11 replies to this topic

[haxorphreak]

For some strange reason, CTRL+ALT+DEL dosen't work, and neither does opening taskman.exe from the run prompt. Of course this may or may not be a result of a P2P incident.
I'm currently running Spybot and performing a virus scan, some things I needed to do anyway.
Has this ever happened to anyone?

[monjardin]

It's been awhile since I messed with this stuff, but CTRL+ALT+DEL used to be controlled through the GINA DLL. You could customize your windows login by replacing this DLL with a home-rolled one.
On the other hand, you could make a great key-press recorder/password stealer by doing to same. Not to make you nervous or anything... :o

[roel]

with xp it isn't as easy as it used to be to replace system dlls, they are not only locked since they are loaded, but they are also protected by sfc/sfp. yeah, i know, it can be fooled, it isn't very easy though.

[haxorphreak]

Maybe I can find a replacement for this "gina.dll" and replace it through Linux.
This sfc/sfp, is that related to fservice.exe? That file got deleted by AVG, but CTRL+ALT+DEL wasn't working before that. It was opening Limewire for some reason.

[Reedbeta]

This sounds like you've got a spyware infection...

Or just do a repair install of windows =p

[haxorphreak]

Well I can't because my computer didn't come with an XP cd for some reason, and my friend's is Pro, as opposed to Home. Unless I can use another one that came with another brand.
Or if I can find out how to see what processes are going on and all that stuff I can try to write my own taskmanager, the harder route yes but it'll be worth it.

Thanks for all y'all's help so far. :happy:

[Reedbeta]

You can use a Pro CD to "upgrade" a Home version, no reformat required and it even keeps a lot of your system settings. Of course, you'll need a product key to do that...

[Altair]

You can try to rename taskman.exe to something else and run it. I had similar problem before with regedit.exe because some spyware was closing it after couple of secs and renaming the executable fooled it. Also, rather than reinstalling your Windows try to install some virus scan software.

Cheers, Altair

[Reedbeta]

He says he's already run spyware and virus scans.

If you haven't already, try running these in safe mode; many pieces of malware can defeat their detectors in normal mode.

[Altair]

Yeah, but it depends which virus check you use if it's able to find it. I just did search with "taskman virus" in google and got following link as first hit:
http://securityrespo....merkur@mm.html
You might want to check if you got same symptoms (e.g. if you got C:\Pr0n.bat file) as it seems to overwrite taskman.exe.

Cheers, Altair

[haxorphreak]

Thanks for the link. After I finish an English paper, I'll try it and see if it works.

[haxorphreak]

Whoa for some reason when I returned home from out of town it suddenly works. I got rid of a ton of viruses (my computer was like a dead hooker :-D ) and it must have gotten the right one.
Mucho thanks for everyone's help!