Strav's blog

In helping a friend with a system that had been infected with the IS2010 virus, I removed the underlying virus files, but there was still issues - particularly that ctrl-alt-del did not work as well as task manager did not work.  I removed user prohibitions for running this which resulted in the option becoming available again on the right click/taskbar however task manager still would not run.  After quite a bit of research I found this page which pointed out that there were entries under this reg key

hklm/software/microsoft/windows NT/current version/Image File Execution Options

with taskmgr.exe and value labled "debugger". When removed, task manager would open again from everywhere, without having to rename it. There was also a bunch of anti virus applications listed under this key which would presumable prevent them from running.