1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

winamp/IE

Discussion in 'Windows - Software discussion' started by mbrownab, Dec 31, 2005.

  1. mbrownab

    mbrownab Guest

    Hello all I have a problem, whenever I iopen winamp to play a movie It always closes unexpectdly. also In My computer certain folders I open the whole prog shuts down. If anyone can help that would be much appreciated, TY in advance.
     
  2. rav009

    rav009 Active member

    Joined:
    Nov 14, 2005
    Messages:
    2,204
    Likes Received:
    0
    Trophy Points:
    66
    sounds like spyware or maybe worse...
    try theese


    install and update http://www.ewido.net/en/download/

    ccleaner http://www.ccleaner.com/
    cwshredder http://www.intermute.com/products/cwshredder.html
    ad-aware se http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-...
    spybot s&d http://www.majorgeeks.com/download2471.html
    download, update & run in safemode for the above in this order
    online virus scan http://housecall.trendmicro.com/housecall/start_corp.asp


    then post a HJT log thatll be very useful.

    Download Hijackthis!

    What is Hijackthis?
    HijackThis examines certain key areas of the Registry and Hard Drive and lists their contents.

    Hjt download -> http://koti.mbnet.fi/pattaya1/lataus/hijackthis_self.exe

    -> download -> Unzip to C:\HJT-> Press Ok and Close window

    Make sure that you actually extract HijackThis to its own folder: C:\HJT.
    DO NOT run it from within a zip manager (Winzip), or Desktop as no backups will be saved.



    Scan your computer

    Now Open Hijackthis -> Click "Do a system scan and save log file"
    Hjt will scan your computer for about 15 sec. -> Log file will pop up.

    Most items are perfectly fine. You should not remove them.
    Never remove everything by yourself.
    This forum will now help you work with the Experts to clean up your system.

    -> Copy and paste the contents of the HijackThis log into your post.
    Make new thread for your own log
    Post full log, begins with: Logfile of HijackThis v1.99.1... etc
     
    Last edited: Jan 1, 2006
  3. mbrownab

    mbrownab Guest

    Thanks Bud, I will try and post back, ty. Whats worse than Mal-ware or whatever you said??
     
  4. rav009

    rav009 Active member

    Joined:
    Nov 14, 2005
    Messages:
    2,204
    Likes Received:
    0
    Trophy Points:
    66
    well theres a chance that it could be a virus you know but no matter what itll be sorted ;)
     
  5. mbrownab

    mbrownab Guest

    Logfile of HijackThis v1.99.1
    Scan saved at 11:51:43 AM, on 01/01/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Installed\Spy Sweeper\SpySweeper.exe
    C:\Program Files\Installed\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\Program Files\Installed\Microsoft Broadband Networking\MSBNTray.exe
    C:\WINDOWS\ehome\ehSched.exe
    C:\Program Files\Installed\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Installed\Norton AntiVirus\IWP\NPFMntor.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Installed\Spy Sweeper\WRSSSDK.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINDOWS\ehome\ehmsas.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Installed\PeerWebDc++\PeerWeb DC++.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Outlook Express\msimn.exe
    C:\PROGRA~1\INSTAL~2\FIREFOX\FIREFOX.EXE
    C:\Program Files\Installed\ewido anti-malware\ewidoguard.exe
    C:\Program Files\Installed\ewido anti-malware\ewidoctrl.exe
    C:\WINDOWS\System32\msiexec.exe
    C:\Documents and Settings\Matthew\Desktop\hijackthis_self.exe
    C:\HJT\HijackThis.exe

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Installed\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Installed\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Installed\Norton AntiVirus\NavShExt.dll
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Installed\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Installed\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\Installed\ewido anti-malware\ewidoctrl.exe
    O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\Installed\ewido anti-malware\ewidoguard.exe
    O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Installed\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Installed\Norton AntiVirus\IWP\NPFMntor.exe
    O23 - Service: Access Remote PC Service (RpcSvr) - www.access-remote-pc.com - C:\Program Files\Installed\Access Remote PC\rpcsetup.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Installed\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Installed\Spy Sweeper\WRSSSDK.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

     
  6. rav009

    rav009 Active member

    Joined:
    Nov 14, 2005
    Messages:
    2,204
    Likes Received:
    0
    Trophy Points:
    66
    log looks clean, you didnt tell me if you did everything i told you to...
     
  7. mbrownab

    mbrownab Guest

  8. mbrownab

    mbrownab Guest

    my norton dectected virus threats(2) but couldnt delete them :(
    any good virus removals?
     
  9. rav009

    rav009 Active member

    Joined:
    Nov 14, 2005
    Messages:
    2,204
    Likes Received:
    0
    Trophy Points:
    66
  10. mbrownab

    mbrownab Guest

  11. rav009

    rav009 Active member

    Joined:
    Nov 14, 2005
    Messages:
    2,204
    Likes Received:
    0
    Trophy Points:
    66
    ok we'll just manualy remove the viruses, can you please tell me what they are.
     
  12. mbrownab

    mbrownab Guest

    I will do a scazn tonight and post tomorrow morning, Thanks a bunch for your help. if you have msn or yahoo messenger that would be awsome
     
  13. rav009

    rav009 Active member

    Joined:
    Nov 14, 2005
    Messages:
    2,204
    Likes Received:
    0
    Trophy Points:
    66
    Last edited: Jan 3, 2006

Share This Page