Information and startup locations can be examined on this page: verify all your files to make sure that they are legitimate, digitally signed and from the company Microsoft Corporation to which they should belong.
taskmgr.exe security and file info
Administrador de tareas de Windows
- Sistema operativo Microsoft® Windows®
- Microsoft Corporation
 |
 |
 |
| Filetype : executable |
An executable file is a program that can be executed in your windows environment.
|
|
What is taskmgr.exe?
This is the Windows Task Manager. It allows you to see which programs are currently running, kill processes, and view resource usage. The following is a screenshot of the Task Manager running under Windows XP:

The existence of this program is essential to the operation of the system; however, killing it will simply result in the Task Manager closing. Do not, however, make any attempt to permanently remove the Task Manager. The following screenshot illustrates how this process should appear in the Task Manager:

Notice that taskmgr.exe typically runs as the current user (in this case, Mike). A process with this name running as a user other than the current user may indicate a malware infection.
Dangers of taskmgr
As this is a program that exists on all Windows systems, and always shows up when you are looking at the list of processes running, it is common for virus writers and spyware vendors to disguise their malware as the genuine one.
Some malicious files may have the same name as this but be stored somewhere other than in %SystemRoot%\System32. Other malware may use a name that appears similar to that of the legitimate one but with slight differences in spelling or with appended digits. The following malware is known to disguise itself as taskmgr.exe:
- Troj/Banker-EJU (%SystemRoot%)
- This is a banking Trojan that will try to steal passwords to various online banking websites.
- W32/Sayonara-A (%SystemRoot%\System)
- This is a Trojan that will make periodic attempts to connect to a remote URL.
- W32/Tigs-C (%SystemRoot%)
- This is a worm that modifies the HOSTS file to prevent access to a variety of security-related websites.
There will typically be only one instance of this process running at a given time on a system, as it is uncommon to run more than one copy of the Task Manager at once. The presence of multiple instances may be an indicator of a malware infection.
Common problems
- This process uses 100% CPU time
- This problem is known to occur as a result of a Windows update. Be sure you have all of the latest updates for your system.
- This problem is also known to occur as a result of some old versions of the nForce chipset drivers. Be sure that they are up-to-date.
- If you have an ATI graphics card, be sure your drivers are up-to-date.
|
|
|
|
|
|
| MD5 File security rating |
A MD5 hash is a unique fingerprint of a file.
Different files/versions can have the same filenames. The MD5 hash verifies that the legitimate file is not altered.
Runscanner (Freeware) can help you checking the file's MD5 hashes
| Taskmgr.exe files in Runscanner database |
 |
|
130 different item(s) in database |
 |
|
1 different item(s) in database |
 |
|
3 different item(s) in database |
 |
|
122 different item(s) in database |
|
 |
Green items are verified safe to use |
 |
Unrated items are not yet checked for safety. |
 |
Red items are not safe (typically virusses, spyware or other malware) |
 |
This file is digitally signed by it's publisher.
This means that the file is from the company claiming to created it, this does not mean by default that the file is safe
|
|
|
|
| General file info |
| Product name: |
Sistema operativo Microsoft® Windows®
|
| Description: |
Administrador de tareas de Windows
|
| Company: |
Microsoft Corporation
|
| Fix TASKMGR.EXE errors: Free registry scan |
|
|
|
| Pacman startup database |
|
Windows Task Manager in Windows XP. If run from the Startup folder, the tray icon will be put to the system tray after boot. Useful to check if XP has finished running the delayed services after boot. Available via a desktop shortcut |
|
Added by the Startpage.G hijacker. Note - this is NOT the Windows Task Manager file! |
|
Detected as Trojan-Spy.Win32.IamBigBrother.91 by Kaspersky, possibly a commercial keylogger |
| info provided by sysinfo.org |
|
|
|
Automatic startup locations
 |
| |
 |
001 Running Processes |
| |
 |
002 Autorun registry entries local machine |
| |
 |
003 Autorun registry entries Current User |
| |
 |
004 All users startup startmenu |
| |
 |
005 Current user startup startmenu |
| |
 |
006 Start Menu\Programs\Startup |
| |
 |
007 Roaming Start Menu\Programs\Startup |
| |
 |
010 Installed services |
| |
 |
033 Winlogon Userinit |
| |
 |
038 Winlogon Taskman |
| |
 |
063 BootExecute |
| |
 |
065 Image File Execution Options (debugger) |
| |
 |
166 HKCU Policies\Explorer\Run |
| |
 |
167 HKLM Policies\Explorer\Run |
| |
 |
171 Screensaver |
User comments for this file
More system processes
|
|
| Filename / Process |
|
| Guid / CLSID |
|
| MD5 hash |
|
|
|
256 MD5 version(s) found
only top 10 displayed
|
|
|
| Check your autostart files
|
|
|
|