Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Winmgr.exe?

Posted on 2004-09-13
8
336 Views
Last Modified: 2012-06-27
I have a strange problem occuring with my Windows XP Home Edition Machine.  Basicallly what happens the computer will get through its booting process, i log onto windows, but when its time for the icons to usually pop up on the desktop, they do not appear, and all i have is a blank blue screen.

So i figured out that if i launch task manager by Ctrl-Alt-Del, and i end a process call WINMGR.EXE, the desktop appears normally and the systems completes its boot.  My hunch was that is seemed very virus like.  So i updated my definitions and did a full systems scan (norton) and 9 infected files were found and removed.  However, he problem still exists.

Does anyone know how i can solve this issue?
0
Comment
Question by:andreacadia
  • 5
  • 3
8 Comments
 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 12048511
Hello andreacadia =)

U shud behaving a startup entry fo this file, so goto Start>Run>msconfig>Startup
and untick all applications except Antivirus and Firwall entries
restart and now check ??
0
 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 12048520
Also u can use a tool which can tell u abt bad Startup entries and can fix them, so Download HijackThis v1.98.2 from here, run it and Save the LOG file:
http://tools.radiosplace.com/HijackThis.exe

Then Post it at this site >> http://www.hijackthis.de/index.php?langselect=english
and it will automatically analyse it for u,,, Fix everything which it asks u to delete :)

and if still u cannot get it working, then Post here that LOG file, and we will tell u that what is BAD in it and how to remove them :)
0
 

Author Comment

by:andreacadia
ID: 12048542
i have done this and the entries still appear..there are someother suspect processes in task manager as well, if i remember correctly, one was called WINXP43.exe.

0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 12048581
ok that means ur system is infected with malwares\trojans
First complete the Hijackthis work..... and Fix all the bad entries using the automatic site, and if u feel it a little bit difficult, post here the log, i will check it for u !!

After finishing hijakchtis... run these tools in safemode to delete everything they detect !!
========================================================
AdAware ==> http://www.spychecker.com/program/adaware.html
SpyBot  ==> http://www.spychecker.com/program/spybot.html
Stinger >> http://vil.nai.com/vil/stinger
========================================================

Post Back if u still have any question :)
0
 

Author Comment

by:andreacadia
ID: 12048608
what do you mean by "Hijackthis work"?
0
 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 12048636
:)

i posted in my second comment,,,,, to download hijackthis, run it, save its log file,
then post the contents of that log file on the autoamtic analyse site,,,, hit Analyse
it will analyse this log for u, and will tell u what is BAD which u need to fix by putting a check mark against it and clicking on Fix Checked,,,, and what is Good in it which u shudn't touch :)

Hijackthis is a tool which will tell u abt ur running processes, abt ur Startup processes, abt IE BHOs, and some installed activex objects also.... so u can get an idea that what is actually happening on ur system by analysing this log file with that Automatic Analyse Site :)

still confused :)
0
 

Author Comment

by:andreacadia
ID: 12049083
what automatic analyze site are you referring to?  you are assuming i have heard of the tools that you are talk about which i have not.
0
 
LVL 65

Accepted Solution

by:
SheharyaarSaahil earned 500 total points
ID: 12049183
andreacadia, can i plzz ask u to read my second commet(post) again :)

this is the tool which im talking abt is this, its called Hijackthis >> http://tools.radiosplace.com/HijackThis.exe
and this is its Automatic Log Analyse site >> http://www.hijackthis.de/index.php?langselect=english
where u can post the log taken from hijakchtis scan and it will tell u abt its Good and Bad things !!

Is my english is that much bad that u cannot understand it or... ??  :)
Shud i explain it KG type steppings.... soemthing liek this,,,,

1. Click this link >> http://tools.radiosplace.com/HijackThis.exe
2. Save the file to a New Folder on ur Desktop
3. After downloading, double click the file
4. U will see the SCAN button, hit it
5. It will scan ur system, and when it will finish, u will see a SAVE LOG button
6. Hit this button, and Save the file in the same New Folder
7. After saving a notepad file will open
8. Copy all its contents
9. Now go here >> http://www.hijackthis.de/index.php?langselect=english
10. Paste the contents in that white text box
11. click the button Analyse
12. when it will fisnish analysing, u can scroll down and can see the Analysation of ur LOG file
13. then entries which are BAD are termed as Nasty, in red color
14. then entires which are good, are termed as Safe, in green color
15. then entries which it cannot recognised, are termed as Unknown, in orange color
16. U just have to fix the lines which are termed as Nasty
17. to Fix, just check the lines in hijackthis and then click on Fix Checked

That's all i wanted u to do.... is it that difficult :)
never used this tool ever before :)
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are 2 things you must have in order to connect to the internet behind a router, The "Gateway IP" of the router, which is usually something like 192.168.xxx.1, I've seen routers with default values of: 192.168.0.1, 192.168.1.1, 192.168.11.1, …
Can you find a fax from a vendor you saved a decade ago in seconds? Have you ever cursed your PC under your breath during an audit because you couldn’t find the requested statement or driver history?  If you answered no to the first question or yes …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question