It seems that task manager is disabaling it self. So it gets disabled "taskmanager disabled by computer administrator" so i go into registry and enable it and 2 days later its disabled again.. this surely isnt a serious problem but its annoying.... heres my hijack this log:
--------------------------------------------------------------------

RUN/regedit

click HKEY_CURRENT-USER
" Software
" Microsoft
" Windows
" Current Version
" Policies
" System

now double click task manager, change the value to zero.
Hopefully this should solve your problem.

Hi,

Welcome to PCHF, I'm sure they will get you all fixed up in no time.

One thing to keep in mind is when you post a HJT file, attach it to the post instead of copying and pasting it. No worries though, I've done it too.

PraiseJah

Hya Unomeasjon.


Boot youre pc in safemode (hit f8 when booting up) and then fix these with hjt:

And then manually delete the file in bold.



Dont fix these yet , but do you know youreself what they are from?:

O17 - HKLM\System\CS1\Services\Tcpip\..\{148F32C8-EE89-4100-9CCA-9F303807C881}: NameServer = 68.164.16.131,68.164.16.132
O17 - HKLM\System\CCS\Services\Tcpip\..\{148F32C8-EE89-4100-9CCA-9F303807C881}: NameServer = 64.105.159.250,64.105.124.154
O17 - HKLM\System\CS2\Services\Tcpip\..\{148F32C8-EE89-4100-9CCA-9F303807C881}: NameServer = 64.105.159.250,64.105.124.154
O17 - HKLM\System\CS3\Services\Tcpip\..\{148F32C8-EE89-4100-9CCA-9F303807C881}: NameServer = 64.105.159.250,64.105.124.154

And also this one , do you know and use this one?

O4 - Startup: WEBSERVER.lnk = C:\Documents and Settings\Jon.HOMEPC\Desktop\3.0.0 (vHost)\WEBSERVER.exe

If not , then upload the file in bold to this site please:

http://www.virustotal.com/en/indexf.html

And report back the scan result and a new hjt log please.

O4 - Startup: WEBSERVER.lnk = C:\Documents and Settings\Jon.HOMEPC\Desktop\3.0.0 (vHost)\WEBSERVER.exe

^^ that is my webserver thats good





as for
O17 - HKLM\System\CS1\Services\Tcpip\..\{148F32C8-EE89-4100-9CCA-9F303807C881}: NameServer = 68.164.16.131,68.164.16.132
O17 - HKLM\System\CCS\Services\Tcpip\..\{148F32C8-EE89-4100-9CCA-9F303807C881}: NameServer = 64.105.159.250,64.105.124.154
O17 - HKLM\System\CS2\Services\Tcpip\..\{148F32C8-EE89-4100-9CCA-9F303807C881}: NameServer = 64.105.159.250,64.105.124.154
O17 - HKLM\System\CS3\Services\Tcpip\..\{148F32C8-EE89-4100-9CCA-9F303807C881}: NameServer = 64.105.159.250,64.105.124.154

i have no idea about those


*EDIT* oh and thanks Joe5 task manager is fixed now... but the true test is to wait and se if it stays that way.... Thanks again man.

PS. but im not sure what this is:
O17 - HKLM\System\CS1\Services\Tcpip\..\{148F32C8-EE89-4100-9CCA-9F303807C881}: NameServer = 68.164.16.131,68.164.16.132
O17 - HKLM\System\CCS\Services\Tcpip\..\{148F32C8-EE89-4100-9CCA-9F303807C881}: NameServer = 64.105.159.250,64.105.124.154
O17 - HKLM\System\CS2\Services\Tcpip\..\{148F32C8-EE89-4100-9CCA-9F303807C881}: NameServer = 64.105.159.250,64.105.124.154
O17 - HKLM\System\CS3\Services\Tcpip\..\{148F32C8-EE89-4100-9CCA-9F303807C881}: NameServer = 64.105.159.250,64.105.124.154

Do you recoqnize this info/company? Is this youre ISP?

64.105.159.250 = [ h-64-105-159-250.phlapafg.covad.net ]

Registrant:
Covad Communications Company
110 Rio Robles
San Jose CA 95134
US
Domain Name: COVAD.NET
Administrative Contact Technical Contact:
Covad Communications domains@covad.com

110 Rio Robles
San Jose CA 95134
US
408-952-6400 fax: 408-952-7687
Record expires on 30-Jul-2010.
Record created on 31-Jul-1997.
Database last updated on 29-May-2006 11: 56: 27 EDT.
Domain servers in listed order:
NS3.COVAD.COM 66.134.75.38
NS4.COVAD.COM 66.134.75.39