[RESOLVED] - Computer Freezes when playing video and using mic.

Chesner · 11-19-2005

Hello, I recently caught the Sasser worm on my operating system.
I tried formating but it kept comming back straight away.
Always when I turn on my computer it says something about LSA Shell Export, and it shut downs and terminates.
I downloaded the security patch and got rid of that.
But here is the problem I am facing now, whenever I try to play video files
wether it being in windows media player, real player, vlc or any other program my computer freezes up and results in me turning the computer down manually.

And also when I turned msn on and pressed the audio button, the same problem happened.

Just a little note here, when I formated and started the computer again it
said something about "User interface dll failed to load" or something like that, dont remember exactly what it said.

So if you could help me solve this problem it would be the best thing ever, I dont want to format the 10th time today :/

If I didnt describe the problem enough just tell me

EDIT: Oh yes, I just formated and dont have any anti-virus programs up, so links to some nice programs
would be really nice

Spaceman3750 · 11-19-2005

Hey there Chesner, and welcome to PCHF

.

I'm afraid I can't help you with your problem, but I can let you know where you can find some free AV/firewall software

. For an anti-virus solution, I would recommend Grisoft AVG AntiVirus Free Edition. It is a very good piece of AV software

. As for a firewall solution, I would recommend Zone Alarm Free Edition.

Don't worry, we have a great team with alot of knowledge here and I am sure one of our other team members will be around shortly to help you out

.

-Ryan

Zimbo · 11-19-2005

Welcome to PCHF Chesner.

But here is the problem I am facing now, whenever I try to play video files
wether it being in windows media player, real player, vlc or any other program my computer freezes up and results in me turning the computer down manually.

And also when I turned msn on and pressed the audio button, the same problem happened.

It is possible that the virus corrupted some files which is causing these problems.

Could you run windows update to make sure you have the latest updates installed on your machine.
Have you tried reinstalling windows media player?

Could you also go to `Prework` in my signature and follow the instructions on running Ewido.

The problem actually sounds like it is related to your sound card, with this in mind you can do two things:

Delete your sound card from device manager, reboot your PC and reinstall it
Alternatively post the exact make/model of your sound card so we can get you a link to the latest drivers so you can reinstall it.

If you have problems finding out the make/model then follow `Inside your PC` from my signature and run either Everest or Belarc and post the details onto the site for us.

Chesner · 11-19-2005

Well I ran the Ewido scan, and found a total of 6 files, which I have removed
now, forgot to make report of it.

But the everest report is here as following.

--------[ Summary ]-----------------------------------------------------------------------------------------------------

Computer:
Operating System Microsoft Windows XP Home Edition
OS Service Pack Service Pack 1
DirectX 4.09.00.0904 (DirectX 9.0c)
Computer Name CHES
User Name Owner

Motherboard:
CPU Type Intel Pentium 4, 3033 MHz (15 x 202)
Motherboard Name MSI 848P Neo-V (MS-6788) (5 PCI, 1 AGP, 2 DDR DIMM, Audio)
Motherboard Chipset Intel Breeds Hill i848P
System Memory 512 MB (PC3200 DDR SDRAM)
BIOS Type AMI (01/05/05)
Communication Port Communications Port (COM1)
Communication Port Printer Port (LPT1)

Display:
Video Adapter NVIDIA GeForce 6600 (256 MB)
3D Accelerator nVIDIA GeForce 6600 AGP
Monitor Hansol 710D/710P [17" CRT] (10401827)

Multimedia:
Audio Adapter Intel 82801EB ICH5 - AC'97 Audio Controller

Storage:
IDE Controller Standard Dual Channel PCI IDE Controller
Disk Drive WDC WD2000JB-00GVA0 (186 GB, IDE)
Disk Drive WDC WD2000JB-00GVA0 (186 GB, IDE)
Optical Drive E-IDE CD-ROM 50X (50x CD-ROM)
SMART Hard Disks Status OK

Partitions:
C: (NTFS) 190771 MB (187152 MB free)

Input:
Keyboard Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
Mouse HID-compliant mouse

Network:
Network Adapter Realtek RTL8139 Family PCI Fast Ethernet NIC (10.69.30.12)

Peripherals:
USB1 Controller Intel 82801EB ICH5 - USB Universal Host Controller
USB1 Controller Intel 82801EB ICH5 - USB Universal Host Controller
USB1 Controller Intel 82801EB ICH5 - USB Universal Host Controller
USB1 Controller Intel 82801EB ICH5 - USB Universal Host Controller
USB2 Controller Intel 82801EB(M) ICH5(-M) - Enhanced USB2 Controller
USB Device USB Human Interface Device

I also went through that "Prework" in your signature.

Tried to reinstall windows media player, but it resulted in error.

Going to reinstall the soundcard driver now.

And by the way, I can listen to music, just not watched video, its all abit weird.

joe5 · 11-19-2005

Originally Posted by Chesner

Well I ran the Ewido scan, and found a total of 6 files, which I have removed
now, forgot to make report of it.

Can you post a hijackthis log to check?

Chesner · 11-19-2005

Originally Posted by joe5

Can you post a hijackthis log to check?

Logfile of HijackThis v1.99.1
Scan saved at 18:10:14, on 20.11.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wpabaln.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O21 - SSODL: CEDJIBED - {36952E86-07E2-7575-4836-24355F631C8C} - C:\WINDOWS\System32\Indiop32.dll (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

Chesner · 11-19-2005

Originally Posted by joe5

Can you post a hijackthis log to check?

+

Logfile of HijackThis v1.99.1
Scan saved at 18:10:14, on 20.11.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wpabaln.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O21 - SSODL: CEDJIBED - {36952E86-07E2-7575-4836-24355F631C8C} - C:\WINDOWS\System32\Indiop32.dll (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

Hope this is what you are talking about

11-19-2005	#1
Chesner Bronze Member Join Date: Nov 2005 Posts: 6	[RESOLVED] - Computer Freezes when playing video and using mic. Hello, I recently caught the Sasser worm on my operating system. I tried formating but it kept comming back straight away. Always when I turn on my computer it says something about LSA Shell Export, and it shut downs and terminates. I downloaded the security patch and got rid of that. But here is the problem I am facing now, whenever I try to play video files wether it being in windows media player, real player, vlc or any other program my computer freezes up and results in me turning the computer down manually. And also when I turned msn on and pressed the audio button, the same problem happened. Just a little note here, when I formated and started the computer again it said something about "User interface dll failed to load" or something like that, dont remember exactly what it said. So if you could help me solve this problem it would be the best thing ever, I dont want to format the 10th time today :/ If I didnt describe the problem enough just tell me EDIT: Oh yes, I just formated and dont have any anti-virus programs up, so links to some nice programs would be really nice

11-19-2005	#3
Zimbo Friend of PCHF Join Date: Sep 2004 Location: Right here ! Posts: 2,148	Welcome to PCHF Chesner. But here is the problem I am facing now, whenever I try to play video files wether it being in windows media player, real player, vlc or any other program my computer freezes up and results in me turning the computer down manually. And also when I turned msn on and pressed the audio button, the same problem happened. It is possible that the virus corrupted some files which is causing these problems. Could you run windows update to make sure you have the latest updates installed on your machine. Have you tried reinstalling windows media player? Could you also go to `Prework` in my signature and follow the instructions on running Ewido. The problem actually sounds like it is related to your sound card, with this in mind you can do two things: Delete your sound card from device manager, reboot your PC and reinstall it Alternatively post the exact make/model of your sound card so we can get you a link to the latest drivers so you can reinstall it. If you have problems finding out the make/model then follow `Inside your PC` from my signature and run either Everest or Belarc and post the details onto the site for us. __________________ - PCHF Rules - PCHF Staff - Join the Team - Prework - Protect your PC - Tools - Inside your PC - Bootdisk.com Last edited by Zimbo; 11-19-2005 at 04:02 PM.

11-19-2005	#4
Chesner Bronze Member Join Date: Nov 2005 Posts: 6	Well I ran the Ewido scan, and found a total of 6 files, which I have removed now, forgot to make report of it. But the everest report is here as following. --------[ Summary ]----------------------------------------------------------------------------------------------------- Computer: Operating System Microsoft Windows XP Home Edition OS Service Pack Service Pack 1 DirectX 4.09.00.0904 (DirectX 9.0c) Computer Name CHES User Name Owner Motherboard: CPU Type Intel Pentium 4, 3033 MHz (15 x 202) Motherboard Name MSI 848P Neo-V (MS-6788) (5 PCI, 1 AGP, 2 DDR DIMM, Audio) Motherboard Chipset Intel Breeds Hill i848P System Memory 512 MB (PC3200 DDR SDRAM) BIOS Type AMI (01/05/05) Communication Port Communications Port (COM1) Communication Port Printer Port (LPT1) Display: Video Adapter NVIDIA GeForce 6600 (256 MB) 3D Accelerator nVIDIA GeForce 6600 AGP Monitor Hansol 710D/710P [17" CRT] (10401827) Multimedia: Audio Adapter Intel 82801EB ICH5 - AC'97 Audio Controller Storage: IDE Controller Standard Dual Channel PCI IDE Controller Disk Drive WDC WD2000JB-00GVA0 (186 GB, IDE) Disk Drive WDC WD2000JB-00GVA0 (186 GB, IDE) Optical Drive E-IDE CD-ROM 50X (50x CD-ROM) SMART Hard Disks Status OK Partitions: C: (NTFS) 190771 MB (187152 MB free) Input: Keyboard Standard 101/102-Key or Microsoft Natural PS/2 Keyboard Mouse HID-compliant mouse Network: Network Adapter Realtek RTL8139 Family PCI Fast Ethernet NIC (10.69.30.12) Peripherals: USB1 Controller Intel 82801EB ICH5 - USB Universal Host Controller USB1 Controller Intel 82801EB ICH5 - USB Universal Host Controller USB1 Controller Intel 82801EB ICH5 - USB Universal Host Controller USB1 Controller Intel 82801EB ICH5 - USB Universal Host Controller USB2 Controller Intel 82801EB(M) ICH5(-M) - Enhanced USB2 Controller USB Device USB Human Interface Device I also went through that "Prework" in your signature. Tried to reinstall windows media player, but it resulted in error. Going to reinstall the soundcard driver now. And by the way, I can listen to music, just not watched video, its all abit weird. Last edited by Chesner; 11-19-2005 at 05:01 PM.

11-19-2005	#5
joe5 Elite Member Join Date: Jun 2005 Location: Netherlands Posts: 9,021	Originally Posted by Chesner Well I ran the Ewido scan, and found a total of 6 files, which I have removed now, forgot to make report of it. Can you post a hijackthis log to check? __________________ - PCHF Team. - (NL) - Mal-ware Eradicator! - - Online AV Scans - HijackThis! - Bootdisk.com - ATF-Cleaner - Stinger - 'Prework' - 'Afterwork' - PCHF Rules - Donate to PCHF. And get>

11-19-2005	#6
Chesner Bronze Member Join Date: Nov 2005 Posts: 6	Originally Posted by joe5 Can you post a hijackthis log to check? Logfile of HijackThis v1.99.1 Scan saved at 18:10:14, on 20.11.2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe C:\Program Files\ewido\security suite\ewidoctrl.exe C:\Program Files\ewido\security suite\ewidoguard.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\wuauclt.exe C:\WINDOWS\System32\wpabaln.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Owner\Desktop\HijackThis.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O21 - SSODL: CEDJIBED - {36952E86-07E2-7575-4836-24355F631C8C} - C:\WINDOWS\System32\Indiop32.dll (file missing) O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

11-19-2005	#2
Spaceman3750 Elite Member Join Date: Jan 2004 Location: Riverton, IL, USA Posts: 1,472 PC Experience: Very Experienced	Hey there Chesner, and welcome to PCHF . I'm afraid I can't help you with your problem, but I can let you know where you can find some free AV/firewall software . For an anti-virus solution, I would recommend Grisoft AVG AntiVirus Free Edition. It is a very good piece of AV software . As for a firewall solution, I would recommend Zone Alarm Free Edition. Don't worry, we have a great team with alot of knowledge here and I am sure one of our other team members will be around shortly to help you out . -Ryan

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode