in normal mode, I found that my Desktop background was removed...does it mean that my computer is (really) not infected?

Another thing is: now, on every boot, i have to press and hold the reset button to shut my pc down as it always ends in hang condition. But after shutting down my pc in such way, the next boot will just be fine. I was wondering what could have happened actually.
(While doing your instruction, i was needed to change from normal mode to safe mode and then normal mode and so on....I think I rebooted my pc for around 6-7 times to get it done).



Anyway, here are the reports:
 

Attachments

The tool did not prompt any infected file. In fact, it directly popped up a text file.
That's fine - that will only occur if that particular file is infected. It appears that SDFix has removed the files anyway.

Your logfile now appears to be clean. At what point in the shutdown process does your computer hang?
 
I myself am not sure at what point in the shutdown process my comp hangs. However, now it occasionally pops up a small window of 'runtime error' before it can shut down.

Well, as you can read from my previous posts, I have several times mentioned about the hang condition...most of the time it happens after i download and run the pro that you require to do so, or after downloading and restarting from normal to safe mode.

Most of the cases is that my computer freezes, as if I was running a bunch of programs on it, and i click on TaskManager to see the running applications and processes if there is anything unusual, and after several minutes it starts to be NotResponding, or when i click on ShutDown it will close all running applications as well as desktop background, but the 'logging off' or sometimes 'windows is shutting down' window won't disappear/off even if it already takes about 5-6 minutes.
 
Does the runtime error give a file name/path? These sort of shutdown problems can have a huge variety of causes, and any information would be helpful.

I suggest downloading and installing http://www.microsoft.com/downloads/...6D-8912-4E18-B570-42470E2F3582&displaylang=en.

I also suggest you try closing all running programs (including antivirus, etc...) just before shutting down, and see if that makes a difference. It is possible that a program is failing to close correctly.
 
ceewi1, sorry for late reply.

Yeah, it was due to my Avast av, which couldn't be updated properly and made the computer not able to end the process most of the time. I figured out that some setting for the automatic update was changed..now that I've fixed it, it seems like no more shutdown problem.

Thank you very much, ceewi1. You've been a great deal of help for me.
You are awesome. ;)

P.S. I didn't download the microsoft thing as I find it not necessary any more as the problem doesn't persist.
 
You're most welcome, glad the problem is fixed.

Below I have included some ideas on how to prevent future infections.

Please consider using these ideas to help secure your computer. While there is no way to guarantee safety when you use a computer, these steps will make it much less likely that you will need to endure another infection. While we really like to help people, we would rather help you protect yourself so that you won't need that help in the future.

Please navigate to http://windowsupdate.microsoft.com and download all the Critical Updates for Windows. These will patch many of the security holes through which attackers can gain access to your computer.

Please either enable Automatic Updates under Start -> Control Panel -> Automatic Updates or get into the habit of checking Windows Update regularly. They usually have security updates every month. You can set Windows to notify you of Updates so that you can choose, but only do this if you believe you are able to understand which ones are needed. This is a crucial security measuer.

As a minimum, you need at least an antivirus, firewall and some type of anti-spyware program.

Some good free firewalls are ZoneAlarm, Kerio, or Outpost
A tutorial on understanding and using firewalls may be found here.

I notice you are runn Ad-Aware, which is good. You might also want to consider installing and running some of the following programs; they are either free or have free versions of commercial programs, and will work along with Ad-Aware to prevent further infections.:

Spybot-Search & Destroy
A tutorial on using Spybot to remove spyware from your computer may be found here. Please also remember to enable Spybot's
Immunize and TeaTimer features if you don't have the resident part of another anti-spyware program running.

SpywareBlaster
A tutorial on using SpywareBlaster to prevent malware from ever installing on your computer may be found here.

SpywareGuard
A tutorial on using SpywareGuard for real-time protection against spyware and hijackers may be found here.

If you use Internet Explorer, it is a good idea to use IE-Spyad which provides protections against malicious websites.

Please keep these programs up-to-date and run them whenever you suspect a problem to prevent malware problems. A number of programs (including Ad-Aware) have resident protection and it is a good idea to run the resident protection of one of each type of program to maintain protection. However, it is important to run only one resident program of each type since they can conflict and become less effective. That means only one antivirus, firewall and scanning anti-spyware program at a time. Passive protectors, like SpywareBlaster and IE-Spyad can be run with any of them.

Note that there are a lot of rogue programs out there that want to scare you into giving them your money and some malware actually claims to be security programs. If you get a popup for a security program that you did not install yourself, do NOT click on it and ask for help immediately. It is very important to run an antivirus and firewall, but you can't always rely on reviews and ads for information. Ask in a security forum that you trust if you are not sure. If you are unsure are looking for anti-spyware programs, you can find out if it is a rogue here:

http://www.spywarewarrior.com/rogue_anti-spyware.htm

Please consider using an alternate browser. Mozilla's Firefox browser is a very good alternative. In addition to being generally more secure than Internet Explorer, it has a very good built-in popup blocker and add-ons, like NoScripts, can make it even more secure. Opera is another good option.
If you are interested, Firefox may be downloaded from here
Opera is available here: http://www.opera.com/download/

Hopefully these steps will help to keep you error free. If you run into more difficulty, we will certainly do what we can to help. :)
 
Back
Top