how to delete that viurs ?

a few days ago, a virus appeared in my pc , avast on my pc detected it and i delete it.

after that , i found CTRL+ALT+DELETE doesn’t work ,that means taskmgr.exe has been deleted from my pc.

i want to know how to get taskmgr.exe and let it work.
my pc is winxp system.

hope your avast do best in all kinds of virus software.

who can help me ?

thanks!

Do you have Windows XP installation CD? You should be able to extract the file from there, or even run a repair of Windows installation.

Try running Spybot Search & Destroy:

http://www.safer-networking.org/

The problem may be that a registry entry has been changed to provent Task Manager being run, rather than the file been deleted.

There are some viruses that disable functions that enable you to close them down like ending a task in Task Manager or Regedit to stop you editing the registry entry or MSconfig to prevent you from deleting startup entries.

You might want to take some pre-emptive action to at least be able to copy these files and slightly rename them so you have a back-up and enable you to at least use these functions in an emergency.

There is a tool ‘xp_emergencyutil’ (http://www.dougknox.com/xp/utils/xp_emerutils.htm) that saves a copy of msconfig1.exe, Regedit.com and TaskMgr1.exe to a folder. Note the names have been slightly changed and in the regedit case the file type has been changed to .com, this allows access to these resources if the usual ones have been disabled.

I believe the taskmanager was really deleted in this case… avast! had a false alarm on a Chinese version of taskmgr some time ago.

thanks a lot!

— believe the taskmanager was really deleted in this case… avast! had a
—false alarm on a Chinese version of taskmgr some time ago.
what you said is right!
i try these method ,but it could not work!

:slight_smile: Hi :

  You were foolish to "delete"; we ALWAYS advise to
  FIRST "quarantine", to prevent what happened to you .

thanks a lot!

because
i am afraid that it still attack my pc.

The avast chest it a protected area (quarantine) from there nothing can access the infected file (except avast) nor can it be run, so it is quite safe.

So, do you have the Windows installation CD? I’m sure the file can be extracted from there.
(Well, doesn’t have to be the CD - copied installation on disk should be OK, too.)

thanks all very much!