Help
Similar Message appears at Startup
This post has been edited by Jove: 05 November 2008 - 12:10 PM
Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.Search Term Not Found
#1
- Forum Addict
-
- Group: Members
- Posts: 2,294
- Joined: 11-March 07
- Gender:Male
- Location:Very South Jersey
Posted 05 November 2008 - 12:07 PM
Similar Message appears at Startup
When you don't have to worry about your computer anymore, you can start
living again !
The Future is All There Ever Was . . . . . . Jople 2010
Success is a result, not a goal. . . . Flaubert
living again !
The Future is All There Ever Was . . . . . . Jople 2010
Success is a result, not a goal. . . . Flaubert
Back to top
#2
- Computer Masochist
-
- Group: Staff Emeritus
- Posts: 27,809
- Joined: 27-January 07
- Location:Cleveland, Ohio
Posted 05 November 2008 - 09:20 PM
Everything I have found points to an infection
Mark
why won't my laptop work?
Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter
why won't my laptop work?
Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter
#3
- Forum Addict
-
- Group: Members
- Posts: 2,294
- Joined: 11-March 07
- Gender:Male
- Location:Very South Jersey
Posted 05 November 2008 - 10:58 PM
Hey, Thank you man !
I have AVG and Malwarebytes on board, . . will that do, are they good for safe mode ?
I have AVG and Malwarebytes on board, . . will that do, are they good for safe mode ?
When you don't have to worry about your computer anymore, you can start
living again !
The Future is All There Ever Was . . . . . . Jople 2010
Success is a result, not a goal. . . . Flaubert
living again !
The Future is All There Ever Was . . . . . . Jople 2010
Success is a result, not a goal. . . . Flaubert
#4
- Bleep Bleep!
-
- Group: Admin
- Posts: 36,175
- Joined: 24-January 04
- Gender:Male
- Location:USA
Posted 06 November 2008 - 11:06 AM
Agreed, looks like an infection. Delete the run entry in autoruns.
MBAM is a good for the arsenal. No comment on AVG as I do not use it. I use AVAST.
MBAM is a good for the arsenal. No comment on AVG as I do not use it. I use AVAST.
Lawrence Abrams
Circle BleepingComputer on Google+!
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
How to detect vulnerable programs using Secunia Personal Software Inspector <- Everyone should do this!
Circle BleepingComputer on Google+!
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
How to detect vulnerable programs using Secunia Personal Software Inspector <- Everyone should do this!
#5
- Forum Addict
-
- Group: Members
- Posts: 2,294
- Joined: 11-March 07
- Gender:Male
- Location:Very South Jersey
Posted 06 November 2008 - 12:24 PM
Grinler,
I have a feeling that it is possible the, slave drive (E:), recently installed has virus's and the like in it, this may be a source of infections etc.
I am posting the A-R Screen Shot, for verified affirmation, I want to be sure I am doing this right as I have never deleted from auto run, there were three entrees in the msconfig ?, what about those ? Will Malware bytes run in the Safe Mode ?
Also from the message screen shot in original post mentions font, I did install modification in Language Options, i.e., install files for East Asian language, this may or may not be pertinent ?
Thanks much for your help.
I have a feeling that it is possible the, slave drive (E:), recently installed has virus's and the like in it, this may be a source of infections etc.
I am posting the A-R Screen Shot, for verified affirmation, I want to be sure I am doing this right as I have never deleted from auto run, there were three entrees in the msconfig ?, what about those ? Will Malware bytes run in the Safe Mode ?
Also from the message screen shot in original post mentions font, I did install modification in Language Options, i.e., install files for East Asian language, this may or may not be pertinent ?
Thanks much for your help.
When you don't have to worry about your computer anymore, you can start
living again !
The Future is All There Ever Was . . . . . . Jople 2010
Success is a result, not a goal. . . . Flaubert
living again !
The Future is All There Ever Was . . . . . . Jople 2010
Success is a result, not a goal. . . . Flaubert
#6
- Bleep Bleep!
-
- Group: Admin
- Posts: 36,175
- Joined: 24-January 04
- Gender:Male
- Location:USA
Posted 11 November 2008 - 09:38 AM
I would not touch any of the items in the screen shot above. Just remove the run entry associated with C:\Windows\Fonts\wmsncs.exe
Lawrence Abrams
Circle BleepingComputer on Google+!
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
How to detect vulnerable programs using Secunia Personal Software Inspector <- Everyone should do this!
Circle BleepingComputer on Google+!
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
How to detect vulnerable programs using Secunia Personal Software Inspector <- Everyone should do this!
#7
- Forum Addict
-
- Group: Members
- Posts: 2,294
- Joined: 11-March 07
- Gender:Male
- Location:Very South Jersey
Posted 11 November 2008 - 06:30 PM
Grinler,
Thanks for the double check, I think I made a mistake on that screen shot, . .
I am pretty sure I or we are talking about the "wmsncs" file as seen in the next screen shot as
it presently appears in the utility configuration, the thing is, I am also trying to say after running the mbam scan there is still two remaining entrys'
When I go to Auto Runs and search, "wmsncs", I get what you see in the second screen shot.
I am assuming that if this is the, "wmsncs", file I should uncheck it ?
Can you tell me will this then take care, (automatically delete), the entry's of this file in the msconfig ?
# 31
# 34
Thanks for the double check, I think I made a mistake on that screen shot, . .
I am pretty sure I or we are talking about the "wmsncs" file as seen in the next screen shot as
it presently appears in the utility configuration, the thing is, I am also trying to say after running the mbam scan there is still two remaining entrys'
When I go to Auto Runs and search, "wmsncs", I get what you see in the second screen shot.
I am assuming that if this is the, "wmsncs", file I should uncheck it ?
Can you tell me will this then take care, (automatically delete), the entry's of this file in the msconfig ?
# 31
# 34
When you don't have to worry about your computer anymore, you can start
living again !
The Future is All There Ever Was . . . . . . Jople 2010
Success is a result, not a goal. . . . Flaubert
living again !
The Future is All There Ever Was . . . . . . Jople 2010
Success is a result, not a goal. . . . Flaubert
#8
- Forum Addict
-
- Group: Members
- Posts: 2,294
- Joined: 11-March 07
- Gender:Male
- Location:Very South Jersey
Posted 11 November 2008 - 08:27 PM
I would like to wait for your answer to my last reply before I do anything else.
When I get this resolved , unfortunately as usual there is more, . .
I'd like you to look at this and tell me what I have here ?
This,#31 "msmsgs" as in msconfig, "C:Program Files\Mes" is listed in the Startup List,
Full first page all, "Bad" excepting for one entry. As I view this in the Auto Runs Program
# 33 there is a single listing, first I am trying to determine is mine is a, "bad file" and I wanted to know
why is there only one entry in each, msconfig and Auto Runs, compared to a file like, "TINTSETP",
which has two entry's, when I have the search results for, "msmsgs" and there is a page full of these files,
# 32 ?
#31-01
# 32
# 33
When I get this resolved , unfortunately as usual there is more, . .
I'd like you to look at this and tell me what I have here ?
This,#31 "msmsgs" as in msconfig, "C:Program Files\Mes" is listed in the Startup List,
Full first page all, "Bad" excepting for one entry. As I view this in the Auto Runs Program
# 33 there is a single listing, first I am trying to determine is mine is a, "bad file" and I wanted to know
why is there only one entry in each, msconfig and Auto Runs, compared to a file like, "TINTSETP",
which has two entry's, when I have the search results for, "msmsgs" and there is a page full of these files,
# 32 ?
#31-01
# 32
# 33
This post has been edited by Jove: 11 November 2008 - 08:36 PM
When you don't have to worry about your computer anymore, you can start
living again !
The Future is All There Ever Was . . . . . . Jople 2010
Success is a result, not a goal. . . . Flaubert
living again !
The Future is All There Ever Was . . . . . . Jople 2010
Success is a result, not a goal. . . . Flaubert
#9
- I know the drill!
-
- Group: Malware Response Instructor
- Posts: 27,063
- Joined: 24-July 08
- Gender:Male
- Location:London, UK
Posted 13 November 2008 - 09:16 PM
Jove,
I think you need to ask these kinds of questions on the Am I Infected forum.
It seems that you have some malware there, and I'm assuming you have PC problems.
Post to the above forum and someone will help you scan and remove everything that might be causing you problems.
All the best,
m0le
I think you need to ask these kinds of questions on the Am I Infected forum.
It seems that you have some malware there, and I'm assuming you have PC problems.
Post to the above forum and someone will help you scan and remove everything that might be causing you problems.
All the best,
m0le
If I have helped you fix your PC then please donate to the anti-malware cause. Thanks
m0le is a proud member of UNITE (Unified Network of Instructors and Trusted Eliminators)
m0le is a proud member of UNITE (Unified Network of Instructors and Trusted Eliminators)
#10
- Bleep Bleep!
-
- Group: Admin
- Posts: 36,175
- Joined: 24-January 04
- Gender:Male
- Location:USA
Posted 14 November 2008 - 09:56 AM
You cant look at the startup database by filename only. IN order to determine if your file is the same as the startup database listing, you need to look at the filename, the location of the file, and the name it appears in the registry. If any of these are different then what are shown in the startup database, you should assume it is a different file and possibly legitimate.
As for wmsncs, find their entries in autoruns and right click and delete them. For regular apps, do not use autoruns to delete the entries. Instead disable the autorun via the programs settings.
As for wmsncs, find their entries in autoruns and right click and delete them. For regular apps, do not use autoruns to delete the entries. Instead disable the autorun via the programs settings.
Lawrence Abrams
Circle BleepingComputer on Google+!
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
How to detect vulnerable programs using Secunia Personal Software Inspector <- Everyone should do this!
Circle BleepingComputer on Google+!
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
How to detect vulnerable programs using Secunia Personal Software Inspector <- Everyone should do this!
#11
- Forum Addict
-
- Group: Members
- Posts: 2,294
- Joined: 11-March 07
- Gender:Male
- Location:Very South Jersey
Posted 14 November 2008 - 12:03 PM
I'm sorry, this file seems to keep jumping around when I search it, this time it showed up as,
NvidMediaCen.. Files not found C: program.
Previously Post # 7 Fig. 34 ?
Can you tell me what to do ? Why is mbam is not solving this ?
NvidMediaCen.. Files not found C: program.
Previously Post # 7 Fig. 34 ?
Can you tell me what to do ? Why is mbam is not solving this ?
When you don't have to worry about your computer anymore, you can start
living again !
The Future is All There Ever Was . . . . . . Jople 2010
Success is a result, not a goal. . . . Flaubert
living again !
The Future is All There Ever Was . . . . . . Jople 2010
Success is a result, not a goal. . . . Flaubert
#12
- Bleep Bleep!
-
- Group: Admin
- Posts: 36,175
- Joined: 24-January 04
- Gender:Male
- Location:USA
Posted 15 November 2008 - 10:21 PM
At this point I would suggest you follow the prep guide in the hjt forum. If filenames keep changing, then you may have an active malware infeciton.
Lawrence Abrams
Circle BleepingComputer on Google+!
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
How to detect vulnerable programs using Secunia Personal Software Inspector <- Everyone should do this!
Circle BleepingComputer on Google+!
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
How to detect vulnerable programs using Secunia Personal Software Inspector <- Everyone should do this!
#13
- Forum Addict
-
- Group: Members
- Posts: 2,294
- Joined: 11-March 07
- Gender:Male
- Location:Very South Jersey
Posted 16 November 2008 - 10:48 AM
That's a good idea, Thank you.
Before I proceed to the Final steps of doing the HJT report, I have a question.
I have a Drive (E:) installed as a slave drive, it is very possible this may also have some malware or infections,
on that drive I have Spybot S&D, installed, I thought about using it the other day because I do not have it installed on drive (C:), master drive, however, I have not found where it scans individual or combined drives. So, there is a question of Can I use this as it is on the slave drive?
Will I need to re-install SB on the master OS ?
Before I proceed to the Final steps of doing the HJT report, I have a question.
I have a Drive (E:) installed as a slave drive, it is very possible this may also have some malware or infections,
on that drive I have Spybot S&D, installed, I thought about using it the other day because I do not have it installed on drive (C:), master drive, however, I have not found where it scans individual or combined drives. So, there is a question of Can I use this as it is on the slave drive?
Will I need to re-install SB on the master OS ?
When you don't have to worry about your computer anymore, you can start
living again !
The Future is All There Ever Was . . . . . . Jople 2010
Success is a result, not a goal. . . . Flaubert
living again !
The Future is All There Ever Was . . . . . . Jople 2010
Success is a result, not a goal. . . . Flaubert
#14
- Forum Addict
-
- Group: Members
- Posts: 2,294
- Joined: 11-March 07
- Gender:Male
- Location:Very South Jersey
Posted 16 November 2008 - 01:34 PM
Little Problem with AAW ; as follows;
Please advise as to what I can do about this.
Please advise as to what I can do about this.
This post has been edited by Jove: 16 November 2008 - 01:37 PM
When you don't have to worry about your computer anymore, you can start
living again !
The Future is All There Ever Was . . . . . . Jople 2010
Success is a result, not a goal. . . . Flaubert
living again !
The Future is All There Ever Was . . . . . . Jople 2010
Success is a result, not a goal. . . . Flaubert
#15
- Forum Addict
-
- Group: Members
- Posts: 4,371
- Joined: 07-January 07
- Gender:Male
- Location:UK
Posted 16 November 2008 - 02:46 PM
It looks like the file is corrupt. Try downloading the file again or downloading from another system and moving the file to the infected system.
