Old 3rd January 2002, 19:07   #1
chiquita chad
Forum King
 
Join Date: Jul 2000
Posts: 2,391
little help pleez

about a month ago winamp started acting screwy. i could no longer install plugins due to a "corrupt installer" so yesterday i opted to remove winamp and re-install it. now everytime i try opening the installation file... i get the attached error... any one no what the bloody hell is going on? any help would be great
Attached Images
File Type: png image1.png (4.2 KB, 418 views)

Artist Track
chiquita chad is offline   Reply With Quote
Old 3rd January 2002, 23:22   #2
chiquita chad
Forum King
 
Join Date: Jul 2000
Posts: 2,391
^^^^^^^^^^bump^^^^^^^^^^

Artist Track
chiquita chad is offline   Reply With Quote
Old 4th January 2002, 00:13   #3
DJ Egg
Techorator
Winamp & SHOUTcast Team
 
Join Date: Jun 2000
Posts: 35,821
Hmm . . . a bit of a toughie there Chad

Sounds like a virus to me.
What A-V are you using, and have ya got the latest signature files?

Then again, a virus which infects EXE files would normally create the CRC Invalid error, but it depends on what kind of virus it is.

Apart from that, I'll need some sys specs
(including: connection type, browser, Windows OS, download manager, etc)
Also, what else is running at the time? Any Disk Utilities?
(eg. Norton/McAfee crap)

When you uninstalled, did you also delete the winamp dir & winamp.ini (windows dir) afterwards?
As specified in this thread: Basic Uninstall -> Reinstall procedure

Also, at what point in the install procedure does the error occur?

Can't think of much else at the mo.
DJ Egg is offline   Reply With Quote
Old 4th January 2002, 01:23   #4
chiquita chad
Forum King
 
Join Date: Jul 2000
Posts: 2,391
alright ill try to give u some specs and answer your q's

Sys Specs:
Windows 98 Second Edition
Pentium 3 Processor
128 MB Ram
32 bit file system
32 bit virtual memory
56K modem
IE v? (newest version, whatever number it is)
nothing else is running at the time... plugins wouldnt install so i did a clean uninstall but it wouldnt let me reinstall. i just get the error as soon as i d-click on the install
i downloaded a 3 versions of 2.78 and none of them work. neither does winamp3 beta 2. so im thinking it may have something to do with the Pimp installer. but i know absolutely nothing about computers

btw, thanx for the reply

Artist Track
chiquita chad is offline   Reply With Quote
Old 4th January 2002, 02:44   #5
DJ Egg
Techorator
Winamp & SHOUTcast Team
 
Join Date: Jun 2000
Posts: 35,821
...and your Anti-Virus software is <?>
Did you run a full virus scan (with latest DAT signature files)?

Something's definitely amiss, but I'm not sure what just yet?
It can't be an error in the PiMP installer, otherwise no-one would be able to install any Winamp stuff.

RU experiencing any other problems with kernel32 errors/program crashes/BSoD's/etc?

If so,
As well as running a virus scanner,
Try running ScanDisk (with full surface scan)
and Hardware Diagnostic Tool (hwdiag.exe)
Especially look at any problems with RAM

btw, are you signed up with a good quality ISP ?
What speed connection do you get? 48kbps or slower?

Anyway, I feel for you chad,
so I hope you get things sorted out ASAP
DJ Egg is offline   Reply With Quote
Old 4th January 2002, 18:58   #6
chiquita chad
Forum King
 
Join Date: Jul 2000
Posts: 2,391
i have Norton Anti-Virus. i scanned the whole hardrive and no viruses were found. my version of norton is only 3 weeks old so doubt its out of date.
i dont have any problems with kernel32 errors or program crashes. and i havent had a BSOD for about 2 months now.
after i get some free time ill run ScanDisk and Hardware Diagnostic Tool.
and my ISP is very good. im with stargate and it is never down and i rarely get dc'ed. and i get a 48kbps connection

hope u can solve my problem

stupid computer

Artist Track
chiquita chad is offline   Reply With Quote
Old 4th January 2002, 19:41   #7
DJ Egg
Techorator
Winamp & SHOUTcast Team
 
Join Date: Jun 2000
Posts: 35,821
okay....

sad to say, but more questions....

So, you can download and install any other software off the net ok?
You only get this error with all NSIS/PiMP'ed installers?

Are you using a 3rd-party download manager, or just the default Windoze one?

At what point in the installation does the error occur?
As soon as you open it? Or some point further in? If so, where exactly?

So, currently, there's no Winamp (2 or 3) anywhere on your pc, eh?
Did you also delete the winamp dir and windows\winamp.ini ?


btw, 3 weeks is a long time in the virus world.
Symantec/Norton should release weekly updates!
InoculateIT (cai.com) release updated DAT files 2 or 3 times a week.

yes, and definitely try (full) scandisk & hwdiag when ya get the chance.
DJ Egg is offline   Reply With Quote
Old 4th January 2002, 21:43   #8
chiquita chad
Forum King
 
Join Date: Jul 2000
Posts: 2,391
So, you can download and install any other software off the net ok?
yes
You only get this error with all NSIS/PiMP'ed installers?
yes
Are you using a 3rd-party download manager, or just the default Windoze one?
default windows
At what point in the installation does the error occur?
as soon as i double click on the install file
So, currently, there's no Winamp (2 or 3) anywhere on your pc, eh?
nopers
Did you also delete the winamp dir and windows\winamp.ini ?
yeppers
yes, and definitely try (full) scandisk & hwdiag when ya get the chance.
will do tonight before i head out for the night

Artist Track
chiquita chad is offline   Reply With Quote
Old 4th January 2002, 22:25   #9
peter
ist death
 
peter's Avatar
 
Join Date: May 2000
Posts: 3,704
another question: can you use ANY self-extractors (eg. winzip), even if you make them on your system ?
this DEFINITELY looks like a virus to me (i met win95.cih a long time ago).
peter is offline   Reply With Quote
Old 4th January 2002, 22:54   #10
chiquita chad
Forum King
 
Join Date: Jul 2000
Posts: 2,391
winzip works fine on my pc
i scanned for viruses 3 times now with Norton and nothing was found all 3 times.
btw, today i downloaded sonique and it wont install either. i get the warning about the installer being corrupt. so is it maybe the windows installer thats outta wack here?

Artist Track
chiquita chad is offline   Reply With Quote
Old 4th January 2002, 23:06   #11
peter
ist death
 
peter's Avatar
 
Join Date: May 2000
Posts: 3,704
did you try making self-extracting exe with winzip ?
peter is offline   Reply With Quote
Old 4th January 2002, 23:39   #12
chiquita chad
Forum King
 
Join Date: Jul 2000
Posts: 2,391
um, how would i go about doing this... im not very good with winzip

Artist Track
chiquita chad is offline   Reply With Quote
Old 4th January 2002, 23:54   #13
peter
ist death
 
peter's Avatar
 
Join Date: May 2000
Posts: 3,704
sorry, i don't use winzip
peter is offline   Reply With Quote
Old 5th January 2002, 00:00   #14
Mr Jones
Nothing to say...
 
Mr Jones's Avatar
 
Join Date: Sep 2000
Location: UK
Posts: 23,064
Make your zip file as you would any other zip using Winzip, then right click on the zip and select "create self-extractor (.exe)"
Mr Jones is offline   Reply With Quote
Old 5th January 2002, 00:04   #15
peter
ist death
 
peter's Avatar
 
Join Date: May 2000
Posts: 3,704
...then try to open created file and see if it works
peter is offline   Reply With Quote
Old 5th January 2002, 00:27   #16
chiquita chad
Forum King
 
Join Date: Jul 2000
Posts: 2,391
whenever i try and do that i get a warning saying that the expected Zip head was not found.
it still makes the .exe but it doesnt work

can anything else go wrong?

Artist Track
chiquita chad is offline   Reply With Quote
Old 5th January 2002, 00:54   #17
peter
ist death
 
peter's Avatar
 
Join Date: May 2000
Posts: 3,704
better get some SERIOUS antivirus software.......
i suggest that you get a DOS virus scanner with latest definitions and run it under pure DOS if you can.
peter is offline   Reply With Quote
Old 5th January 2002, 02:05   #18
DJ Egg
Techorator
Winamp & SHOUTcast Team
 
Join Date: Jun 2000
Posts: 35,821
There's 3 different CiH cleaning utilities linked to in the crc thread.

<quote>

A program that's guaranteed to fix the CiH virus is available here:
http://www.pspl.com/download/cleancih.htm
Download = less than 30kb
It must be run from the DOS command prompt only, NOT Windows.
Scans memory, boot sectors & all EXE files.
Cleans/restores all infected files (if possible).


http://forums.winamp.com/showthread....984#post287984
Includes links to 2 other CIH killing utilities (both freeware)

Symantec's KILL_CIH.EXE (24kb)
CleanCIH (20kb)

</quote>

All 3 are DOS programs, so whichever one you choose,
you'll need to bootup to DOS to run it.

In Windows, save it somewhere first,
eg. C:\TEMP\KILL_CIH.EXE or C:\TEMP\CleanCIH.EXE
Then reboot

press F8 when "starting Windows 98" appears -> select 6 (command prompt only)

Type: (bold text)
C:\>CD TEMP
Hit Enter
Type: (bold text)
C:\TEMP>CLEANCIH
Hit Enter

Better safe than sorry!
If you need further instructions, just ask.
DJ Egg is offline   Reply With Quote
Old 5th January 2002, 04:37   #19
chiquita chad
Forum King
 
Join Date: Jul 2000
Posts: 2,391
alright. DJEgg... i tried all 3 and none of them found any trace of a virus.
i went out and bought the newest norton version, scanned for viruses, and nothing appeared

thanx for all the suggestions so far guys

Artist Track
chiquita chad is offline   Reply With Quote
Old 5th January 2002, 11:00   #20
bitblitter
Junior Member
 
Join Date: Jan 2002
Location: holland
Posts: 1
I've solved the problem on my machine.....

Norton, McAfee, it didn't work, or it couldn't find anything, but I wanted to use WinAmp, ànd I'm a very bad loser, so I kept on trying...

check out this link:

http://www.F-Secure.com/cih/

It's all about the CIH virus, which appears under many aliases in peoples PC's...

The little tool can tell you if you're infected, the program itself tracked down and deleted the viri and disinfected the infected files.

Here's how I've done it:

I installed and ran the program, then it disinfected almost all the infected files...

I restarted and ran the chech again, it found the infected files but couldn't repair them anymore...

I dl'd the CIH tool which told me I was infected.
However, in Winblows you have to restart like 500 times a day to make any changes permanent and/or active... So I did, and asked the tool again.

It declared I was freed of the CIH viri (I had 3).

I dl'd WinAmp again, with my windows dl-manager, installed it, and it's WORKING!!!!

BTW: this virus is over 3 years old, and if 'greats' like Norton and McAfee crash on this virus, or just can't find it, it is advisable to spend your money elsewhere....

Plz let me know if my approach was succesful for you!

Have a nice day!
bitblitter is offline   Reply With Quote
Old 5th January 2002, 11:23   #21
peter
ist death
 
peter's Avatar
 
Join Date: May 2000
Posts: 3,704
imo this is something new, not CIH, because all those antivirus programs know CIH.
if that was my box, i would totally refortmat it, reinstall everything from backup CD-Rs, etc.
peter is offline   Reply With Quote
Old 6th January 2002, 20:37   #22
chiquita chad
Forum King
 
Join Date: Jul 2000
Posts: 2,391
well i used all the cih removing progs and none of them found the cih virus. the newest version of norton couldnt find a virus. any possiblibility of it not being a virus?

Artist Track
chiquita chad is offline   Reply With Quote
Old 6th January 2002, 20:43   #23
peter
ist death
 
peter's Avatar
 
Join Date: May 2000
Posts: 3,704
i've got an idea....
get some setup file, eg. this one, run it (it will puke), then pack it with zip and post here as attachement so i can examine it. (that sample file is small enough; forums don't allow exe attachements so you have to zip it).
now everyone else PLEASE don't download that attachemet; i'll delete it as soon as i grab it.
peter is offline   Reply With Quote
Old 6th January 2002, 21:07   #24
chiquita chad
Forum King
 
Join Date: Jul 2000
Posts: 2,391
alright peter, here ya go
downloaded it, ran it, zipped it, uploaded it....

Artist Track
chiquita chad is offline   Reply With Quote
Old 6th January 2002, 21:09   #25
peter
ist death
 
peter's Avatar
 
Join Date: May 2000
Posts: 3,704
done, phew.
f-prot says: W32/Busm.1445
looking for more info.

[edit] you can get f-prot at www.f-prot.com - huge kudos to guys at hydrogenaudio for poiting it to me. not sure if it can remove this virus; dos version is free so you can give it a try. say goodbye to already downloaded installers; they're permanently borked; disinfecting won't help. like i said, you should scan whole hdd in pure DOS. good luck, you're gonna need it.
peter is offline   Reply With Quote
Old 6th January 2002, 21:19   #26
deathazre
Major Dude
 
Join Date: Oct 2001
Location: behind the wheel of a Cat service truck
Posts: 1,847
Send a message via ICQ to deathazre Send a message via AIM to deathazre
send a copy of that puked EXE to Symantec, they don't know a damn thing about the virus... google search only turned up a Canadian Symantec page recognizing the virus exists.

btw peter that link doesn't work.
deathazre is offline   Reply With Quote
Old 6th January 2002, 21:23   #27
peter
ist death
 
peter's Avatar
 
Join Date: May 2000
Posts: 3,704
you download it too ? careful with that crap, hope you know what you're doing (tried to delete it really quick); i've already deleted it from my hdd to avoid evil shit. www.f-prot.com link does work for me. you can try here: http://www.f-prot.com/f-prot/download/getfpdosfree.html
yes, i've tried to search with google too, with identical results.
peter is offline   Reply With Quote
Old 6th January 2002, 21:28   #28
deathazre
Major Dude
 
Join Date: Oct 2001
Location: behind the wheel of a Cat service truck
Posts: 1,847
Send a message via ICQ to deathazre Send a message via AIM to deathazre
no, I'm not that stupid. I'm just saying I think Symantec needs a head-start in taking care of it. Just like they always do.

actually... peter do a hex compare of the files and send the results to Symantec--saves them a step. Maybe they'll do something about it.
deathazre is offline   Reply With Quote
Old 6th January 2002, 21:35   #29
peter
ist death
 
peter's Avatar
 
Join Date: May 2000
Posts: 3,704
hexcompare ? could do, but i don't have infected file anymore. you can grab source one from blorp and compare yourself if you have infected one (or give symantec URL to source one).
peter is offline   Reply With Quote
Old 6th January 2002, 21:43   #30
deathazre
Major Dude
 
Join Date: Oct 2001
Location: behind the wheel of a Cat service truck
Posts: 1,847
Send a message via ICQ to deathazre Send a message via AIM to deathazre
chad, do what it says on this page with that file.
deathazre is offline   Reply With Quote
Old 6th January 2002, 21:49   #31
DJ Egg
Techorator
Winamp & SHOUTcast Team
 
Join Date: Jun 2000
Posts: 35,821
ooh! a new virus . . . . lovely!
DJ Egg is offline   Reply With Quote
Old 7th January 2002, 02:18   #32
chiquita chad
Forum King
 
Join Date: Jul 2000
Posts: 2,391
alright, im downloading f-prot now. damn 56K takes soooooo long... lets home this works. ive been winamp-less for too long

Artist Track
chiquita chad is offline   Reply With Quote
Old 7th January 2002, 03:33   #33
chiquita chad
Forum King
 
Join Date: Jul 2000
Posts: 2,391
IT WORKED!!!
everything's back to normal and I HAVE WINAMP AGAIN!!!!!!!

thank you everyone who helped and put in extra time for little ole me

*big hug for all involved*

Artist Track
chiquita chad is offline   Reply With Quote
Old 28th September 2002, 19:07   #34
tennyoaisu
Junior Member
 
Join Date: Sep 2002
Posts: 6
Send a message via ICQ to tennyoaisu Send a message via AIM to tennyoaisu Send a message via Yahoo to tennyoaisu
*sigh* None of these worked for me. They all sai that the CIH virus is not on my computer. >_<
tennyoaisu is offline   Reply With Quote
Old 28th September 2002, 21:15   #35
DJ Egg
Techorator
Winamp & SHOUTcast Team
 
Join Date: Jun 2000
Posts: 35,821
It's not CiH virus what you've got.
CiH is old and all half-decent AV software can detect it.
Chiquita Chad didn't have CiH virus either.
It's something totally different what you've got!
W32/Busm.1445 or similar evil virus

btw, for everyone else's benefit, this is in response to this thread.
DJ Egg is offline   Reply With Quote
Old 18th December 2002, 00:45   #36
Marvellous
Junior Member
 
Join Date: Dec 2002
Location: Tallinn , Estonia
Posts: 1
Send a message via ICQ to Marvellous Send a message via Yahoo to Marvellous
I have excact same problem .. thought its CIh ,tried those things out ,didnt find anything ,downloaded F-Prot ,installed and it found the virus W32/Busm.1445 but it wont clean it! Says its corrupted or something. I mean what sthe use of anti virus if it gets corrupted by virus? Can anyone help me what to do now? COs i want to use new winamps but i cant if my self-extractors doesnt work.
Marvellous is offline   Reply With Quote
Old 18th December 2002, 08:00   #37
DJ Egg
Techorator
Winamp & SHOUTcast Team
 
Join Date: Jun 2000
Posts: 35,821
You've got serious problems there my friend.
Try an online scan at any or all of these places:

http://housecall.trendmicro.com/
http://www.scan.ro/
http://housecall.antivirus.com/
http://www.commandondemand.com/
http://www.ravantivirus.com/scan/
http://www.freedom.net/onlineviruscheck/
http://www.pandasoftware.com/activescan/com/
http://www.google.com/search?num=100...ine+virus+scan
DJ Egg is offline   Reply With Quote
Reply
Go Back   Winamp & Shoutcast Forums > Winamp > Winamp Technical Support

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump