Solved ERROR: 'Windows Task Manager Has Stopped Working'

[GregHamilton]

Hi all, recently I have started to receive errors whenever I try to open task manager.

This is a screenshot of the error:

I've tried many different anti-virus programs, such as Combofix, Norton Internet Security and Malwarebytes. I have also used SFC /scannow and tried a clean boot, all of these options did not fix the problem and SFC /scannow did not detect any errors. I apologize for the short thread, my brain isn't functioning too well today and I can't think clearly. If you need any extra information I would be happy to help.

Thanks in advance,
Greg Hamilton

 

[alikhan]

Hello Greg ,

Try running sfc / scannow commmand to see if it may be able to repair the taskmgr.exe file.

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

 

[JonathanV]

Hello Greg ,

Try running sfc / scannow commmand to see if it may be able to repair the taskmgr.exe file.

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

He already ran sfc /scannow and did not find any errors.

Try System Restore and see if it's helps.
Open Start menu, type rstrui.exe and press Enter.
Choose restore point before Task Manager stops working.

 

[GregHamilton]

Hello Greg ,

Try running sfc / scannow commmand to see if it may be able to repair the taskmgr.exe file.

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

He already ran sfc /scannow and did not find any errors.

Try System Restore and see if it's helps.
Open Start menu, type rstrui.exe and press Enter.
Choose restore point before Task Manager stops working.

Hi Johnathan, thanks for your reply. Sadly, all restore points before this started occurring have been removed, they were there yesterday but I believe after I ran Combofix they may have been removed.

Should I try a repair install? If so, what could happen to my data, is it safe or will it be removed like after a reimaging/reformatting?

 

[alikhan]

Do you experience the behavior if you log in with another user account?

Perhaps, try renaming HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\TaskManager to e.g. HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\TaskManager.OLD in the registry. Then try launching Task Manager again.

 

[GregHamilton]

Do you experience the behavior if you log in with another user account?

Perhaps, try renaming HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\TaskManager to e.g. HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\TaskManager.OLD in the registry. Then try launching Task Manager again.

Yes, I do. I have already tried that solution but thanks for trying to help

 

[JonathanV]

Hi Johnathan, thanks for your reply. Sadly, all restore points before this started occurring have been removed, they were there yesterday but I believe after I ran Combofix they may have been removed.

Should I try a repair install? If so, what could happen to my data, is it safe or will it be removed like after a reimaging/reformatting?

Repair install keeps your user accounts, files, programs and settings.
Check out this tutorial below for how to repair install Windows 7:
http://www.sevenforums.com/tutorials/3413-repair-install.html

 

[Sir George]

Hi all, recently I have started to receive errors whenever I try to open task manager.

This is a screenshot of the error:

I've tried many different anti-virus programs, such as Combofix, Norton Internet Security and Malwarebytes. I have also used SFC /scannow and tried a clean boot, all of these options did not fix the problem and SFC /scannow did not detect any errors. I apologize for the short thread, my brain isn't functioning too well today and I can't think clearly. If you need any extra information I would be happy to help.

Thanks in advance,
Greg Hamilton

Try reviewing the suggestions in this thread;

http://www.sevenforums.com/crashes-...er-has-stopped-working-anytime-i-try-run.html

and this one;

http://answers.microsoft.com/en-us/...e/6e12d391-0943-4891-a8bc-3f288be18baf?page=3

I know you have already tried some of them, but there are additional tips.

HTH

 

[GregHamilton]

Thanks for your replies, Jonathan I'll go with a repair install, if nothing else works.

Thanks for those links Sir George, I'll run a memtest as soon as I can although I've had some bad experiences with burning ISO's to disks. I may still have a working disc from my XP PC, can you give me any instructions on any program to use to burn an ISO to a CD?

Thanks again for your help guys, much appreciated!

EDIT: Found a tutorial on the forums, these forums have everything!

EDIT 2: I only have DVDs right now, can I burn the ISO to them?

 

[GregHamilton]

Thought I'd give a little update. I re-ran MBAM and it found four viruses, I removed those but the problem still persists. I'll try to run Memtest86+ tomorrow if I have time, although there is only one slot containing RAM, if it detects errors will I have to replace the RAM or just reseat it and rerun Memtest86+?

If you can help with any other suggestions, that would be great.

 

[Golden]

I've tried many different anti-virus programs, such as Combofix, Norton Internet Security and Malwarebytes.

Hi Greg,

Combofix is an extremely powerful bit of software, that if used by an untrained person, can render your computer close to useless. This is the reason why every downlaod of Combofix carries this very explicit warning:

You should not run ComboFix unless you are specifically asked to by a helper. Also, due to the power of this tool it is strongly advised that you do not attempt to act upon any of the information displayed by ComboFix without supervision from someone who has been properly trained. If you do so, it may lead to problems with the normal functionality of your computer.

I wonder if some of the symptoms you are now experiencing are a product of using Combofix?

You mentioned that Malwarebytes found 4 viruses - can you recall their names? Please check the Malwarebytes scan log - the type of malware will determine the next steps to take.

My recommendation is to focus on this, before attempting anything else.

Regards,
Golden

 

[GregHamilton]

Thanks for the reply, Golden.

Malwarebytes found two counts of 'stolen.data' both of which were found in my AppData, it also found a 'Backdoor.MSIL.P' and a registry key classified as 'Malware.Trace'

If you need any extra information I would be happy to give it to you.

 

[Golden]

Hi,

OK. You have had some nasty infections:
Encyclopedia entry: Backdoor:MSIL/Pontoeb.P - Learn more about malware - Microsoft Malware Protection Center

What you need to do firstly, from a known clean computer is the following:
1. Change all online account passwords (e.g. forum accounts, email accounts, Facebook etc. etc.)
2. Change any on-line banking passwords

Since this trojan is backdoor trojan, we have no way of knowing what other payloads have been downloaded and hidden within your system. The non-responsiveness of Task Manager is a classic technique employed by malware to deny you the ability to find and kill malicious processes.....but the waters are muddied by what Combofix may or may not have damaged.

For this reason, and its probably not what you want to hear, I strongly recommend that you wipe the entire disk/s on your computer, and perform a fresh install. It sounds onerous, but we have the best tutorials and people to guide you through this, if you would like us too. A wipe and clean install is also the only way of guaranteeing 100% that your system is clean.

Digest this information, and then let me know how you want to proceed - we will make sure that you come through this as unscathed as possible.

Regards,
Golden

 

[GregHamilton]

Thanks again Golden. I was hoping I wouldn't have to reimage the PC. I'm in the process of changing all passwords on a different PC.

Would it be safe to backup my PC and bring that over to my new installation?

 

[Golden]

Hi,

By backup, do you mean data files (photo's, music, documents, spreadsheets, that sort of stuff)? Yes, but once backed up to the USB drive, scan them for your own peace of mind.

Regards,
Golden

 

[GregHamilton]

Yes, documents as well as my program settings.

Thanks for all your help, this forum is amazing.

 

[Golden]

No worries Greg. Can you be a bit more specific about 'program settings'......I don't want to mislead you. Of course you will have to completely reinstall your applications (e.g. Microsoft Office etc. etc.)

 

[GregHamilton]

I understand that I'll have to reinstall my programs, I've had to reimage/reformat PC's often. Sorry for not being clear, I meant things such as browser history or bookmarks, I have some tutorials that I'd like to keep. I've backed up my browser history and bookmarks before but I'm wondering if it is safe seeing as the trojan was detected in the AppData of Google Chrome.

 

[Golden]

I understand that I'll have to reinstall my programs, I've had to reimage/reformat PC's often. Sorry for not being clear, I meant things such as browser history or bookmarks, I have some tutorials that I'd like to keep. I've backed up my browser history and bookmarks before but I'm wondering if it is safe seeing as the trojan was detected in the AppData of Google Chrome.

Thats fine Greg. Concerning the browser history and bookmarks, if you confident that the earlier backup preceeds the malware, then I would say its safe. Otherwise, its a risk you need to weigh up.

It sounds as if you are almost ready for a clean install, so I'll drop this here for you when you are ready - it has some good tips/pointers if you need them:
http://www.sevenforums.com/tutorials/219487-clean-reinstall-factory-oem-windows-7-a.html

 

[GregHamilton]

Thanks again Golden.

Since my PC is not custom-built, would it be better to use my Factory Restore Disks or to reinstall a regular edition of Windows 7? I suppose using the factory restore disks would install A LOT of bloatware.. Although I'm not too sure as it contains the USB drivers and such.

Also, the last time I reimaged my PC I used diskpart to completely wipe my HDD, is this a safe way to wipe it?

Thanks for all your help!