Task manager

LittleJo

Hi,
I am running Task Manager on XP , somehow it has been disabled.
I have AVG, SPYBOT, ADAWARE and SYMANTEX firewall.
Suspecting problems I have run virus scans, including KASPERKY free, no problems.
I see my firewall is blocking WSFGFDGRTYHGD.NET, agogle search implicates this with a trojan.
I am the Administrater, so any ideas what has happened to my Task Manager
and how do I get it back and get rid of WSF etc..
Jo

browolf

on windows xp the task manager program is located at
c:\windows\system32\taskmgr.exe

is it there?

LittleJo

Hi,
Did a Google search on 'Task Manager' and found site called Rameshs site which tells me all sorts of ways of correcting the problem.
http://windowsxp.mvps.org/Taskmanager_error.htm

I am concerned that this might get me into even more trouble.

Apparently somebody has changed the registry.
Could someone who knows what they are doing please advse me before I get into even more trouble
Jo

browolf

method 4 is the easiest to see if its been disabled.

LittleJo

Hi,
It is getting worse , now finding KERNELLS88.EXE attempting o access web!!!
Browulf, followed your advice, it is set to NOT CONFIGURED.
What next, please?
Jo

browolf

sounds like a virus/spyware but you've got lots of scanners.
have you updated the signatures on the spyware ones?
try this
http://www.sophos.com/products/free-tools/sophos-anti-rootkit.html

LittleJo

Hi,
Sorted out my Task manger by following Method 4, you need to toggle it on/off a few times.
Then prevented the KERNELS88 from loading by removing it from the Start-up using MSCONFIG.
I did a serach KERNELS88 and find it has loaded an application.
Just shows what can be done by the ill-intended and how a firewall can alert you to problems.
My AVG and spyware wasup to date and seemed to have only warned when it was infected.
I have found a virus that AVG had found in the vault for that that day.
It looks as though I have contained the virus/trojan and will take your advice on Sophos.
Wonder if I can just delete KERNELS88 application though?
Many thanks for your help.
Jo

browolf

or rename it to kernels88.xxx first.