cancel
Showing results for 
Search instead for 
Did you mean: 

VIrus or what is this????

N/A

VIrus or what is this????



Tried doig virus scan adware scan and whole of includig spybot. But every now and hen forexample once a week i get this type of error msgs on my desktop....

Never seen msgs like this before so need advice on how i can get rid of it.

Thing is i dont get this message akot it can be weeks before i get it again..
17 REPLIES
N/A

VIrus or what is this????

That's just like an old Amiga error message!

It could be an extenstion to show error messages like the old Amiga used to? Installed anything like that before? :?
ceridwen
Grafter
Posts: 937
Registered: 14-10-2007

VIrus or what is this????

A bit of googling suggests that this may be a perl module designed to display errors like on the Amiga:

see http://cpan.uwinnipeg.ca/htdocs/CGI-GuruMeditation/README.html

see http://en.wikipedia.org/wiki/Guru_Meditation

Matthew
N/A

VIrus or what is this????

.maki are winamp scripting files.

I would guess that you were using winamp, and something inside it fell over.

I like the Amiga touch though.
ceridwen
Grafter
Posts: 937
Registered: 14-10-2007

VIrus or what is this????

Did some more googling on scripts/speaker.maki and it looks like a winamp skin file?

Matthew
N/A

VIrus or what is this????

Quote
Did some more googling on scripts/speaker.maki and it looks like a winamp skin file?

Matthew

... or since the script is called "speaker.maki" it could be an output plug-in.

So Sundeep, if the pop-up window occurs when you are using winamp, it is probably a problem in your winamp setup.
So go into winamp preferences|plug-ins , and uninstall any you know you don't really need (starting with any that are not Nullsoft's own ).

good luck

Ray
N/A

VIrus or what is this????

Quote
Did some more googling on scripts/speaker.maki and it looks like a winamp skin file?

Matthew


Thats was what I thought! some skin scripts fail just like that.
N/A

VIrus or what is this????

I got that message yesterday when i actualy was web designing and only had Dreamweaver open. Winamp was not running. Also i dont have any extra skins downloaded their all default skins.

What im going to do is reintsall winamp again then see what happens. Thing is this dont happen often. It can happen after several weeks.

Its also not even recoreded in event viewer that i can look into.
Community Veteran
Posts: 5,878
Registered: 04-04-2007

VIrus or what is this????

Next time it pops up, leave it on screen and try looking in Task Manager and checking for any unknown processes. You could do a screen shot of them if you're not sure which one it is and then post it here, although it might be a long list. Before doing this check in the Applications tab on task manager and if it shows in there right click and choose goto process and note down the executable's name. You can then search your computer for the file and it will be easier to seartch google to see if anyone else gets this problem and has mentioned it anywhere.

On a side note I'm moving this to the Computer and Hardware forum.

Chris
N/A

VIrus or what is this????

I hada look in task manager too, i couldnt see any unknown processes.

Also that pop up didnt seem to be a application, if it was i would clicked on it and right clikc go to process then as you said wouldve been easy to search on web.

But no applications and all processes seemed ok. Next time it pops up ill just give a print screen to see if any of you may find any illegal processes incase ive missed it.
N/A

VIrus or what is this????

Download: http://www.merijn.org/files/hijackthis.zip

And post a log file.

It's either going to be something you changed in winamp, a mod pack such as German translation or its some spyware/virus. Only way to find out is by posting the log so we can see what exactly is running on the computer at startup.
N/A

VIrus or what is this????

Logfile of HijackThis v1.99.1
Scan saved at 10:37:16, on 25/03/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5296.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HHVcdV7Sys\VC7SecS.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HHVcdV7Sys\VC7Play.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Winamp\winamp.exe
H:\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [VC7Player] C:\Program Files\HHVcdV7Sys\VC7Play.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1140203975013
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1140203966669
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37610.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Virtual CD v7 Management Service (VC7SecS) - H+H Software GmbH - C:\Program Files\HHVcdV7Sys\VC7SecS.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
N/A

VIrus or what is this????

ahhhhhhhh

got another one today








I have reinstalled winamp...and also i wasnt running winamp but i can see a process about winamp.

I started a program in name of cbt nugget player for my mcse studies and io got this message. But this is the first time i have loaed up this osftware in this PC. I have ran this program in other pc and it has been working fine...but i got the error as sooon as i loaded up the cbtnugget software
Community Veteran
Posts: 38,311
Thanks: 972
Fixes: 57
Registered: 15-06-2007

VIrus or what is this????

N/A

VIrus or what is this????

There was a virus called Meditation although I dont think it is this, it definatly looks like something media related and hopefully hotlane has found the solution.

If all else fails try a system restore back to before this started happening. Or remove all the media software you have put on and re-install bit by bit so you can work out which one it is thats causing the issues.