The printspooler services is not running

[Shahu]

Hi,

My computer got infected last week. I had multiple problems.

1. On activating Task Manager, I was getting this message "Task Manager Has been disabled by your administrator." I fixed it by deleting "DisableTaskMgr=.." from registry. It solved problem as long as I did not re-boot my computer. Once computer is rebooted I had same message. Randomly computer was shuting down with message" ...NT AUTHOrity/SYSTEM... This shutdown was initiated by services.exe...". I figured out from process I had file "kernels88.exe" loaded. So I went into safe mode and deleted all entries for "kernels88.exe. So both these problem is solved.

2. On virus scanning my computer, it kept rebooting every time when it reached system32 folder. Even in safe command prompt mode, I could not go beyond certian files in system32 folder. In Normal Windows mode as soon as you hit system32 folder computer rebooted. I went through your site and read sticky notes. So I went to the Panda Activescan site. After activescan it disinfected four viruses:

c:\hhtiscb.exe (Trj/Mailbot.AW)
c:\windows\system32\msasvc.exe (Trj/Sinowal.DU)
c:\windows\system32\msvcrl.dll (Trj/Goldun.UI)
c:\windows\temp\$_2341234.tmp (Trj/torpig.a)

I also installed spybot and ran in Safe Mode. It cleaned some 35 files. Now starting Microsoft Explorer gives error message for missing msvcrl.dll. So I am using FirFox for now.

3. I still don't have any printer in my printer folder. On adding printer still get message "Operation could not be completed. The printspooler services is not running." I went into services.msc and checked that printspooler is set to automatic. Manually starting printspooler won't help.

Any and All help is greatly appreciated.

Thank you.

[Tom.K]

For these problems:

My computer got infected last week. I had multiple problems.

1. On activating Task Manager, I was getting this message "Task Manager Has been disabled by your administrator." I fixed it by deleting "DisableTaskMgr=.." from registry. It solved problem as long as I did not re-boot my computer. Once computer is rebooted I had same message. Randomly computer was shuting down with message" ...NT AUTHOrity/SYSTEM... This shutdown was initiated by services.exe...". I figured out from process I had file "kernels88.exe" loaded. So I went into safe mode and deleted all entries for "kernels88.exe. So both these problem is solved.

2. On virus scanning my computer, it kept rebooting every time when it reached system32 folder. Even in safe command prompt mode, I could not go beyond certian files in system32 folder. In Normal Windows mode as soon as you hit system32 folder computer rebooted. I went through your site and read sticky notes. So I went to the Panda Activescan site. After activescan it disinfected four viruses:

c:\hhtiscb.exe (Trj/Mailbot.AW)
c:\windows\system32\msasvc.exe (Trj/Sinowal.DU)
c:\windows\system32\msvcrl.dll (Trj/Goldun.UI)
c:\windows\temp\$_2341234.tmp (Trj/torpig.a)

I also installed spybot and ran in Safe Mode. It cleaned some 35 files. Now starting Microsoft Explorer gives error message for missing msvcrl.dll. So I am using FirFox for now.

Go first to this link:"BEFORE you POST" -Preliminary Steps .
Then create new thread in this forum:Malware Removal .

[Shahu]

Thank you Tom for responding. I have moved topic under Melaware Removal.

[tashi]

Shahu's topic: http://forums.spybot.info/showthread.php?p=60609