Strange playback problem

[JackBauer05]

Hello!

I've been using winamp for ages , and i never had a problem with it until today I got some errors so i decided to unistall then install the winamp again. I've downloaded the latest version but i have a weird and strange errors when i start a music.

Some mp3's work properly, but i got two kind of errors with other mp3's.

First: When I try to play the song , the playback doesn't works. It seems that winamp skips them.

Second: I managed to start the playback but i got some weird and strange noises, strange speed (faster speed). The song is a complete mess with these errors

So once more: some mp3s works fine, but in the others i got one of the two problems.

I don't know what to do, I've searched so much posts here but i can't find any solution for this. Please help, thanks!

[Nharko]

Hello...

I got exactly same problems since today...

Ive already tried to install older versions of winamp but problem remains...

Id be very pleased if somebody experienced in such problems could reply to this thread...

Thanks in advance...

[JackBauer05]

Hmm two more topics opened today with this problem :S

[victormvn]

So they know the problem , does anyone care about it?
I mean...shouldn't we have a solution to this?

[JackBauer05]

Another thread opened with this problem :S

I'm sure that they care about this and they're working on to solve this. Maybe it's not that easy to fix it so they need some time

[DJ Egg]

O20 - Winlogon Notify: winloe32 - C:\WINDOWS\SYSTEM32\winloe32.dll

Looks like you've got a nasty malware infection there.

Only 1 result so far on google:
http://www.google.com/search?q=winloe32.dll

Winlogon items can be quite tricky to remove...

I suggest that you take it to one of these specialised security forums:
http://forums.techguy.org/54-malware...jackthis-logs/
http://www.help2go.com/forum/forumdisplay.php?f=40
http://www.spywarewarrior.com/viewforum.php?f=5

[Nharko]

Theres my plugin list and hijackthis log...

Id be pleased if you could look when u have time...

Thx in advance...

[DJ Egg]

Old version of HJT. Please use v2.02 (not 1.99.1)

This BHO is malware:

O2 - BHO: (no name) - {7101002C-C8A3-F8C9-8327-080CBDEC850C} - C:\WINDOWS\system32\jzxulwmh.dll

You can fix bad BHO's with HJT by closing all windows (Explorer, browser, email, office, etc), run the HJT scan again, checkmark ONLY that one entry in the results, and click 'fix checked'.

But the newer version of HJT might show more...


By the way, is your user profile on XP really ErROr.CP-55F156BD35C7 ???

[Nharko]

Ive removed that file, thanks for info...

Ive made user profile ErROr... I have no idea why or how this ErROr.CP-55F156BD35C7 was created...

Same thing happened with other user profiles in my pc too... I made Sandra and Lenka profiles and now there are Lenka.CP-55F156BD35C7 and Sandra.CP-55F156BD35C7.. Like i said i have no idea what it means or why it was created..

However, theres new log from v2.02... Its kinda late now for playing mp3s to check if it worked, so ill try tommorow and update my reply...

Thanks for your time...

[sibidigua]

Great info I used to solve my problems too

[victormvn]

Please , for stupid people like me , explain what have you done. Did you make winamp to work normally?
I don't understand what did you "run" , what file should be removed or changed...?
Please help me too , thanks

[DJ Egg]

They all attached their HijackThis logs,
and then I told them which malware item to remove...

i.e. it's a trojan/virus that's causing the problem,
and it has nothing to do with Winamp directly.

The instructions for attaching a HJT log can be found via the FAQ
http://forums.winamp.com/showthread....d=161361#specs

[victormvn]

Here's my log , i hope someone will find something...
It's bad without winamp , i used it for ages

[DJ Egg]

Your malware items are:

F3 - REG:win.ini: run=

O20 - Winlogon Notify: wineil32 - C:\WINDOWS\SYSTEM32\wineil32.dll

Again, I'm not sure if you can easily remove O20 Winlogon items too easily with HijackThis, though you might be able to do it in Safe Mode.

However, I also suggest that you take it to one of those specialized security forums that I referred to in my first reply above...

wineil32.dll is a backdoor Rootkit/Haxdoor trojan
http://www.google.com/search?q=wineil32.dll

[JackBauer05]

Thanks for the info DJ Egg! I'm going to try to remove this file. Or maybe I'll do an XP reinstall Thanks for help!

[Koopa]

Ive made user profile ErROr... I have no idea why or how this ErROr.CP-55F156BD35C7 was created...

This happens, if you reinstall Windows without formatting the disk drive.

If there already is a user folder called "ErROr" it creates a new folder with a set of random numbers and letters, to make sure, that there isn't the same folder twice.

[victormvn]

So there's no problem after all with winamp? It's just because of these infected files?
sibidigua did it work on you?

[DJ Egg]

Correct.

The trojan/virus affects key Windows drivers/processes that Winamp uses.
That's assuming it doesn't also infect the actual mp3 files as well...

[JackBauer05]

Noooo I've reinstalled xp but i got the same problem Here's my new hijackthis log file.

[victormvn]

How am i supposed to delete C:\WINDOWS\SYSTEM32\wineil32.dll ???
Somebody help , i wanna make winamp work!!!!!!!
Where did the viruses come from anyway?

[victormvn]

I removed wineil32.dll but i still have the problem...
Sorry , but i still believe it's not because of some infection,I guess it's winamp.
That explains why JackBauer05 still has the problem after windows reinstalation.

[DJ Egg]

If you're suggesting that it's some kind of Winamp bug, then sorry, but there's not a hope in hell's chance of us being able to reproduce the problem.

I told you to take the problem to one of those specialized security forums and post your HJT log there.
Simply reinstalling Windows might not fix it. You have to get rid of all infected files first.

Other than that, the only other thing that can cause such a problem is bad sound drivers (make sure you've got the latest drivers for your soundcard) and also make sure DirectX is up-to-date for your OS.

Is it always the same mp3's that play strangely, or is it a random thing?

Maybe if you posted a link to a sample file which exhibits the problem, I could tell you if the file is corrupt or not and/or if I can reproduce the problem? If you don't have your own webspace then upload it to any of stashbox.org, mediafire.com or sendspace.com and post the download link here (don't worry if it says 'url submitted by user' in your post, we can still see it).

The only relevant settings in Winamp would be:

Winamp -> Prefs -> Plugins -> Output -> DirectSound Output -> config:

Device tab:
Make sure your soundcard is selected as Output Device (via the drop-down menu)
'Allow hardware acceleration' should be checkmarked by default (for multi-speaker support, amongst other things), but try temporarily disabling it...

Buffering tab:
Buffer length = 2000ms
Prebuffer = 500ms
Buffer-ahead = 500ms
Enable cpu usage control = checkmarked

Winamp -> Prefs -> Plugins -> Input -> MPEG Audio Decoder -> config:

General tab:
Buffer = 128

Decoder tab:
Quality = Full
EQ = logarithmic
Fast Layer EQ's = unchecked

Winamp -> Prefs -> Playback

Playback tab:

If it's checked/unchecked, try doing the opposite for "Allow 24bit"

and that's about it really...

[victormvn]

I downloaded some files today and they all work fine.
The old ones don't.
I have no idea what to understand of this...

[JackBauer05]

Here's an mp3 which is sounds weird in Winamp http://www7.zippyshare.com/v/66861334/file.html (and other players example Quintessential Player)

And the strange thing is: if i try to play this in Windows Media Player 11, the playback stops after 9 seconds and opens a link (www.flashcodec.com) and try to download a file "windows_media_player_flash_codec" If i install this, norton alarms me that this is a virus.

So it's clear now , this is not a winamp problem, but i have no idea what can i do. One of my friend has the same problem too.

By the way, thanks for your answer again DJ Egg!

[Koopa]

Simply format your disk drive, probably most of your system already is infected.

Sure, this doesn't sound good, but sometimes you've no other choice.

Next time be careful, don't download any crap from the internet. Rip your original music cds, or buy music from a store, instead of downloading crap with file sharing clients.

Also just visit websites, where you can be sure, that they won't install any maleware.

Antivirus programs can be a help, but they cannot protect your system from you.

[DJ Egg]

Looks like the virus has infected/corrupted your mp3's.
That's what viruses do, sad to say... they infect/corrupt other files.
Your sample file plays badly in all players, and I very much doubt if you'll be able to fix them with anything :-(

And whatever you do, do NOT install that dodgy flash codec thing.
It's not a codec at all, and like Norton says, it is the actual virus.

In future, be very careful about downloading dodgy files via p2p/torrents or clicking links in emails/messenger.

Anyway, thanks for the confirmation that this is definitely not anything to do with Winamp. Sadly, I don't have any other suggestions, other than I still think you should post the original problem and HJT log on one of those specialized security forums that I linked to in my first reply.

[thomasz]

i thinks you should solve that problem virut to mp3.I would contact with you.

[Nharko]

Thanks for all replies..

However, all my mp3s play normally in WMP... Also ive discovered that you can fix it by converting corrupted mp3 to mp3 (or another format) again... But u will propably need to retag all mp3s again...

It works for me, anyways i know it isnt real solution, because it can happen again...

Again thanks everybody who tried to help and sorry for blaming winamp...

[victormvn]

I confirm what Dj Egg said!
On another program the problem was still there, all files that didn't work on winamp did NOT work either in the new program.
So I must appologize to Dj Egg and Winamp for accusations.
The good news for me is that i had to format my hard disk a few months ago and i saved all my mp3's on dvds.
So all i must do now is delete the ones on the hard and copy them from the dvds.
I guess all who have the problem have only 2 things to do: 1. clean your sistem, remove all suspected files
2. delete all the infected files and download them back
Thanks for the support Dj Egg , i hope we all will continue to enjoy Winamp.

[Nicktcy]

Hi Nharko,

May I know what program do you use? My msn is nicktcy@msn.com

[JackBauer05]

Unfortunately this is not works for me to convert mp3 to mp3 (or anything else) But i can play my old mp3s in Winmediaplayer Classic and KMPlayer. So i don't have to delete my files, thank God. I'm gonna use Winamp for the new mp3's and KMPlayer for the old ones.

Thanks for all replies

[kzuse]

Seems this virus infects MP3s in a manner so that Windows Media Player has some overrun an opens this "link" that was mentioned here. Maybe it wants to exploit some WMP security hole?

But that is only a guess after having read this thread, my Winamp plays all files correctly and I don't have any suspicios files on my system.

[JackBauer05]

Yeeeeeeees! Finally I found a solution for this I managed to clean my infected mp3s with a program. If you want this, go to this forum: http://www.forospyware.com/t176862.html It's spanish, but you'll find this: FS-MP3Fix.zip Dowload it, and your infected mp3s will be fixed.


Yeah, i can use Winamp again

[DJ Egg]

Nice!

Here's the direct link to the fix:
http://www.forospyware.com/t176862.html
http://www.infospyware.com/Software/.../FS-MP3Fix.zip

Google translation:
http://translate.google.com/translat...hl=en&ie=UTF-8

Download mirrors
http://www.sendspace.com/file/6glhdb
http://www.mediafire.com/?zmxojwittmf
http://stashbox.org/149355/FS-MP3Fix.zip
www.meggamusic.co.uk/temp/FS-MP3Fix.zip

[mikeswansea]

i used the same problem like jackbauer, reinstalled XP - still the mp3s didnt work, then used the FS-MP3FIX, now the mp3s work again, but i would be glad if one of you knows how to analyze the hijackthis files and tell me if there is any obvious malware infection in my computer

sony vaio
intel pentium M processor 1600MHZ
512 MB RAM
60 GB harddrive
windows XP SP3

thx in advance

[stevevaix]

plz help me.. here mu HJT log. hope u can help me out.. i want to fully enjoy win amp. thank u...

[DJ Egg]

@stevevaix

Hmm, I can't see any evidence of the same virus in your log.

Your Appinit_DLLs and Winlogon Notify items are for AVG and SUPERAntiSpyware, ie. safe entries.

There's a few items that I wasn't familiar with that I thought might be dodgy, but after researching them it seems as though they're safe (eg. the O4 - HKUS [msnsc] and [nlsf] entries, which seem to be for MSN and NLite on your other user profiles).

Have you maybe alreasy got rid of the virus before posting the log, but now just need to fix the mp3's? (see above)


@mikeswansea

You could try these two online analyzers:
www.hijackthis.de
http://www.help2go.com/component/detective/

But note that they're not always 100% accurate...

[bjarnihk]

Hi guys, I'm new to this conversation. It seems that I share this strange problem with mp3 files and Winamp. Note that my Winamp still plays my WMA's and AVI's perfectly. My Windows Media Player can play/burn the mp3 files fine so I guess there i nothing wrong with the files. (I have not checked all of them though) Yahoo Music Jukebox can play the mp3 files but when it burnes an audio cd it sounds exactly like the Winamp problem, i.e some files skipped and some files sound all distorted and chopped up.
It's been very interesting to read through your conversation, I have today posted my log file to Tech Support Guy as DJ Egg sugested but I thought I'd also ask you DJ Egg to kindly take a quick look at my log file and check if you see something wrong there.
Thanks in advance and looking forward to your respond

[DJ Egg]

@bjarnihk

Yup, alas, you've got the same virus.

O20 - Winlogon Notify: IfxWlxEN - C:\WINDOWS\SYSTEM32\IfxWlxEN.dll
O20 - Winlogon Notify: igfxcui - igfxdev.dll (file missing)
O20 - Winlogon Notify: mlJYspOe - mlJYspOe.dll (file missing)

These are something different, but also bad entries:

O2 - BHO: (no name) - {B6E95516-27C0-443D-9BA9-ABD8C12BAE16} - C:\WINDOWS\system32\mlJYspOe.dll (file missing)
O4 - HKLM\..\Run: [] rundll32 ,sUuRun <-- what's this????

And I'm not sure about all those crawler.com entries either...
I think crawler is installed by SpywareTerminator, which I wouldn't personally recommend as a good antispyware app (such as: Ad-Aware, Spybot Search & Destroy, Windows Defender, Superantispyware, and that's about it)

Though yeah, if you've also posted your log at TSG forums, then they're supposed to be the experts, so it's probably best to see what instructions they give you...

[bjarnihk]

Thank you DJ Egg, that was quick
I'm no computer expert so I need to ask, what do I do to fix the problem?
Should I delete IfxWlxEN.dll?
The two files missing, do I need to find them somewhere and put them in the location mentioned?
I ran the scan again and pressed the "Fix checked" button after checking the lines you suggested but Winamp still can't play mp3 files after reboot...
I have taken no action to the other three suggestions you made...