Solved

Winmgr.exe?

Posted on 2004-09-13
8
331 Views
Last Modified: 2012-06-27
I have a strange problem occuring with my Windows XP Home Edition Machine.  Basicallly what happens the computer will get through its booting process, i log onto windows, but when its time for the icons to usually pop up on the desktop, they do not appear, and all i have is a blank blue screen.

So i figured out that if i launch task manager by Ctrl-Alt-Del, and i end a process call WINMGR.EXE, the desktop appears normally and the systems completes its boot.  My hunch was that is seemed very virus like.  So i updated my definitions and did a full systems scan (norton) and 9 infected files were found and removed.  However, he problem still exists.

Does anyone know how i can solve this issue?
0
Comment
Question by:andreacadia
  • 5
  • 3
8 Comments
 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 12048511
Hello andreacadia =)

U shud behaving a startup entry fo this file, so goto Start>Run>msconfig>Startup
and untick all applications except Antivirus and Firwall entries
restart and now check ??
0
 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 12048520
Also u can use a tool which can tell u abt bad Startup entries and can fix them, so Download HijackThis v1.98.2 from here, run it and Save the LOG file:
http://tools.radiosplace.com/HijackThis.exe

Then Post it at this site >> http://www.hijackthis.de/index.php?langselect=english
and it will automatically analyse it for u,,, Fix everything which it asks u to delete :)

and if still u cannot get it working, then Post here that LOG file, and we will tell u that what is BAD in it and how to remove them :)
0
 

Author Comment

by:andreacadia
ID: 12048542
i have done this and the entries still appear..there are someother suspect processes in task manager as well, if i remember correctly, one was called WINXP43.exe.

0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 12048581
ok that means ur system is infected with malwares\trojans
First complete the Hijackthis work..... and Fix all the bad entries using the automatic site, and if u feel it a little bit difficult, post here the log, i will check it for u !!

After finishing hijakchtis... run these tools in safemode to delete everything they detect !!
========================================================
AdAware ==> http://www.spychecker.com/program/adaware.html
SpyBot  ==> http://www.spychecker.com/program/spybot.html
Stinger >> http://vil.nai.com/vil/stinger
========================================================

Post Back if u still have any question :)
0
 

Author Comment

by:andreacadia
ID: 12048608
what do you mean by "Hijackthis work"?
0
 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 12048636
:)

i posted in my second comment,,,,, to download hijackthis, run it, save its log file,
then post the contents of that log file on the autoamtic analyse site,,,, hit Analyse
it will analyse this log for u, and will tell u what is BAD which u need to fix by putting a check mark against it and clicking on Fix Checked,,,, and what is Good in it which u shudn't touch :)

Hijackthis is a tool which will tell u abt ur running processes, abt ur Startup processes, abt IE BHOs, and some installed activex objects also.... so u can get an idea that what is actually happening on ur system by analysing this log file with that Automatic Analyse Site :)

still confused :)
0
 

Author Comment

by:andreacadia
ID: 12049083
what automatic analyze site are you referring to?  you are assuming i have heard of the tools that you are talk about which i have not.
0
 
LVL 65

Accepted Solution

by:
SheharyaarSaahil earned 500 total points
ID: 12049183
andreacadia, can i plzz ask u to read my second commet(post) again :)

this is the tool which im talking abt is this, its called Hijackthis >> http://tools.radiosplace.com/HijackThis.exe
and this is its Automatic Log Analyse site >> http://www.hijackthis.de/index.php?langselect=english
where u can post the log taken from hijakchtis scan and it will tell u abt its Good and Bad things !!

Is my english is that much bad that u cannot understand it or... ??  :)
Shud i explain it KG type steppings.... soemthing liek this,,,,

1. Click this link >> http://tools.radiosplace.com/HijackThis.exe
2. Save the file to a New Folder on ur Desktop
3. After downloading, double click the file
4. U will see the SCAN button, hit it
5. It will scan ur system, and when it will finish, u will see a SAVE LOG button
6. Hit this button, and Save the file in the same New Folder
7. After saving a notepad file will open
8. Copy all its contents
9. Now go here >> http://www.hijackthis.de/index.php?langselect=english
10. Paste the contents in that white text box
11. click the button Analyse
12. when it will fisnish analysing, u can scroll down and can see the Analysation of ur LOG file
13. then entries which are BAD are termed as Nasty, in red color
14. then entires which are good, are termed as Safe, in green color
15. then entries which it cannot recognised, are termed as Unknown, in orange color
16. U just have to fix the lines which are termed as Nasty
17. to Fix, just check the lines in hijackthis and then click on Fix Checked

That's all i wanted u to do.... is it that difficult :)
never used this tool ever before :)
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Most of the time we are in fix when all of sudden our systems behave weirdly.  Such problems cost time and effort... so it's best to take some preventive actions so that we can avoid such issues or overcome such problems more easily. Preventive M…
If your system is showing symptoms of browser hijacks or 'google search redirects' check out my other article (http://rdsrc.us/u3GP7A) first and run the tool TDSSKiller (http://rdsrc.us/GDBBs4) to get rid of the infection. Once done, and if the …
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question