Solved

Winmgr.exe?

Posted on 2004-09-13
8
326 Views
Last Modified: 2012-06-27
I have a strange problem occuring with my Windows XP Home Edition Machine.  Basicallly what happens the computer will get through its booting process, i log onto windows, but when its time for the icons to usually pop up on the desktop, they do not appear, and all i have is a blank blue screen.

So i figured out that if i launch task manager by Ctrl-Alt-Del, and i end a process call WINMGR.EXE, the desktop appears normally and the systems completes its boot.  My hunch was that is seemed very virus like.  So i updated my definitions and did a full systems scan (norton) and 9 infected files were found and removed.  However, he problem still exists.

Does anyone know how i can solve this issue?
0
Comment
Question by:andreacadia
  • 5
  • 3
8 Comments
 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 12048511
Hello andreacadia =)

U shud behaving a startup entry fo this file, so goto Start>Run>msconfig>Startup
and untick all applications except Antivirus and Firwall entries
restart and now check ??
0
 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 12048520
Also u can use a tool which can tell u abt bad Startup entries and can fix them, so Download HijackThis v1.98.2 from here, run it and Save the LOG file:
http://tools.radiosplace.com/HijackThis.exe

Then Post it at this site >> http://www.hijackthis.de/index.php?langselect=english
and it will automatically analyse it for u,,, Fix everything which it asks u to delete :)

and if still u cannot get it working, then Post here that LOG file, and we will tell u that what is BAD in it and how to remove them :)
0
 

Author Comment

by:andreacadia
ID: 12048542
i have done this and the entries still appear..there are someother suspect processes in task manager as well, if i remember correctly, one was called WINXP43.exe.

0
 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 12048581
ok that means ur system is infected with malwares\trojans
First complete the Hijackthis work..... and Fix all the bad entries using the automatic site, and if u feel it a little bit difficult, post here the log, i will check it for u !!

After finishing hijakchtis... run these tools in safemode to delete everything they detect !!
========================================================
AdAware ==> http://www.spychecker.com/program/adaware.html
SpyBot  ==> http://www.spychecker.com/program/spybot.html
Stinger >> http://vil.nai.com/vil/stinger
========================================================

Post Back if u still have any question :)
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 

Author Comment

by:andreacadia
ID: 12048608
what do you mean by "Hijackthis work"?
0
 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 12048636
:)

i posted in my second comment,,,,, to download hijackthis, run it, save its log file,
then post the contents of that log file on the autoamtic analyse site,,,, hit Analyse
it will analyse this log for u, and will tell u what is BAD which u need to fix by putting a check mark against it and clicking on Fix Checked,,,, and what is Good in it which u shudn't touch :)

Hijackthis is a tool which will tell u abt ur running processes, abt ur Startup processes, abt IE BHOs, and some installed activex objects also.... so u can get an idea that what is actually happening on ur system by analysing this log file with that Automatic Analyse Site :)

still confused :)
0
 

Author Comment

by:andreacadia
ID: 12049083
what automatic analyze site are you referring to?  you are assuming i have heard of the tools that you are talk about which i have not.
0
 
LVL 65

Accepted Solution

by:
SheharyaarSaahil earned 500 total points
ID: 12049183
andreacadia, can i plzz ask u to read my second commet(post) again :)

this is the tool which im talking abt is this, its called Hijackthis >> http://tools.radiosplace.com/HijackThis.exe
and this is its Automatic Log Analyse site >> http://www.hijackthis.de/index.php?langselect=english
where u can post the log taken from hijakchtis scan and it will tell u abt its Good and Bad things !!

Is my english is that much bad that u cannot understand it or... ??  :)
Shud i explain it KG type steppings.... soemthing liek this,,,,

1. Click this link >> http://tools.radiosplace.com/HijackThis.exe
2. Save the file to a New Folder on ur Desktop
3. After downloading, double click the file
4. U will see the SCAN button, hit it
5. It will scan ur system, and when it will finish, u will see a SAVE LOG button
6. Hit this button, and Save the file in the same New Folder
7. After saving a notepad file will open
8. Copy all its contents
9. Now go here >> http://www.hijackthis.de/index.php?langselect=english
10. Paste the contents in that white text box
11. click the button Analyse
12. when it will fisnish analysing, u can scroll down and can see the Analysation of ur LOG file
13. then entries which are BAD are termed as Nasty, in red color
14. then entires which are good, are termed as Safe, in green color
15. then entries which it cannot recognised, are termed as Unknown, in orange color
16. U just have to fix the lines which are termed as Nasty
17. to Fix, just check the lines in hijackthis and then click on Fix Checked

That's all i wanted u to do.... is it that difficult :)
never used this tool ever before :)
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
How does easy transfer work with Domain users? 2 111
WinXP Unable to Print 4 98
Salvaging a Windows XP system after failed in-place upgrade/repair 9 90
Windows 7 Share with XP 22 128
Most of the time we are in fix when all of sudden our systems behave weirdly.  Such problems cost time and effort... so it's best to take some preventive actions so that we can avoid such issues or overcome such problems more easily. Preventive M…
cPanel is a Unix based web hosting control panel that provides a graphical interface and automation tools designed to simplify the process of hosting a web site. cPanel utilizes a 3 tier structure that provides functionality for administrators, rese…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now