How to remove the taskmgr.exe virus
Solved
wakoto
Posted messages
15
Registration date
Status
Membre
-
coucou20 -
coucou20 -
Hello,
Every time I start my PC, I see a pornographic image from the taskmgr virus. How do I remove it?
I downloaded the HijackThis software and installed it. I followed the procedure, but it didn’t work. The pornographic image is still there. In my research, I learned that it's a process. How do I stop this process?
Please help me.
Every time I start my PC, I see a pornographic image from the taskmgr virus. How do I remove it?
I downloaded the HijackThis software and installed it. I followed the procedure, but it didn’t work. The pornographic image is still there. In my research, I learned that it's a process. How do I stop this process?
Please help me.
Configuration: Windows XP sp2 Firefox 2.0.0.16
12 réponses
GenProc Report 2.154 [1] performed on 27/10/2008 at 17:03:04.67 - Windows XP
# Step 1/ Download:
- CCleaner https://www.ccleaner.com/ccleaner/download
This software will subsequently allow you to delete all temporary files. Run it and click on "Options", "Advanced" and simply uncheck the box "Erase only files from the Windows Temp folder older than 48 hours", then close the program.
- SmitfraudFix (S!Ri) http://siri.urz.free.fr/Fix/SmitfraudFix.exe
* double-click the file "smitfraudfix.exe" and choose option 1, it will list all harmful items in a report: post it now.
- SDfix (Andy Manchesta) http://downloads.andymanchesta.com/RemovalTools/SDFix.exe and save it to your Desktop. Double-click on SDFix.exe and choose Install to extract it to C:\.
- MSNFix (!aur3n7) http://sosvirus.changelog.fr/MSNFix.zip and extract it to the Desktop.
***** Copy the rest of the procedure into a text file and restart in safe mode as indicated here https://www.wekyo.com/demarrer-le-pc-en-mode-sans-echec-windows-7-et-8/
Choose your current session "Admin" *****
# Step 2/
Double-click on the file "SmitfraudFix.exe" and choose option 2, answer yes to everything and let it proceed. Save the report to your desktop.
# Step 3/
Open the SDFix folder that was just created in the C:\ directory and double click on RunThis.bat to run the script.
Press Y and then Enter to start the cleaning process.
It will remove services and Registry entries for certain trojans found, then it will ask you to press a key to restart, do so to restart the PC.
Your system will take longer to restart than usual because the tool will continue to run and delete files. After the Desktop loads, the tool will finish its work and display Finished.
Press a key to end the script execution and load your Desktop icons.
Once the Desktop icons are displayed, the SDFix report will open on the screen and will also be saved in the SDFix folder under the name Report.txt.
# Step 4/
Run the file MSNFix.bat located in the MSNfix folder on the desktop.
- Execute option R.
- If an infection is detected, execute option N.
- Save this report to your desktop.
# Step 5/
Run CCleaner: "Cleaner"/"start the cleaning" and that's it.
# Step 6/
Restart normally and post, in the same reply:
- The SmitfraudFix report that you saved on your desktop;
- The contents of the Report.txt file;
- The contents of the MSNfix report located on the Desktop;
- A new HijackThis report http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/hijackthis-version-install-sujet_199100_1.htm;
Specify any difficulties you encountered (what you could not do...) as well as the evolution of the situation.
# Step 1/ Download:
- CCleaner https://www.ccleaner.com/ccleaner/download
This software will subsequently allow you to delete all temporary files. Run it and click on "Options", "Advanced" and simply uncheck the box "Erase only files from the Windows Temp folder older than 48 hours", then close the program.
- SmitfraudFix (S!Ri) http://siri.urz.free.fr/Fix/SmitfraudFix.exe
* double-click the file "smitfraudfix.exe" and choose option 1, it will list all harmful items in a report: post it now.
- SDfix (Andy Manchesta) http://downloads.andymanchesta.com/RemovalTools/SDFix.exe and save it to your Desktop. Double-click on SDFix.exe and choose Install to extract it to C:\.
- MSNFix (!aur3n7) http://sosvirus.changelog.fr/MSNFix.zip and extract it to the Desktop.
***** Copy the rest of the procedure into a text file and restart in safe mode as indicated here https://www.wekyo.com/demarrer-le-pc-en-mode-sans-echec-windows-7-et-8/
Choose your current session "Admin" *****
# Step 2/
Double-click on the file "SmitfraudFix.exe" and choose option 2, answer yes to everything and let it proceed. Save the report to your desktop.
# Step 3/
Open the SDFix folder that was just created in the C:\ directory and double click on RunThis.bat to run the script.
Press Y and then Enter to start the cleaning process.
It will remove services and Registry entries for certain trojans found, then it will ask you to press a key to restart, do so to restart the PC.
Your system will take longer to restart than usual because the tool will continue to run and delete files. After the Desktop loads, the tool will finish its work and display Finished.
Press a key to end the script execution and load your Desktop icons.
Once the Desktop icons are displayed, the SDFix report will open on the screen and will also be saved in the SDFix folder under the name Report.txt.
# Step 4/
Run the file MSNFix.bat located in the MSNfix folder on the desktop.
- Execute option R.
- If an infection is detected, execute option N.
- Save this report to your desktop.
# Step 5/
Run CCleaner: "Cleaner"/"start the cleaning" and that's it.
# Step 6/
Restart normally and post, in the same reply:
- The SmitfraudFix report that you saved on your desktop;
- The contents of the Report.txt file;
- The contents of the MSNfix report located on the Desktop;
- A new HijackThis report http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/hijackthis-version-install-sujet_199100_1.htm;
Specify any difficulties you encountered (what you could not do...) as well as the evolution of the situation.
I'm reaching out to you stplyss because I have a problem that resembles the one mentioned in this forum, but I think it might actually be TASKMAN.EXE causing it. I found it in Windows, but given the accuracy of your response quoted above, I prefer to ask you for advice and see if I can follow the same procedure.
First, I want to clarify that I have Antivir running and I've done a scan with Kaspersky online. What really leads me to all this is that I'm currently backing up files, and after a while, a window appears telling me that Windows cannot copy because the file is inaccessible or corrupt! When I check the folders, they indeed appear to be empty. However, after unplugging an external hard drive on which I had this problem, then plugging it back in (USB), I find that the folders are no longer empty.
Thank you in advance for your help
Dany