There are some viruses that disable functions that enable you to close them down like ending a task in Task Manager or Regedit to stop you editing the registry entry or MSconfig to prevent you from deleting startup entries.
You might want to take some pre-emptive action to at least be able to copy these files and slightly rename them so you have a back-up and enable you to at least use these functions in an emergency.
There is a tool ‘xp_emergencyutil’ (http://www.dougknox.com/xp/utils/xp_emerutils.htm) that saves a copy of msconfig1.exe, Regedit.com and TaskMgr1.exe to a folder. Note the names have been slightly changed and in the regedit case the file type has been changed to .com, this allows access to these resources if the usual ones have been disabled.
— believe the taskmanager was really deleted in this case… avast! had a
—false alarm on a Chinese version of taskmgr some time ago.
what you said is right!
i try these method ,but it could not work!
The avast chest it a protected area (quarantine) from there nothing can access the infected file (except avast) nor can it be run, so it is quite safe.
So, do you have the Windows installation CD? I’m sure the file can be extracted from there.
(Well, doesn’t have to be the CD - copied installation on disk should be OK, too.)