Solved

Winmgr.exe?

Posted on 2004-09-13
8
347 Views
Last Modified: 2012-06-27
I have a strange problem occuring with my Windows XP Home Edition Machine.  Basicallly what happens the computer will get through its booting process, i log onto windows, but when its time for the icons to usually pop up on the desktop, they do not appear, and all i have is a blank blue screen.

So i figured out that if i launch task manager by Ctrl-Alt-Del, and i end a process call WINMGR.EXE, the desktop appears normally and the systems completes its boot.  My hunch was that is seemed very virus like.  So i updated my definitions and did a full systems scan (norton) and 9 infected files were found and removed.  However, he problem still exists.

Does anyone know how i can solve this issue?
0
Comment
Question by:andreacadia
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
8 Comments
 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 12048511
Hello andreacadia =)

U shud behaving a startup entry fo this file, so goto Start>Run>msconfig>Startup
and untick all applications except Antivirus and Firwall entries
restart and now check ??
0
 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 12048520
Also u can use a tool which can tell u abt bad Startup entries and can fix them, so Download HijackThis v1.98.2 from here, run it and Save the LOG file:
http://tools.radiosplace.com/HijackThis.exe

Then Post it at this site >> http://www.hijackthis.de/index.php?langselect=english
and it will automatically analyse it for u,,, Fix everything which it asks u to delete :)

and if still u cannot get it working, then Post here that LOG file, and we will tell u that what is BAD in it and how to remove them :)
0
 

Author Comment

by:andreacadia
ID: 12048542
i have done this and the entries still appear..there are someother suspect processes in task manager as well, if i remember correctly, one was called WINXP43.exe.

0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 12048581
ok that means ur system is infected with malwares\trojans
First complete the Hijackthis work..... and Fix all the bad entries using the automatic site, and if u feel it a little bit difficult, post here the log, i will check it for u !!

After finishing hijakchtis... run these tools in safemode to delete everything they detect !!
========================================================
AdAware ==> http://www.spychecker.com/program/adaware.html
SpyBot  ==> http://www.spychecker.com/program/spybot.html
Stinger >> http://vil.nai.com/vil/stinger
========================================================

Post Back if u still have any question :)
0
 

Author Comment

by:andreacadia
ID: 12048608
what do you mean by "Hijackthis work"?
0
 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 12048636
:)

i posted in my second comment,,,,, to download hijackthis, run it, save its log file,
then post the contents of that log file on the autoamtic analyse site,,,, hit Analyse
it will analyse this log for u, and will tell u what is BAD which u need to fix by putting a check mark against it and clicking on Fix Checked,,,, and what is Good in it which u shudn't touch :)

Hijackthis is a tool which will tell u abt ur running processes, abt ur Startup processes, abt IE BHOs, and some installed activex objects also.... so u can get an idea that what is actually happening on ur system by analysing this log file with that Automatic Analyse Site :)

still confused :)
0
 

Author Comment

by:andreacadia
ID: 12049083
what automatic analyze site are you referring to?  you are assuming i have heard of the tools that you are talk about which i have not.
0
 
LVL 65

Accepted Solution

by:
SheharyaarSaahil earned 500 total points
ID: 12049183
andreacadia, can i plzz ask u to read my second commet(post) again :)

this is the tool which im talking abt is this, its called Hijackthis >> http://tools.radiosplace.com/HijackThis.exe
and this is its Automatic Log Analyse site >> http://www.hijackthis.de/index.php?langselect=english
where u can post the log taken from hijakchtis scan and it will tell u abt its Good and Bad things !!

Is my english is that much bad that u cannot understand it or... ??  :)
Shud i explain it KG type steppings.... soemthing liek this,,,,

1. Click this link >> http://tools.radiosplace.com/HijackThis.exe
2. Save the file to a New Folder on ur Desktop
3. After downloading, double click the file
4. U will see the SCAN button, hit it
5. It will scan ur system, and when it will finish, u will see a SAVE LOG button
6. Hit this button, and Save the file in the same New Folder
7. After saving a notepad file will open
8. Copy all its contents
9. Now go here >> http://www.hijackthis.de/index.php?langselect=english
10. Paste the contents in that white text box
11. click the button Analyse
12. when it will fisnish analysing, u can scroll down and can see the Analysation of ur LOG file
13. then entries which are BAD are termed as Nasty, in red color
14. then entires which are good, are termed as Safe, in green color
15. then entries which it cannot recognised, are termed as Unknown, in orange color
16. U just have to fix the lines which are termed as Nasty
17. to Fix, just check the lines in hijackthis and then click on Fix Checked

That's all i wanted u to do.... is it that difficult :)
never used this tool ever before :)
0

Featured Post

What Is Transaction Monitoring and who needs it?

Synthetic Transaction Monitoring that you need for the day to day, which ensures your business website keeps running optimally, and that there is no downtime to impact your customer experience.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disclosure: Use this tutorial only when no other options helps to get Windows XP running without any problems and you don't want to format the drive. The back up of the data is the responsible of the user, however there is a description of how t…
Are you unable to synchronize your OST (Offline Storage Table) file with Microsoft Exchange Server? Is your OST file exceeding 2 GB size limit? In Microsoft Outlook 2002 and earlier versions, there is a 2 GB size limit for the OST file. If the file …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
In this video, viewers are given an introduction to using the Windows 10 Snipping Tool, how to quickly locate it when it's needed and also how make it always available with a single click of a mouse button, by pinning it to the Desktop Task Bar. Int…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question