Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I don't know where to post this, but please help


  • Please log in to reply
1 reply to this topic

#1 Zamah

Zamah

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:11:27 AM

Posted 28 May 2005 - 12:52 PM

I don't know where to post this question and request for help, so I'm taking a shot at it here. Something has infected my system and all of my spyware scanners and cleaners and also my anti-virus do not find this thing. I was using IE, but had to go to Firefox because I couldn't stop this thing, and now I fear Firefox has become infected as well because when I opened it today, this thing wouldn't let me connect unless I allowed it. It also seems that something is opening IE in the background and trying to connect to these sites (I know this because Sygate tells me so):

www.neededware.com
www.findonpage.com
www.yazifind.com
www.ncontextsearch.com
ncontext.adacuity.com
www.tinkopal.com

The problem seems to be coming from wmplayer.exe and wmplayerndw30103lib.dll because this is shown in the msg from sygate when this happens. I've tried to delete the .dll, I've several times taken this .dll out of the start/run part of the registry and each time I remove it Ad-Aware tells me it's trying to write to it again, and it happens so much that it literally freezes up my PC so I have to allow it in order to even open a window of any sort.

I'm thinking that this .dll is exploiting wmplayer.exe, but I can't find what created the .dll, and I can't get rid of the .dll because it keeps coming back. I'm stuck here, I can't get rid of this, and I don't know for sure if this .dll is a ligit file or not.

Edited by Zamah, 28 May 2005 - 12:54 PM.


BC AdBot (Login to Remove)

 


#2 tg1911

tg1911

    Lord Spam Magnet


  • Members
  • 19,274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Louisiana
  • Local time:09:27 AM

Posted 28 May 2005 - 02:01 PM

I suggest you post a HijackThis log for examination.

Read the pinned post in the HijackThis forum, here
Please read, and follow, all directions carefully.

Then, run a log, and post it in the HJT forum, at this link. Do not, fix anything, yet.
A member, of the HJT Team, will help you out.
It may take a while to get a response, because the HJT Team are very busy. Please, be patient, these people are volunteers. They will help you out, as soon as possible.

NOTE:
Once you have made the post, please, DO NOT make another post in the HJT forum, until it has been responded to by a member of the HJT Team. The first thing they look for, when looking for logs to reply to, is 0 replies. If you make another post, there will be 1 reply. The team member, glancing over the replies, might assume someone is already helping you out, and will not respond. So, just make your post, and let it sit there, until a team member responds. This way you will be taken care of, in the most timely manner.
MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, VGA: ECS GeForce Black GTX 560, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users