« previous next »
Pages: [1]   Go Down

Author Topic: windows media player automatically starts on windows load?  (Read 285 times)

Offline moose

  • Gold Member
  • *****
  • Posts: 2702
      • http://www.ccrhl.com
windows media player automatically starts on windows load?
« on: June 04, 2005, 10:16:34 AM »
hey, usually i wouldn't ask these types of questions because im good at handling adware on my own, but this one has got me stumped..

media player automatically runs when windows starts up.. im using XP Pro

it's not in my registry under run

its not in the startup folder

i've looked EVERYWHERE for a run command on it and i cant find one. it doesnt even load any specific file - it just boots up and sits there and annoys the living crap out of me

has anyone seen this before?

ive run hijack this, spybot, and adaware sofar.. getting frustrated

worst part is that a friend of mine brought his machine over and his started doing it too, so its probably some sort of nasty virus i guess but i cant find any out of the ordinary processes/ items in my run list

heres a hijack this log...

-
Logfile of HijackThis v1.99.1
Scan saved at 11:22:39 AM, on 6/4/2005
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\umonit.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\tbctray.exe
C:\Program Files\AIM95\aim.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Xfire\Xfire.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Alcohol\Alcohol 120\Alcohol.exe
C:\Program Files\Internet Explorer\iexplore.exe
E:\Programs\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {601ED020-FB6C-11D3-87D8-0050DA59922B} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar_en_2.0.114-big.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar_en_2.0.114-big.dll
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [UMonit] C:\WINDOWS\System32\umonit.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\Program Files\AIM95\DeadAIM.ocm",CheckODLs
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
O4 - HKLM\..\Run: [TraySantaCruz] C:\WINDOWS\System32\tbctray.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar_en_2.0.114-big.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar_en_2.0.114-big.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar_en_2.0.114-big.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar_en_2.0.114-big.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar_en_2.0.114-big.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_03\bin\npjpi150_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_03\bin\npjpi150_03.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: Share in Hello - {B13B4423-2647-4cfc-A4B3-C7D56CB83487} - C:\Program Files\Hello\PicasaCapture.dll
O9 - Extra 'Tools' menuitem: Share in H&ello - {B13B4423-2647-4cfc-A4B3-C7D56CB83487} - C:\Program Files\Hello\PicasaCapture.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00000162-9980-0010-8000-00AA00389B71} -
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) -
O16 - DPF: {27527D31-447B-11D5-A46E-0001023B4289} (CoGSManager Class) -
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} -
O16 - DPF: {33564D57-9980-0010-8000-00AA00389B71} -
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) -
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} -
O16 - DPF: {5B59DA81-5B9E-4F3D-AF5B-A0C644037165} (AIM PicDownloader Control) -
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} -
O16 - DPF: {F5932B1A-DC5A-4408-956D-B1CAD89F2ACC} - https://www.gleim.com/data/tp4/webdeploy/webinstall.cab
O21 - SSODL: UfViIxsou - {4C25C40E-E68F-6EA4-A0B6-EF7C6FA8E4D9} - (no file)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
-
Logged
<----ASSASSINS---->

Offline moose

  • Gold Member
  • *****
  • Posts: 2702
      • http://www.ccrhl.com
windows media player automatically starts on windows load?
« Reply #1 on: June 05, 2005, 05:13:22 PM »
punt? heloooo smart people?
Logged
<----ASSASSINS---->

Offline Saintaw

  • Platinum Member
  • ******
  • Posts: 6692
      • My blog
windows media player automatically starts on windows load?
« Reply #2 on: June 05, 2005, 05:38:37 PM »
It happened to me when I upgraded to Media player V10. I got rid of it back then using "Killitall" (or something similar). I reinstalled XP since.. so I didn't look much into it.
Logged
Saw
Dirty, nasty furriner.

Offline United

  • Gold Member
  • *****
  • Posts: 2536
      • http://squadronspotlight.netfirms.com
windows media player automatically starts on windows load?
« Reply #3 on: June 05, 2005, 05:46:04 PM »
Happened to me when I upgraded to 10 as well.  Don't remember how I got rid of it, but it's not spyware.
Logged

Offline nsty1

  • Copper Member
  • **
  • Posts: 180
windows media player automatically starts on windows load?
« Reply #4 on: June 05, 2005, 08:52:43 PM »
If you have the latest vesion which i believe it's 10,you'll find what you need under toos/options/network.
Also,you may go to Control Panel/Add remove/set program access and defaults:select custom
Logged

Offline moose

  • Gold Member
  • *****
  • Posts: 2702
      • http://www.ccrhl.com
windows media player automatically starts on windows load?
« Reply #5 on: June 05, 2005, 09:00:56 PM »
im about to try uninstalling it... this just reeks of virus to me but ive never seen one before that acts this way

i wasnt using 10, either - just the basic wmplayer that ships with xp. i tried installing 10 just now even though i usually avoid installing further versions of free stuff because the stuff included usually is crap
Logged
<----ASSASSINS---->

Offline nsty1

  • Copper Member
  • **
  • Posts: 180
windows media player automatically starts on windows load?
« Reply #6 on: June 05, 2005, 09:10:04 PM »
Unfortunetly Moose,i dont believe you can un-install it,it's part of windows.You may un-check it under add remove and Uncheck the "enable access to this program" under custom settings.
Check your settings under your media player tools/options,
You may have it set to check for updates once a day,keep the player on top of other windows,connect to the internet(automatically) just to name a few....
Logged

Offline DREDIOCK

  • Plutonium Member
  • *******
  • Posts: 17773
windows media player automatically starts on windows load?
« Reply #7 on: June 06, 2005, 01:03:05 AM »
Yes best bet is to look under "options' when its loaded and unclick the box that sets it to load when windows starts.

you will also want to tunr off or disable Java as you surely dont need that running all the time.

One question though.
WTF is "Alcohol.exe"?
Logged
Death is no easy answer
For those who wish to know
Ask those who have been before you
What fate the future holds
It ain't pretty

Offline moose

  • Gold Member
  • *****
  • Posts: 2702
      • http://www.ccrhl.com
windows media player automatically starts on windows load?
« Reply #8 on: June 06, 2005, 08:35:14 AM »
alcohol is a cd-image program that lets me store images of my games and programs on my file server instead of having to load them into the cd tray..which ends up being kinda important, because on my gaming box the dvdrw doesnt line up properly and i cant eject it with the button on the front of the case so its a pain to constantly switch cds when changing games
Logged
<----ASSASSINS---->

Offline soda72

  • Platinum Member
  • ******
  • Posts: 5201
windows media player automatically starts on windows load?
« Reply #9 on: June 06, 2005, 08:56:38 AM »
Is it running as a windows service?
Logged
Pages: [1]   Go Up
« previous next »