Home
Saturday, April 29, 2017
4:02:34 AM
Users online: 0   You are here >> Home > Building and Trouble Shooting

Forums | Building and Trouble Shooting Forums search
Forum FAQ
   
  1  
GARRR!!! SAVE ME PLEASE
rayzzz 
6/9/08 1:53:00 AM
Disciple
i dont know if this is the right forum
but im in need of help. just an hour ago, windows media player keeps popping up. it doesnt stop. i cant get rid of it.i cant delete i cant do anything! even typing is a pain.it keeps on switching to media player. i cant end process asit just re initiates. if i delete it the files come back.!! is there a way to solve this? pls help.

Thanks

-----
*tadaa

eckythump 
6/9/08 2:04:36 AM
Champion

Short of reinstalling? Dunno.

You could have a virus/spyware/malware of some description. Trying to locate the cause while it's continually getting in the way could be troublesome.

Does it launch multiple instances? Can you not just leave it open and put it to the background and ignore it while you figure out what's wrong?

What's it actually playing, if anything?

I take it rebooting doesn't fix it? Safe mode? System restore?

-----
My mind is a swirling miasma of scintillating thoughts and turgid ideas.

sora3 
6/9/08 11:23:31 AM
Immortal

Could you post up what happened before leading up to issue? That way, we can eliminate a few things as eckythump suggested several ideas but unless we have a bigger picture, we can only guess...

-----
Embrace your dreams and never forget your honour.

Quote by Jen-Hsun Huang
"How much faster can you render the blue screen of death?"



maxamatosis 
6/9/08 11:53:00 AM
Master

Unplug your MP3 player or eject the CD full of music from your drive. Sounds like some bizzarre autorun thing.

Other theories: Could be a website you are browsing has background sound not embedded properly so it opens in a stand alone player. Could also be a downloading program trying to preview files (Limewire etc).

-----
So I tell him I killed God. I tracked God down like a rabid dog, hacked off his legs with a hedge trimmer, raped him with a corncob, and boiled off his corpse in an acid bath. - Spider Jerusalem

rayzzz 
6/9/08 1:20:28 PM
Disciple
i cant really uninstall it , it does a roll back and thats it. and the problem continues. i scanned the windows media player folder adn it showed nothing. It doesnt launch multiple instances. Yesterday it seemed to dominate wht i was doing. say i was typing something, it would switch to the player. and if i were to close it, or end process it starts up again. havent tried safe mode or system restore.


*oh and just before i turned the comp off, it came up with a drwatsons post mortem error


Edited by rayzzz: 6/9/2008 1:22:01 PM

-----
*tadaa

Master_Scythe 
6/9/08 1:23:49 PM
Titan

Please download HiJackThis! (these days owned by Trend Macro i think, wither way its free.)

save a log file, and post the log file here.

I'll tell you what to disable.

-----
4200+X2 939, ASUS A8N-SLI-D, Ati HD3850, 1gb,1tb total HDD, 109 DVD, LG DVD-rom.
Quote by Girvo
I've got a wicked tiny one that is ridiculously sensitive.



Midnighter 
6/9/08 1:32:58 PM
Immortal

Have you tried rebooting? And shouting HELP ME!!! in captitals in your heading is frowned upon.

What anti-virus are you running? Are you running anti-spyware/malware software? What have you installed prior to this happening? Have you scanned your machine for nasties?


Edited by Midnighter: 6/9/2008 1:39:31 PM

-----
-If there's one thing guaranteed to fuck me off, it's the sheer miserable meanness of the human race.
-The price of freedom, the price to soar, is small. All they ask for is your wings.
-In a war, there are no good guys, and no bad guys. There are

rayzzz 
6/9/08 1:37:41 PM
Disciple
oh sorry about that, can i change the title?

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Program Files\Razer\Diamondback 3G\razerhid.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Razer\Lycosa\razerhid.exe
C:\Program Files\GIGABYTE\GEST\GEST.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Razer\Lycosa\razertra.exe
C:\Program Files\Razer\Diamondback 3G\razertra.exe
C:\Program Files\Razer\Diamondback 3G\razerofa.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\GIGABYTE\GEST\GSvr.exe
C:\Program Files\BitDefender\BitDefender 2008\uiscan.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Documents and Settings\Owner\Desktop\HiJackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Media Player\wmplayer.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/default
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by OptusNet
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [GEST] C:\Program Files\GIGABYTE\GEST\RUN.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKLM\..\Run: [Diamondback] C:\Program Files\Razer\Diamondback 3G\razerhid.exe
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [Lycosa] "C:\Program Files\Razer\Lycosa\razerhid.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [Steam] C:\Program Files\Valve\Steam\\Steam.exe -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http:\\www.centrecom.com.au
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?12168157
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - C:\Program Files\GIGABYTE\GEST\GSvr.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe


Edited by rayzzz: 6/9/2008 1:38:37 PM

-----
*tadaa

Midnighter 
6/9/08 1:44:41 PM
Immortal

What is all this "Razer" stuff?
eg. C:\Program Files\Razer\Lycosa\razerhid.exe

Never heard of it. What is it? And have you performed a scan for viruses, malware, etc?

-----
-If there's one thing guaranteed to fuck me off, it's the sheer miserable meanness of the human race.
-The price of freedom, the price to soar, is small. All they ask for is your wings.
-A lot of being human is about degradation and pain and humil

maxamatosis 
6/9/08 2:10:40 PM
Master

His Razer Lycosa mouse?

razorhid.exe is the name of the config utility for that brand of mouse.

-----
So I tell him I killed God. I tracked God down like a rabid dog, hacked off his legs with a hedge trimmer, raped him with a corncob, and boiled off his corpse in an acid bath. - Spider Jerusalem

Master_Scythe 
6/9/08 2:23:32 PM
Titan

Ironically, thats clean!

the FUCK.

For general system health id remove these 2. But thats not directly related to your problem.

Remove these:

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll





Next thing to try.

Open RUN and type MSCONFIG.

go to the startup tab and untick EVERYTHING. see if that fixes it.

if it does. reenable one at a time (starting with drivers, ATI, mouse etc) with a reboot after each one till you find out if a program is calling it.

I have my money on WIndows Live MSN. a little MSN virus replaced a normal MSN DLL and is now trying to call a media function opening WMP. though thats just a guess.

Also dude, when you install program, READ WHAT YOU CLICK!

you have daemon tools obviously, yet you allowed it to install all its adware, toolbars and make your homepage daemon-search.

You also have a file that resets your homepage to another one loading at startup.

Canon webprint has infested your system, yeah its legit, but i put money you dont use and just clicked 'ok' to the install.

and the WORST of them all, MSN LIVE MESSENGER.

ALWAYS click cancel when it gets to installing the 'sign in assistant' or better yet, use PIDGIN or another protocol.

the system itself is bogged down and messy dude. But i hope you get the major problem sorted out.


Edited by Master_Scythe: 6/9/2008 2:34:18 PM


Edited by Master_Scythe: 6/9/2008 2:39:45 PM

-----
4200+X2 939, ASUS A8N-SLI-D, Ati HD3850, 1gb,1tb total HDD, 109 DVD, LG DVD-rom.
Quote by Girvo
I've got a wicked tiny one that is ridiculously sensitive.



Midnighter 
6/9/08 3:27:43 PM
Immortal

Quote by maxamatosis
His Razer Lycosa mouse?

razorhid.exe is the name of the config utility for that brand of mouse.



Ta. I don't have one, so didn't know. My mouse doesn't seem to need special software, so wasn't aware.

-----
-If there's one thing guaranteed to fuck me off, it's the sheer miserable meanness of the human race.
-The price of freedom, the price to soar, is small. All they ask for is your wings.
-A lot of being human is about degradation and pain and humil

rayzzz 
6/9/08 3:56:06 PM
Disciple
i think the problem my be resolved. the media player hasnt re opened for a bit now. hope fully it has been fixed. might of had something to with the keyboard and keyboard software. thankyou very much guys for all your help

-----
*tadaa

Master_Scythe 
6/9/08 10:01:17 PM
Titan

still clean your system dude.

watch what you say yes to. always do custm installs and dont do the 'nextnextnext' turbo click we were all happy to do back in the days pre-spyware\adware.

-----
4200+X2 939, ASUS A8N-SLI-D, Ati HD3850, 1gb,1tb total HDD, 109 DVD, LG DVD-rom.
Quote by Girvo
I've got a wicked tiny one that is ridiculously sensitive.



  1  
Forums | Building and Trouble Shooting