+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: [NEW]Prominent's enabling task manager ![RESEARCH] (/showthread.php?tid=1635523)
Pages: Pages
1
2
[NEW]Prominent's enabling task manager ![RESEARCH] - Prominent - Aug 21, 2011
[img]http://img710.imageshack.us/img710/3908/in1tro.png[/img]
[img]http://img807.imageshack.us/img807/2514/77225614.png[/img]
Hey guys , this is Prominent . I've seen a few people around here with a disabled task manager asking how could fix this . So I decided to write my own tutorial hoping it might be useful for some who have their task manager disabled ! = )
[img]http://img801.imageshack.us/img801/1471/whatwillthisguidefeatur.png[/img]
This guide will feature several stuff listed here :
- Introduction
- What will be included in this guide
- How did your task manager get disabled
- How can you enable it again(Several methods)
- Credits
[img]http://img833.imageshack.us/img833/4044/howdiddisabled.png[/img]
Most of the people ask themselves when they found out that their task manager got disabled and ask how that happened , well the only ways to disable a task manager is by the following stuff :
- Viruses
- Keyloggers
- RATs
- Disabling it manually
[img]http://img148.imageshack.us/img148/1839/unled1ezy.png[/img]
Let's start by a fast method which is by creating a batch file . Create two new text documents and rename one to enable.bat when you click enter an error will appear saying "If you change a file name extension, the file may become unusable. Are you sure you want to change it" all you have to do is click yes .
[img]http://img706.imageshack.us/img706/2671/newbitmapimagewt.png[/img]
Now right click on enable.bat and click Edit and insert this code :
Code
@echo off
ECHO REGEDIT4 > %WINDIR%\DXM.REG
echo. >> %WINDIR%\DXM.reg
echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] >> %WINDIR%\DXM.reg
echo "DisableTaskMgr"=dword:0 >> %WINDIR%\DXM.reg
echo [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] >> %WINDIR%\DXM.reg
echo "DisableTaskMgr"=dword:0 >> %WINDIR%\DXM.reg
start /w regedit /s %WINDIR%\DXM.reg[img]http://img805.imageshack.us/img805/9213/92122002.png[/img]
Now open this batch file and your task manager will be enabled !🤗
Let's head over to the second method where we are going to use gpedit.msc .
Click the start and go to run( In case of windows 7 and vista click start and type run ) then type in gpedit.msc !
[img]http://img856.imageshack.us/img856/48/gpeditmsc.png[/img]
If you can't open it do the following :
Type "mmc" at Run and press enter
Click on file menu and select Add/Remove Snap-in then click on add and select group policy object editor and click add now click finish.
Click close and group policy object editor will appear in the dialog box make sure to click OK then you can access the group policy from MMC then undo all the changes you've made !
NOTE: Some OS's don't allow the use of gpedit.msc .
If you open gpedit.msc then go to the following :
[img]http://img198.imageshack.us/img198/4061/cltalt.png[/img]
Now double click on remove task manager if it says Not configured or Enable then choose Disable . Then click on OK and there you go ! You enabled your task manager !
Now for the third method . The third method is by using scripts .
Code
Option Explicit
'Declare variables
Dim WSHShell, n, MyBox, p, t, mustboot, errnum, vers
Dim enab, disab, jobfunc, itemtype
Set WSHShell = WScript.CreateObject("WScript.Shell")
p = "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\"
p = p & "DisableRegistryTools"
itemtype = "REG_DWORD"
mustboot = "Log off and back on, or restart your pc to" & vbCR & "effect the changes"
enab = "ENABLED"
disab = "DISABLED"
jobfunc = "Registry Editing Tools are now "
'This section tries to read the registry key value. If not present an
'error is generated. Normal error return should be 0 if value is
'present
t = "Confirmation"
Err.Clear
On Error Resume Next
n = WSHShell.RegRead (p)
On Error Goto 0
errnum = Err.Number
if errnum <> 0 then
'Create the registry key value for DisableRegistryTools with value 0
WSHShell.RegWrite p, 0, itemtype
End If
'If the key is present, or was created, it is toggled
'Confirmations can be disabled by commenting out
'the two MyBox lines below
If n = 0 Then
n = 1
WSHShell.RegWrite p, n, itemtype
Mybox = MsgBox(jobfunc & disab & vbCR & mustboot, 4096, t)
ElseIf n = 1 then
n = 0
WSHShell.RegWrite p, n, itemtype
Mybox = MsgBox(jobfunc & enab & vbCR & mustboot, 4096, t)
End IfNow for the other script copy the following code :
Code
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Policies\System] "DisableTaskMgr"=dword:0NOTE:Make sure there are NO blank lines before REGEDIT4 .
Fourth method is by using the following :
Open up Run (Windows key +R), and run the code below.
Code
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /fCode
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f[img]http://img155.imageshack.us/img155/7/wlamommo.png[/img]
- Prominent
- PeterChao (Second script and fourth method )
- ChromeWolf (Regedit script used in the third method )
Waiting for your feedback ! If you think that anything should be fixed in here feel free to post here and I will try my best to fix it !Or if there is more methods to enable Task manager manually then feel free to post it here and I will add it to the thread !
![[Image: HghSv.jpg]](https://i.imgur.com/HghSv.jpg)
* - BullShooter - Aug 21, 2011
Wow serious High Quality post! I quickly read it and it will be really helpful for infected users! Seriously GREAT post man and thank you for the information!
* - Black Hole - Aug 21, 2011
Dude, this happened to me like 2 years ago, WISH I HAD KNOWN ABOUT THIS EARLIER!!!
MUST READ: High quality stuff man! <3
* - Eruditus - Aug 21, 2011
Prominent, good friend and very high quality.
Good work man :)
* - [ Delta ] - Aug 21, 2011
High Quality post! I quickly read it and it will be really helpful for infected users!
* - Prominent - Aug 21, 2011
Thank you everyone for the amazing feedback ! I'm glad you like it ! Also glad that this is helpful : )
* - Poseidon - Aug 21, 2011
Prominent, good friend and very high quality.
Good work man :)
* - Prominent - Aug 21, 2011
(Aug 21, 2011 08:28 PM)Poseidon Wrote: Prominent, good friend and very high quality.Thank you very much ! By the way did you just copy what Cymraeg said ? Lol
Good work man :)
* - Acrolyte - Aug 21, 2011
Very nice Prominent. Good information as always :)
* - Poseidon - Aug 21, 2011
(Aug 21, 2011 08:34 PM)Prominent Wrote: Thank you very much ! By the way did you just copy what Cymraeg said ? Lol
i was eating and i didnt want to type the whole thing
* - Prominent - Aug 21, 2011
(Aug 21, 2011 08:55 PM)Krushed Wrote: Very nice Prominent. Good information as always :)
Thank you ! Glad you like the information will post more soon ;)
(Aug 21, 2011 08:57 PM)Poseidon Wrote: i was eating and i didnt want to type the whole thing
No problem , anws it seemed like you liked it :P
* - Linix - Aug 31, 2011
very high quality tutorial and this helped me ! thanks!
* - Prominent - Aug 31, 2011
(Aug 31, 2011 04:14 AM)Linix Wrote: very high quality tutorial and this helped me ! thanks!
Thanks for the feedback , I'm happy that my tutorial helped you 👍
* - TheJakeRockz - Aug 31, 2011
This is great! If my task manager ever gets disabled i now have a .bat file to reenable it. Very High quality post, and very helpful. TY!
* - Prominent - Aug 31, 2011
(Aug 31, 2011 08:11 AM)TheJakeRockz Wrote: This is great! If my task manager ever gets disabled i now have a .bat file to reenable it. Very High quality post, and very helpful. TY!
Glad you like my tutorial , thanks for the feedback :)