Member Panel


Sponsors and Ads

Join the Team

Live Tag Cloud

PC Forum PC Help Forum » Operating Systems » Windows XP/2000 » [FIXED] Windows Media Player problem

Windows XP/2000 - [FIXED] Windows Media Player problem posted in the Operating Systems forums; Its possible that when you rolled back the changes you removed SP2. Would you be able to run your windows updates and see whether it installs the required stuff: http://windowsupdate.microsoft.com/...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #8  
Old 11-14-2005
Friend of PCHF
 
Join Date: Sep 2004
Location: Right here !
Posts: 2,150
Zimbo - See this Members User comments on their Profile page
Default

Its possible that when you rolled back the changes you removed SP2.

Would you be able to run your windows updates and see whether it installs the required stuff:
http://windowsupdate.microsoft.com/


  #9  
Old 11-14-2005
Bronze Member
 
Join Date: Oct 2005
Posts: 5
chaplin - See this Members User comments on their Profile page
Default

ok i've just double checked and microsoft updates is showing that SP 2 successfully installed and there are no critical/high priority updates when i run windows update.


  #10  
Old 11-14-2005
DarkLord7854's Avatar
Banned
My PC
 
Join Date: Sep 2005
Location: Florida
Posts: 1,406
PC Experience: Of Epic Proportions.
DarkLord7854 - See this Members User comments on their Profile page DarkLord7854 - See this Members User comments on their Profile page DarkLord7854 - See this Members User comments on their Profile page DarkLord7854 - See this Members User comments on their Profile page DarkLord7854 - See this Members User comments on their Profile page DarkLord7854 - See this Members User comments on their Profile page DarkLord7854 - See this Members User comments on their Profile page DarkLord7854 - See this Members User comments on their Profile page DarkLord7854 - See this Members User comments on their Profile page DarkLord7854 - See this Members User comments on their Profile page DarkLord7854 - See this Members User comments on their Profile page
Default

Try doing the optional and specialy any hardware updates


  #11  
Old 11-14-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,044
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Hi there Chaplin , let's see what we can do for you.



Before using HijackThis Please Do the Following:



Show hidden files and folders:

For XP:
  1. On the Tools menu in Windows Explorer, click Folder Options.
  2. Click the View tab.
  3. Under Hidden files and folders, click Show hidden files and folders.
  4. If you see a warning message, click Yes.
  5. Click Apply.
  6. Click OK.


Disable System Restore to prevent re-infection.
(If you have/use it. You can turn it back on when youre PC is clean).

How to disable system restore:

WinXP.
  1. Click the Start button.
  2. Right-click My Computer, and then click Properties.
  3. On the System Restore tab, check Turn off System Restore or Turn off System Restore on all drives.

Please download CCleaner

Then boot in safemode (hit f8 when booting up)

Click Start>Run and type in: services.msc
Click OK
In the Services window find:

Windows User Mode Driver Framework

Select/highlight and right click the entry, and choose: Properties
On the General tab, under Service Status click the Stop button
Beside: Startup Type, in the drop menu, select: Disabled
Click Apply, then OK
Open HJT and click config > misc tools > ?delete an NT service?
Copy and past:

UMWdf

Click OK.

Then fix these with hjt:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {CA356D79-679B-4b4c-8E49-5AF97014F4C1} - (no file)
O3 - Toolbar: (no name) - {D49E9D35-254C-4c6a-9D17-95018D228FF5} - (no file)
O4 - HKLM\..\Run: [viirlq3e] C:\WINDOWS\system32\viirlq3e.exe
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/supergerball...GameLoader.dll
O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/instal...sinstaller.cab

And this one might be youre problem , this is from wmp10:

O23 - Service: Windows User Mode Driver Framework (UMWdf) - Unknown owner - C:\WINDOWS\system32\wdfmgr.exe (file missing)
After that , delete the files in bold and run Ccleaner.



DON'T fix these yet , i think there ok but do you recoqnize them?

C:\Program Files\Callserve\Internet Telephone\CS_Phone.exe

O1 - Hosts: 62.189.6.85 _sip._tls.sip5.phoneserve.com
O1 - Hosts: 62.189.6.78 _sip._tls.sip1.callserve.com

Plus a bunch of similair entry's
Also download and run Ewido please:

Remove any malware using Ewido

Download Ewido Security Suite
  • Install Ewido Security Suite.
  • When installing, under Additional Options uncheck Install background guard and Install scan via context menu
  • Launch Ewido, there should be a big "E" icon on your desktop, double-click it.
  • The program will prompt you to update click the "OK" button
  • The program will now go to the main screen
  • You will need to update Ewido to the latest definition files.
  • On the left hand side of the main screen click update
  • Click on Start
  • The update will start and a progress bar will show the updates being installed.*
  • After the updates are installed, exit ewido.

Once the updates are installed do the following:
  • If you have an "always on" connection to the internet, physically disconnect that connection until you are finished with Safe Mode and have rebooted back into normal mode.
  • Reboot into Safe Mode, restart your computer, tap the F8* key. Use your up arrow key to highlight Safe Mode, then hit enter.
Close all open windows/programs/folders and then run Ewido.* Have nothing else open while ewido performs its scan!
  • Click on Scanner , Settings
  • Under "How to scan" all boxes should be selected
  • Under "Possibly unwanted software" all boxes should be selected
  • Under "What to scan" select scan every file
  • Click OK, Complete system scan
  • Let the program scan the machine
  • If ewido finds anything, it will pop up a notification.*

NOTE:* We have been finding some cases of false positives with the new version of Ewido, so you need to step through the fixes one-by-one.* If Ewido finds something that you KNOW is legitimate (for example, parts of AVG Antivirus, AOL, pcAnywhere and the game "Risk" have been flagged.* In particular, watch for alerts that have the word "Heuristic" in them - if you recognize the file name as "friendly," these may actually be false positives) select "none" as the action.*

DO NOT check "Perform action with all infections."* If you are unsure of an entry, select "none" for the time being.* We will see that in the log when you post it later and let you know if ewido needs to be run again.

Once the scan has completed, there will be a button located on the bottom of the screen named Save report.

Click Save report. Save the report to your desktop, exit ewido


Note:

If during your scan Ewido "crashes" or "hangs", please try scanning again. Before running the scan, click on 'Scanner' (the 3rd bar from the top on the left) and Choose 'Settings'. Uncheck 'Scan in NTFS Alternate Data Streams' as this can cause problems in overly infected systems. Click 'OK' and run a new scan.

Then please post a new hjt log plus the Ewido log.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #12  
Old 11-15-2005
Bronze Member
 
Join Date: Oct 2005
Posts: 5
chaplin - See this Members User comments on their Profile page
Default

ok then guys see what you make of the below...!

[ATTACH]Scan report_20051115.txt.txt[/ATTACH]
Attached Files
File Type: log hijackthis.log (11.4 KB, 2 views)


  #13  
Old 11-15-2005
Bluefish's Avatar
Elite Member
My PC
 
Join Date: Jan 2005
Location: Holland
Posts: 2,189
Bluefish - See this Members User comments on their Profile page Bluefish - See this Members User comments on their Profile page
Default

Thanks for posting that chaplin!
I cannot read HJT logs, but someone will get back to you soon


__________________
PCHF Rules - You're Welcome!
What's inside my PC? - Prework
  #14  
Old 11-15-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,044
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Youre hjt log looks good but the Ewido log shows 3 ignored files , those still have to be deleted.

For that , boot in safemode again and delete these files:

C:\WINDOWS\system32\bufgss35.dll
C:\WINDOWS\system32\piu335b8.exe
C:\WINDOWS\nt77p14s.exe


You didn't mention it , but i asume you still can't install wmp 10? You could try a repair install of windows and then try to install wmp 10 again (and all other windows updates , inc sp2) and keep all youre other data intact.

http://www.michaelstevenstech.com/XPrepairinstall.htm


Comments on this post
chaplin comments: the entire thread has been extremely helpful although it hasn't cured the problem but you guys have been fantastic!!! Keep it up!!!
__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -


Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On


All times are GMT +1. The time now is 11:30 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top
Online Advertising
Join the free co-op advertising network and increase your traffic.

Advertising
Join the free co-op advertising network and increase your traffic.

Remortgages
Remortgage information and advice from the people at Money Expert.