Member Panel

Hello, I recently caught the Sasser worm on my operating system.
I tried formating but it kept comming back straight away.
Always when I turn on my computer it says something about LSA Shell Export, and it shut downs and terminates.
I downloaded the security patch and got rid of that.
But here is the problem I am facing now, whenever I try to play video files
wether it being in windows media player, real player, vlc or any other program my computer freezes up and results in me turning the computer down manually.

And also when I turned msn on and pressed the audio button, the same problem happened.

Just a little note here, when I formated and started the computer again it
said something about "User interface dll failed to load" or something like that, dont remember exactly what it said.

So if you could help me solve this problem it would be the best thing ever, I dont want to format the 10th time today :/

If I didnt describe the problem enough just tell me

EDIT: Oh yes, I just formated and dont have any anti-virus programs up, so links to some nice programs
would be really nice

Hey there Chesner, and welcome to PCHF .

I'm afraid I can't help you with your problem, but I can let you know where you can find some free AV/firewall software . For an anti-virus solution, I would recommend Grisoft AVG AntiVirus Free Edition. It is a very good piece of AV software . As for a firewall solution, I would recommend Zone Alarm Free Edition.

Don't worry, we have a great team with alot of knowledge here and I am sure one of our other team members will be around shortly to help you out .

-Ryan

Welcome to PCHF Chesner.


It is possible that the virus corrupted some files which is causing these problems.

Could you run windows update to make sure you have the latest updates installed on your machine.
Have you tried reinstalling windows media player?

Could you also go to `Prework` in my signature and follow the instructions on running Ewido.

The problem actually sounds like it is related to your sound card, with this in mind you can do two things:

• Delete your sound card from device manager, reboot your PC and reinstall it
• Alternatively post the exact make/model of your sound card so we can get you a link to the latest drivers so you can reinstall it.

If you have problems finding out the make/model then follow `Inside your PC` from my signature and run either Everest or Belarc and post the details onto the site for us.

Well I ran the Ewido scan, and found a total of 6 files, which I have removed
now, forgot to make report of it.

But the everest report is here as following.

--------[ Summary ]-----------------------------------------------------------------------------------------------------

Computer:
Operating System Microsoft Windows XP Home Edition
OS Service Pack Service Pack 1
DirectX 4.09.00.0904 (DirectX 9.0c)
Computer Name CHES
User Name Owner

Motherboard:
CPU Type Intel Pentium 4, 3033 MHz (15 x 202)
Motherboard Name MSI 848P Neo-V (MS-6788) (5 PCI, 1 AGP, 2 DDR DIMM, Audio)
Motherboard Chipset Intel Breeds Hill i848P
System Memory 512 MB (PC3200 DDR SDRAM)
BIOS Type AMI (01/05/05)
Communication Port Communications Port (COM1)
Communication Port Printer Port (LPT1)

Display:
Video Adapter NVIDIA GeForce 6600 (256 MB)
3D Accelerator nVIDIA GeForce 6600 AGP
Monitor Hansol 710D/710P [17" CRT] (10401827)

Multimedia:
Audio Adapter Intel 82801EB ICH5 - AC'97 Audio Controller

Storage:
IDE Controller Standard Dual Channel PCI IDE Controller
Disk Drive WDC WD2000JB-00GVA0 (186 GB, IDE)
Disk Drive WDC WD2000JB-00GVA0 (186 GB, IDE)
Optical Drive E-IDE CD-ROM 50X (50x CD-ROM)
SMART Hard Disks Status OK

Partitions:
C: (NTFS) 190771 MB (187152 MB free)

Input:
Keyboard Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
Mouse HID-compliant mouse

Network:
Network Adapter Realtek RTL8139 Family PCI Fast Ethernet NIC (10.69.30.12)

Peripherals:
USB1 Controller Intel 82801EB ICH5 - USB Universal Host Controller
USB1 Controller Intel 82801EB ICH5 - USB Universal Host Controller
USB1 Controller Intel 82801EB ICH5 - USB Universal Host Controller
USB1 Controller Intel 82801EB ICH5 - USB Universal Host Controller
USB2 Controller Intel 82801EB(M) ICH5(-M) - Enhanced USB2 Controller
USB Device USB Human Interface Device


I also went through that "Prework" in your signature.

Tried to reinstall windows media player, but it resulted in error.

Going to reinstall the soundcard driver now.

And by the way, I can listen to music, just not watched video, its all abit weird.

Can you post a hijackthis log to check?

Logfile of HijackThis v1.99.1
Scan saved at 18:10:14, on 20.11.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wpabaln.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O21 - SSODL: CEDJIBED - {36952E86-07E2-7575-4836-24355F631C8C} - C:\WINDOWS\System32\Indiop32.dll (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

+

Logfile of HijackThis v1.99.1
Scan saved at 18:10:14, on 20.11.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wpabaln.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O21 - SSODL: CEDJIBED - {36952E86-07E2-7575-4836-24355F631C8C} - C:\WINDOWS\System32\Indiop32.dll (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

Hope this is what you are talking about