this post was submitted on 26 Jan 2024
51 points (96.4% liked)

techsupport

2447 readers
1 users here now

The Lemmy community will help you with your tech problems and questions about anything here. Do not be shy, we will try to help you.

If something works or if you find a solution to your problem let us know it will be greatly apreciated.

Rules: instance rules + stay on topic

Partnered communities:

You Should Know

Reddit

Software gore

Recommendations

founded 1 year ago
MODERATORS
 

Because i am local admin and i'm authorized to do whatever i want, i can use process explorer.

But i want to use taskmgr.exe

The exe is signed by microsoft

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 65 points 9 months ago* (last edited 9 months ago) (2 children)

That's not a standard Windows prompt, looks like some third-party application is intercepting the call.

Check the registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options - for a key named taskmgr.exe. If it exists, see if the taskmgr.exe key has a value called Debugger. If so, delete the Debugger value, or rename the taskmgr.exe key to e.g. taskmgr.exe.old.

Then try launching Task Manager again.

If there's nothing in the registry, you could monitor the process tree in Process Explorer and watch what happens when you execute taskmgr.exe. You could also use Process Monitor if you want to dig deeper and find out exactly what's happening - you can filter out Microsoft processes to make it easier to see all thirdparty software interactions.

[–] [email protected] 32 points 9 months ago (1 children)

Yes! Thanks It intercepted the call and launched taskmanagerlauncher.exe

[–] [email protected] 12 points 9 months ago (1 children)

Which tells me that the actual executable may have been unprotected. I'd be curious if you run the exe directly if it would give you the same prompt.

[–] [email protected] 4 points 9 months ago

No, when the reg key is present, it launched the launcher even when doubleclicking on taskmgr.exe

[–] [email protected] 14 points 9 months ago

Doing something like this on a work pc is a good way to get written up.