Here is solution from the Microsoft article about enabling the task manager :

Enabling Task Manager from Group Policy Editor
1. Go to “Start” -> “Run” -> Write [sourcecode language='html']Gpedit.msc[/sourcecode] and press on “Enter” button.
2. Navigate to “User Configuration” -> “Administrative Templates” -> “System” -> “Ctrl+Alt+Del Options”
3. In the right side of the screen verity that “Remove Task Manager”” option set to “Disable” or “Not Configured”.
4. Close “Gpedit.msc” MMC.
5. Go to “Start” -> “Run” -> Write [sourcecode language='html']gpupdate /force[/sourcecode] and press on “Enter” button.

Enabling Task Manager from Registry Editor
1. Go to “Start” -> “Run” -> Write [sourcecode language='html']regedit[/sourcecode] and press on “Enter” button.
Warning: Modifying your registry can cause serious problems that may require you to reinstall your operating system.
Always backup your files before doing this registry hack.
2. Navigate to the following registry keys and verity that following settings set to default :
Windows Registry Editor Version 5.00
[sourcecode language='html'][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]“DisableTaskMgr”=dword:00000000
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionGroupPolicyObjectsLocalUserSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]“DisableTaskMgr”=dword:00000000
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciessystem]“DisableTaskMgr”=dword:00000000
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinlogon]“DisableCAD”=dword:00000000[/sourcecode]
3. Reboot the computer.

For your convenience, I have created a registry file. Just download, double click it and add the info to your registry. The task manager will be enabled. Post your experiences please.

Download the registry file here

Enabling Task Manager from the Run Menu

Abdullah mailed me this solution. Go to Start –> Run and copy and paste the following and press OK.

[sourcecode language='html']REG add HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem /v DisableTaskMgr /t REG_DWORD /d 0 /f[/sourcecode]

• Open Task Manager and in Processes tab end explorer.exe and wscript.exe process
• Open up File –> New Task (Run) in the Task manager
• Type cmd and hit Enter
• Type

[sourcecode language='html']del /a:h /f c:autorun.*[/sourcecode]

• Go to your WindowsSystem32 directory by typing

[sourcecode language='html']cd c:windowssystem32[/sourcecode]

• Type

[sourcecode language='html']dir /a:h /f avp*.*[/sourcecode]

• If you see any files names avpo.dll or avpo.exe or avpo.exe, use the

[sourcecode language='html']Del /a:h /f avpo.exe[/sourcecode]

• Open up File –> New Task (Run) in the Task manager, Type

[sourcecode language='html']regedit[/sourcecode]

• Navigate to

[sourcecode language='html']HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun[/sourcecode]

• If there are any entries for avpo.exe, delete them.
• Do a complete search of your registry for ntdelect.com and delete any entries you find.
• To Restore Folder Options Settings, Navigate to

[sourcecode language='html']HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenSHOWALL[/sourcecode]

Look at the “CheckedValue” key. This should be a DWORD key. If it isn’t, delete the key. Create a new key called “CheckedValue” as a DWORD (hexadecimal) with a value of 1. The “Show hidden files & folders” check box should now work normally.

This virus affects your system by :

• Disabling Task Manager
• Disabling Registry Editor
• Creates a startup entry to start upon system start and
• Creates its own exe files in Shared Documents folder which appear like ordinary folders.
• Disables Folder Options
• Uses your 50% or more processor

You can see that the folders in Shared Documents have an exe extension If you have unchecked Hide extensions for known file types in Folder Options.

Virus Removal Tool Description 2.5 (Also Removes Nhatquanglan Variant of NewFolder.exe)

Sets these entries in Registry
[sourcecode language='cpp'][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer]“NofolderOptions”=[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]“@”=[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]“YahooMessengger”=[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinlogon]“Shell”=”Explorer.exe”[/sourcecode]

Deletes Virus Files

• svichossst.exe
• autorun.inf
• at1.job
• autorun.ini
• (Nhatquanglan) scvhosts.exe
• blastclnnn.exe
• hinhem.scr
• All duplicated exe files in Shared Documents Folder
• Also the exe files in your selected folder

Download

http://www.od3n.net/tools/