Re: Device Manager, Task Manager, or any other mgmt tool not displ

From: Bill (nospam_at_waleague.org)
Date: 02/24/05 

Date: 24 Feb 2005 08:15:58 -0800

Bryan, I had the same problem just the other day. It turned out to be
some nasty spyware masquerading as Microsoft instant messenger.

The rogue process was MSNGMSNGR32.EXE. From the looks of your Hijack
This log, it looks like you might have the same problem.

I had to download some third party tools that the little bug wasn't
monitoring (and killing) to see the process and kill it. Probably any
appropriate tool will work, I found a process list tool and a process
kill tool for free at:
http://www.sysinternals.com/ntw2k/freeware/pstools.shtml.

Only after I killed the process, could I remove it from the startup
locations in the registry. Otherwise the process just put itself back
into one of the startup locations in the registry.

I had to kill the process, remove any referencing registry entries, and
delete the file.

Hope this helps,

Bill

Relevant Pages

  • Re: Taskmgr unable to delete
    ... I am in the middle of battling a number of viruses on a PC but one ... registry however now taskmgr has all the processes greyed out and I ... cannot kill any processes. ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: How to stop ms_webcheckmonitor?
    ... regsvr32 /u WEBCHECK.DLL and the registry entry ... Restart to see the result. ... regsvr32 WEBCHECK.DLL and after a restart it's back online. ... >BTW I've attempted to kill the thread, ...
    (microsoft.public.windowsxp.general)
  • Re: Windows Registry
    ... problems and also be sure to scan for malware and spyware in Safe Mode also. ... It may also help to try and select kill process tree if you have not used ... i want it to ask u guys if there is any registry branch that can ...
    (microsoft.public.windowsxp.security_admin)
  • secure32.exe
    ... I suspect that this binary is a parasite. ... I can't kill it in the Task ... Manager and don't know where to find it in the registry. ...
    (microsoft.public.security.virus)
Loading