Hi,
Boot into
Safe Mode. Run HijackThis and click
Do only a System scan. Then put a check mark infront of below listed entries:-
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = *us.rd.yahoo.com/customize/ycomp/defaults/sp/**www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = *myglobal-news.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = *us.rd.yahoo.com/customize/ycomp/defaults/su/**www.yahoo.com
O4 - HKLM\..\Run: [Task Manager] C:\WINDOWS\svhost32.exe
O4 - HKLM\..\Run: [SVCHOST] C:\WINDOWS\svhost.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O16 - DPF: {3A7FE611-1994-4EF1-A09F-99456752289D} (WildTangent Active Launcher) - *install.wildtangent.com/ActiveLauncher/ActiveLauncher.cab
Close
all other open programs except Hijackthis and click the button
Fix Checked in HijackThis.
Exit from HijackThis. Make Windows to show all files:-
Go to Start > My Computer. Go to
Tools menu, click
Folder Options. Uncheck
Hide protected operating system files. Then, click to select the option
Show hidden files and folders. Click Apply and then click OK to exit.
Delete these files:-
C:\WINDOWS\
svhost32.exe
C:\WINDOWS\
svhost.exe
Reboot to
Normal Mode. Run HijackThis again, click
Do a System scan and save log, and post the
fresh log.
Also, if possible, upload and scan these files at *scanner.virus.org/ :-
C:\WINDOWS\assembly\
PublisherPolicy.tme
C:\WINDOWS\assembly\
pubpol2.dat
Post back the results of the scan. Also, check whether you can open Task Manager, RegEdit etc.
__________
Pragadheesh said:
i dont wish to waste a thread for this simple question frenz..
how to disable the task manager??
Check this out:-
*www.dougknox.com/xp/utils/xp_taskmgrenab.htm
or
*www.theeldergeek.com/enable_disable_task_manager.htm
