Solved

Winmgr.exe?

Posted on 2004-09-13
8
322 Views
Last Modified: 2012-06-27
I have a strange problem occuring with my Windows XP Home Edition Machine.  Basicallly what happens the computer will get through its booting process, i log onto windows, but when its time for the icons to usually pop up on the desktop, they do not appear, and all i have is a blank blue screen.

So i figured out that if i launch task manager by Ctrl-Alt-Del, and i end a process call WINMGR.EXE, the desktop appears normally and the systems completes its boot.  My hunch was that is seemed very virus like.  So i updated my definitions and did a full systems scan (norton) and 9 infected files were found and removed.  However, he problem still exists.

Does anyone know how i can solve this issue?
0
Comment
Question by:andreacadia
  • 5
  • 3
8 Comments
 
LVL 65

Expert Comment

by:SheharyaarSaahil
Comment Utility
Hello andreacadia =)

U shud behaving a startup entry fo this file, so goto Start>Run>msconfig>Startup
and untick all applications except Antivirus and Firwall entries
restart and now check ??
0
 
LVL 65

Expert Comment

by:SheharyaarSaahil
Comment Utility
Also u can use a tool which can tell u abt bad Startup entries and can fix them, so Download HijackThis v1.98.2 from here, run it and Save the LOG file:
http://tools.radiosplace.com/HijackThis.exe

Then Post it at this site >> http://www.hijackthis.de/index.php?langselect=english
and it will automatically analyse it for u,,, Fix everything which it asks u to delete :)

and if still u cannot get it working, then Post here that LOG file, and we will tell u that what is BAD in it and how to remove them :)
0
 

Author Comment

by:andreacadia
Comment Utility
i have done this and the entries still appear..there are someother suspect processes in task manager as well, if i remember correctly, one was called WINXP43.exe.

0
 
LVL 65

Expert Comment

by:SheharyaarSaahil
Comment Utility
ok that means ur system is infected with malwares\trojans
First complete the Hijackthis work..... and Fix all the bad entries using the automatic site, and if u feel it a little bit difficult, post here the log, i will check it for u !!

After finishing hijakchtis... run these tools in safemode to delete everything they detect !!
========================================================
AdAware ==> http://www.spychecker.com/program/adaware.html
SpyBot  ==> http://www.spychecker.com/program/spybot.html
Stinger >> http://vil.nai.com/vil/stinger
========================================================

Post Back if u still have any question :)
0
Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

 

Author Comment

by:andreacadia
Comment Utility
what do you mean by "Hijackthis work"?
0
 
LVL 65

Expert Comment

by:SheharyaarSaahil
Comment Utility
:)

i posted in my second comment,,,,, to download hijackthis, run it, save its log file,
then post the contents of that log file on the autoamtic analyse site,,,, hit Analyse
it will analyse this log for u, and will tell u what is BAD which u need to fix by putting a check mark against it and clicking on Fix Checked,,,, and what is Good in it which u shudn't touch :)

Hijackthis is a tool which will tell u abt ur running processes, abt ur Startup processes, abt IE BHOs, and some installed activex objects also.... so u can get an idea that what is actually happening on ur system by analysing this log file with that Automatic Analyse Site :)

still confused :)
0
 

Author Comment

by:andreacadia
Comment Utility
what automatic analyze site are you referring to?  you are assuming i have heard of the tools that you are talk about which i have not.
0
 
LVL 65

Accepted Solution

by:
SheharyaarSaahil earned 500 total points
Comment Utility
andreacadia, can i plzz ask u to read my second commet(post) again :)

this is the tool which im talking abt is this, its called Hijackthis >> http://tools.radiosplace.com/HijackThis.exe
and this is its Automatic Log Analyse site >> http://www.hijackthis.de/index.php?langselect=english
where u can post the log taken from hijakchtis scan and it will tell u abt its Good and Bad things !!

Is my english is that much bad that u cannot understand it or... ??  :)
Shud i explain it KG type steppings.... soemthing liek this,,,,

1. Click this link >> http://tools.radiosplace.com/HijackThis.exe
2. Save the file to a New Folder on ur Desktop
3. After downloading, double click the file
4. U will see the SCAN button, hit it
5. It will scan ur system, and when it will finish, u will see a SAVE LOG button
6. Hit this button, and Save the file in the same New Folder
7. After saving a notepad file will open
8. Copy all its contents
9. Now go here >> http://www.hijackthis.de/index.php?langselect=english
10. Paste the contents in that white text box
11. click the button Analyse
12. when it will fisnish analysing, u can scroll down and can see the Analysation of ur LOG file
13. then entries which are BAD are termed as Nasty, in red color
14. then entires which are good, are termed as Safe, in green color
15. then entries which it cannot recognised, are termed as Unknown, in orange color
16. U just have to fix the lines which are termed as Nasty
17. to Fix, just check the lines in hijackthis and then click on Fix Checked

That's all i wanted u to do.... is it that difficult :)
never used this tool ever before :)
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
windows 10 install 6 93
RemoteApp Printing 5 93
Windows Web Server Permissions question ... 1 62
Map drive keeps removing itself 9 62
Most of the time we are in fix when all of sudden our systems behave weirdly.  Such problems cost time and effort... so it's best to take some preventive actions so that we can avoid such issues or overcome such problems more easily. Preventive M…
cPanel is a Unix based web hosting control panel that provides a graphical interface and automation tools designed to simplify the process of hosting a web site. cPanel utilizes a 3 tier structure that provides functionality for administrators, rese…
This video discusses moving either the default database or any database to a new volume.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

6 Experts available now in Live!

Get 1:1 Help Now