Old 9th June 2008, 16:18   #1
JackBauer05
Junior Member
 
Join Date: Jun 2008
Posts: 12
Strange playback problem

Hello!

I've been using winamp for ages , and i never had a problem with it until today I got some errors so i decided to unistall then install the winamp again. I've downloaded the latest version but i have a weird and strange errors when i start a music.

Some mp3's work properly, but i got two kind of errors with other mp3's.

First: When I try to play the song , the playback doesn't works. It seems that winamp skips them.

Second: I managed to start the playback but i got some weird and strange noises, strange speed (faster speed). The song is a complete mess with these errors

So once more: some mp3s works fine, but in the others i got one of the two problems.

I don't know what to do, I've searched so much posts here but i can't find any solution for this. Please help, thanks!
Attached Files
File Type: zip pluginexthijack.zip (5.1 KB, 990 views)
JackBauer05 is offline   Reply With Quote
Old 10th June 2008, 15:06   #2
Nharko
Junior Member
 
Join Date: Jun 2008
Posts: 6
Hello...

I got exactly same problems since today...

Ive already tried to install older versions of winamp but problem remains...

Id be very pleased if somebody experienced in such problems could reply to this thread...

Thanks in advance...

Last edited by Nharko; 10th June 2008 at 17:33.
Nharko is offline   Reply With Quote
Old 10th June 2008, 23:23   #3
JackBauer05
Junior Member
 
Join Date: Jun 2008
Posts: 12
Hmm two more topics opened today with this problem :S
JackBauer05 is offline   Reply With Quote
Old 11th June 2008, 21:55   #4
victormvn
Junior Member
 
Join Date: Jun 2008
Posts: 14
anyone?

So they know the problem , does anyone care about it?
I mean...shouldn't we have a solution to this?
victormvn is offline   Reply With Quote
Old 12th June 2008, 16:30   #5
JackBauer05
Junior Member
 
Join Date: Jun 2008
Posts: 12
Another thread opened with this problem :S

I'm sure that they care about this and they're working on to solve this. Maybe it's not that easy to fix it so they need some time
JackBauer05 is offline   Reply With Quote
Old 12th June 2008, 18:10   #6
DJ Egg
Techorator
Winamp & Shoutcast Team
 
Join Date: Jun 2000
Posts: 35,824
O20 - Winlogon Notify: winloe32 - C:\WINDOWS\SYSTEM32\winloe32.dll

Looks like you've got a nasty malware infection there.

Only 1 result so far on google:
http://www.google.com/search?q=winloe32.dll

Winlogon items can be quite tricky to remove...

I suggest that you take it to one of these specialised security forums:
http://forums.techguy.org/54-malware...jackthis-logs/
http://www.help2go.com/forum/forumdisplay.php?f=40
http://www.spywarewarrior.com/viewforum.php?f=5
DJ Egg is offline   Reply With Quote
Old 14th June 2008, 18:27   #7
Nharko
Junior Member
 
Join Date: Jun 2008
Posts: 6
Theres my plugin list and hijackthis log...

Id be pleased if you could look when u have time...

Thx in advance...
Attached Files
File Type: rar hijackthisandpluglist.rar (5.0 KB, 756 views)
Nharko is offline   Reply With Quote
Old 14th June 2008, 20:28   #8
DJ Egg
Techorator
Winamp & Shoutcast Team
 
Join Date: Jun 2000
Posts: 35,824
Old version of HJT. Please use v2.02 (not 1.99.1)

This BHO is malware:

O2 - BHO: (no name) - {7101002C-C8A3-F8C9-8327-080CBDEC850C} - C:\WINDOWS\system32\jzxulwmh.dll

You can fix bad BHO's with HJT by closing all windows (Explorer, browser, email, office, etc), run the HJT scan again, checkmark ONLY that one entry in the results, and click 'fix checked'.

But the newer version of HJT might show more...


By the way, is your user profile on XP really ErROr.CP-55F156BD35C7 ???
DJ Egg is offline   Reply With Quote
Old 15th June 2008, 00:27   #9
Nharko
Junior Member
 
Join Date: Jun 2008
Posts: 6
Ive removed that file, thanks for info...

Ive made user profile ErROr... I have no idea why or how this ErROr.CP-55F156BD35C7 was created...

Same thing happened with other user profiles in my pc too... I made Sandra and Lenka profiles and now there are Lenka.CP-55F156BD35C7 and Sandra.CP-55F156BD35C7.. Like i said i have no idea what it means or why it was created..

However, theres new log from v2.02... Its kinda late now for playing mp3s to check if it worked, so ill try tommorow and update my reply...

Thanks for your time...
Attached Files
File Type: rar hijackthis.rar (2.0 KB, 686 views)
Nharko is offline   Reply With Quote
Old 15th June 2008, 12:31   #10
sibidigua
Junior Member
 
Join Date: Jun 2008
Location: Valencia, Vzla.
Posts: 1
Great info I used to solve my problems too
sibidigua is offline   Reply With Quote
Old 15th June 2008, 16:53   #11
victormvn
Junior Member
 
Join Date: Jun 2008
Posts: 14
i don't understand anything

Please , for stupid people like me , explain what have you done. Did you make winamp to work normally?
I don't understand what did you "run" , what file should be removed or changed...?
Please help me too , thanks
victormvn is offline   Reply With Quote
Old 15th June 2008, 17:27   #12
DJ Egg
Techorator
Winamp & Shoutcast Team
 
Join Date: Jun 2000
Posts: 35,824
They all attached their HijackThis logs,
and then I told them which malware item to remove...

i.e. it's a trojan/virus that's causing the problem,
and it has nothing to do with Winamp directly.

The instructions for attaching a HJT log can be found via the FAQ
http://forums.winamp.com/showthread....d=161361#specs
DJ Egg is offline   Reply With Quote
Old 15th June 2008, 21:17   #13
victormvn
Junior Member
 
Join Date: Jun 2008
Posts: 14
my log

Here's my log , i hope someone will find something...
It's bad without winamp , i used it for ages
Attached Files
File Type: rar hijackthis.rar (1.9 KB, 652 views)
victormvn is offline   Reply With Quote
Old 15th June 2008, 23:16   #14
DJ Egg
Techorator
Winamp & Shoutcast Team
 
Join Date: Jun 2000
Posts: 35,824
Your malware items are:

F3 - REG:win.ini: run=

O20 - Winlogon Notify: wineil32 - C:\WINDOWS\SYSTEM32\wineil32.dll

Again, I'm not sure if you can easily remove O20 Winlogon items too easily with HijackThis, though you might be able to do it in Safe Mode.

However, I also suggest that you take it to one of those specialized security forums that I referred to in my first reply above...

wineil32.dll is a backdoor Rootkit/Haxdoor trojan
http://www.google.com/search?q=wineil32.dll
DJ Egg is offline   Reply With Quote
Old 16th June 2008, 01:04   #15
JackBauer05
Junior Member
 
Join Date: Jun 2008
Posts: 12
Thanks for the info DJ Egg! I'm going to try to remove this file. Or maybe I'll do an XP reinstall Thanks for help!
JackBauer05 is offline   Reply With Quote
Old 16th June 2008, 01:09   #16
Koopa
16-Bit Moderator
 
Koopa's Avatar
 
Join Date: Apr 2004
Posts: 4,341
Quote:
Ive made user profile ErROr... I have no idea why or how this ErROr.CP-55F156BD35C7 was created...
This happens, if you reinstall Windows without formatting the disk drive.

If there already is a user folder called "ErROr" it creates a new folder with a set of random numbers and letters, to make sure, that there isn't the same folder twice.
Koopa is offline   Reply With Quote
Old 16th June 2008, 16:52   #17
victormvn
Junior Member
 
Join Date: Jun 2008
Posts: 14
So there's no problem after all with winamp? It's just because of these infected files?
sibidigua did it work on you?
victormvn is offline   Reply With Quote
Old 16th June 2008, 17:45   #18
DJ Egg
Techorator
Winamp & Shoutcast Team
 
Join Date: Jun 2000
Posts: 35,824
Correct.

The trojan/virus affects key Windows drivers/processes that Winamp uses.
That's assuming it doesn't also infect the actual mp3 files as well...
DJ Egg is offline   Reply With Quote
Old 17th June 2008, 14:09   #19
JackBauer05
Junior Member
 
Join Date: Jun 2008
Posts: 12
Noooo I've reinstalled xp but i got the same problem Here's my new hijackthis log file.
Attached Files
File Type: txt hijackthis.txt (4.8 KB, 975 views)
JackBauer05 is offline   Reply With Quote
Old 17th June 2008, 17:02   #20
victormvn
Junior Member
 
Join Date: Jun 2008
Posts: 14
wineil32.dll

How am i supposed to delete C:\WINDOWS\SYSTEM32\wineil32.dll ???
Somebody help , i wanna make winamp work!!!!!!!
Where did the viruses come from anyway?
victormvn is offline   Reply With Quote
Old 17th June 2008, 18:09   #21
victormvn
Junior Member
 
Join Date: Jun 2008
Posts: 14
I removed wineil32.dll but i still have the problem...
Sorry , but i still believe it's not because of some infection,I guess it's winamp.
That explains why JackBauer05 still has the problem after windows reinstalation.
victormvn is offline   Reply With Quote
Old 17th June 2008, 18:34   #22
DJ Egg
Techorator
Winamp & Shoutcast Team
 
Join Date: Jun 2000
Posts: 35,824
If you're suggesting that it's some kind of Winamp bug, then sorry, but there's not a hope in hell's chance of us being able to reproduce the problem.

I told you to take the problem to one of those specialized security forums and post your HJT log there.
Simply reinstalling Windows might not fix it. You have to get rid of all infected files first.

Other than that, the only other thing that can cause such a problem is bad sound drivers (make sure you've got the latest drivers for your soundcard) and also make sure DirectX is up-to-date for your OS.

Is it always the same mp3's that play strangely, or is it a random thing?

Maybe if you posted a link to a sample file which exhibits the problem, I could tell you if the file is corrupt or not and/or if I can reproduce the problem? If you don't have your own webspace then upload it to any of stashbox.org, mediafire.com or sendspace.com and post the download link here (don't worry if it says 'url submitted by user' in your post, we can still see it).

The only relevant settings in Winamp would be:

Winamp -> Prefs -> Plugins -> Output -> DirectSound Output -> config:

Device tab:
Make sure your soundcard is selected as Output Device (via the drop-down menu)
'Allow hardware acceleration' should be checkmarked by default (for multi-speaker support, amongst other things), but try temporarily disabling it...

Buffering tab:
Buffer length = 2000ms
Prebuffer = 500ms
Buffer-ahead = 500ms
Enable cpu usage control = checkmarked

Winamp -> Prefs -> Plugins -> Input -> MPEG Audio Decoder -> config:

General tab:
Buffer = 128

Decoder tab:
Quality = Full
EQ = logarithmic
Fast Layer EQ's = unchecked

Winamp -> Prefs -> Playback

Playback tab:

If it's checked/unchecked, try doing the opposite for "Allow 24bit"

and that's about it really...
DJ Egg is offline   Reply With Quote
Old 17th June 2008, 18:45   #23
victormvn
Junior Member
 
Join Date: Jun 2008
Posts: 14
wierd thing

I downloaded some files today and they all work fine.
The old ones don't.
I have no idea what to understand of this...
victormvn is offline   Reply With Quote
Old 18th June 2008, 00:37   #24
JackBauer05
Junior Member
 
Join Date: Jun 2008
Posts: 12
Here's an mp3 which is sounds weird in Winamp http://www7.zippyshare.com/v/66861334/file.html (and other players example Quintessential Player)

And the strange thing is: if i try to play this in Windows Media Player 11, the playback stops after 9 seconds and opens a link (www.flashcodec.com) and try to download a file "windows_media_player_flash_codec" If i install this, norton alarms me that this is a virus.

So it's clear now , this is not a winamp problem, but i have no idea what can i do. One of my friend has the same problem too.

By the way, thanks for your answer again DJ Egg!
JackBauer05 is offline   Reply With Quote
Old 18th June 2008, 00:49   #25
Koopa
16-Bit Moderator
 
Koopa's Avatar
 
Join Date: Apr 2004
Posts: 4,341
Simply format your disk drive, probably most of your system already is infected.

Sure, this doesn't sound good, but sometimes you've no other choice.

Next time be careful, don't download any crap from the internet. Rip your original music cds, or buy music from a store, instead of downloading crap with file sharing clients.

Also just visit websites, where you can be sure, that they won't install any maleware.

Antivirus programs can be a help, but they cannot protect your system from you.
Koopa is offline   Reply With Quote
Old 18th June 2008, 00:58   #26
DJ Egg
Techorator
Winamp & Shoutcast Team
 
Join Date: Jun 2000
Posts: 35,824
Looks like the virus has infected/corrupted your mp3's.
That's what viruses do, sad to say... they infect/corrupt other files.
Your sample file plays badly in all players, and I very much doubt if you'll be able to fix them with anything :-(

And whatever you do, do NOT install that dodgy flash codec thing.
It's not a codec at all, and like Norton says, it is the actual virus.

In future, be very careful about downloading dodgy files via p2p/torrents or clicking links in emails/messenger.

Anyway, thanks for the confirmation that this is definitely not anything to do with Winamp. Sadly, I don't have any other suggestions, other than I still think you should post the original problem and HJT log on one of those specialized security forums that I linked to in my first reply.
DJ Egg is offline   Reply With Quote
Old 18th June 2008, 03:17   #27
thomasz
Junior Member
 
Join Date: May 2008
Posts: 13
i thinks you should solve that problem virut to mp3.I would contact with you.
thomasz is offline   Reply With Quote
Old 18th June 2008, 13:50   #28
Nharko
Junior Member
 
Join Date: Jun 2008
Posts: 6
Thanks for all replies..

However, all my mp3s play normally in WMP... Also ive discovered that you can fix it by converting corrupted mp3 to mp3 (or another format) again... But u will propably need to retag all mp3s again...

It works for me, anyways i know it isnt real solution, because it can happen again...

Again thanks everybody who tried to help and sorry for blaming winamp...
Nharko is offline   Reply With Quote
Old 18th June 2008, 16:56   #29
victormvn
Junior Member
 
Join Date: Jun 2008
Posts: 14
I confirm what Dj Egg said!
On another program the problem was still there, all files that didn't work on winamp did NOT work either in the new program.
So I must appologize to Dj Egg and Winamp for accusations.
The good news for me is that i had to format my hard disk a few months ago and i saved all my mp3's on dvds.
So all i must do now is delete the ones on the hard and copy them from the dvds.
I guess all who have the problem have only 2 things to do: 1. clean your sistem, remove all suspected files
2. delete all the infected files and download them back
Thanks for the support Dj Egg , i hope we all will continue to enjoy Winamp.
victormvn is offline   Reply With Quote
Old 19th June 2008, 02:44   #30
Nicktcy
Junior Member
 
Join Date: Jun 2008
Posts: 1
Hi Nharko,

May I know what program do you use? My msn is nicktcy@msn.com
Nicktcy is offline   Reply With Quote
Old 19th June 2008, 12:59   #31
JackBauer05
Junior Member
 
Join Date: Jun 2008
Posts: 12
Unfortunately this is not works for me to convert mp3 to mp3 (or anything else) But i can play my old mp3s in Winmediaplayer Classic and KMPlayer. So i don't have to delete my files, thank God. I'm gonna use Winamp for the new mp3's and KMPlayer for the old ones.

Thanks for all replies
JackBauer05 is offline   Reply With Quote
Old 19th June 2008, 13:30   #32
kzuse
Senior Member
 
kzuse's Avatar
 
Join Date: Oct 2005
Location: (D)
Posts: 480
Send a message via ICQ to kzuse Send a message via Skype™ to kzuse
Seems this virus infects MP3s in a manner so that Windows Media Player has some overrun an opens this "link" that was mentioned here. Maybe it wants to exploit some WMP security hole?

But that is only a guess after having read this thread, my Winamp plays all files correctly and I don't have any suspicios files on my system.
kzuse is offline   Reply With Quote
Old 30th June 2008, 13:27   #33
JackBauer05
Junior Member
 
Join Date: Jun 2008
Posts: 12
:D

Yeeeeeeees! Finally I found a solution for this I managed to clean my infected mp3s with a program. If you want this, go to this forum: http://www.forospyware.com/t176862.html It's spanish, but you'll find this: FS-MP3Fix.zip Dowload it, and your infected mp3s will be fixed.


Yeah, i can use Winamp again
JackBauer05 is offline   Reply With Quote
Old 1st July 2008, 13:53   #35
mikeswansea
Junior Member
 
Join Date: Jul 2008
Posts: 1
my hijackthis file

i used the same problem like jackbauer, reinstalled XP - still the mp3s didnt work, then used the FS-MP3FIX, now the mp3s work again, but i would be glad if one of you knows how to analyze the hijackthis files and tell me if there is any obvious malware infection in my computer

sony vaio
intel pentium M processor 1600MHZ
512 MB RAM
60 GB harddrive
windows XP SP3

thx in advance
mikeswansea is offline   Reply With Quote
Old 13th July 2008, 07:57   #36
stevevaix
Junior Member
 
Join Date: Jul 2008
Posts: 2
same problem here

plz help me.. here mu HJT log. hope u can help me out.. i want to fully enjoy win amp. thank u...
Attached Files
File Type: txt highjackthis5.txt (9.0 KB, 960 views)
stevevaix is offline   Reply With Quote
Old 13th July 2008, 14:04   #37
DJ Egg
Techorator
Winamp & Shoutcast Team
 
Join Date: Jun 2000
Posts: 35,824
@stevevaix

Hmm, I can't see any evidence of the same virus in your log.

Your Appinit_DLLs and Winlogon Notify items are for AVG and SUPERAntiSpyware, ie. safe entries.

There's a few items that I wasn't familiar with that I thought might be dodgy, but after researching them it seems as though they're safe (eg. the O4 - HKUS [msnsc] and [nlsf] entries, which seem to be for MSN and NLite on your other user profiles).

Have you maybe alreasy got rid of the virus before posting the log, but now just need to fix the mp3's? (see above)


@mikeswansea

You could try these two online analyzers:
www.hijackthis.de
http://www.help2go.com/component/detective/

But note that they're not always 100% accurate...
DJ Egg is offline   Reply With Quote
Old 13th July 2008, 18:41   #38
bjarnihk
Junior Member
 
Join Date: Jul 2008
Posts: 4
I share this strange problem

Hi guys, I'm new to this conversation. It seems that I share this strange problem with mp3 files and Winamp. Note that my Winamp still plays my WMA's and AVI's perfectly. My Windows Media Player can play/burn the mp3 files fine so I guess there i nothing wrong with the files. (I have not checked all of them though) Yahoo Music Jukebox can play the mp3 files but when it burnes an audio cd it sounds exactly like the Winamp problem, i.e some files skipped and some files sound all distorted and chopped up.
It's been very interesting to read through your conversation, I have today posted my log file to Tech Support Guy as DJ Egg sugested but I thought I'd also ask you DJ Egg to kindly take a quick look at my log file and check if you see something wrong there.
Thanks in advance and looking forward to your respond
Attached Files
File Type: txt hijackthis 13072008.txt (28.1 KB, 718 views)
bjarnihk is offline   Reply With Quote
Old 13th July 2008, 22:11   #39
DJ Egg
Techorator
Winamp & Shoutcast Team
 
Join Date: Jun 2000
Posts: 35,824
@bjarnihk

Yup, alas, you've got the same virus.

O20 - Winlogon Notify: IfxWlxEN - C:\WINDOWS\SYSTEM32\IfxWlxEN.dll
O20 - Winlogon Notify: igfxcui - igfxdev.dll (file missing)
O20 - Winlogon Notify: mlJYspOe - mlJYspOe.dll (file missing)

These are something different, but also bad entries:

O2 - BHO: (no name) - {B6E95516-27C0-443D-9BA9-ABD8C12BAE16} - C:\WINDOWS\system32\mlJYspOe.dll (file missing)
O4 - HKLM\..\Run: [] rundll32 ,sUuRun <-- what's this????

And I'm not sure about all those crawler.com entries either...
I think crawler is installed by SpywareTerminator, which I wouldn't personally recommend as a good antispyware app (such as: Ad-Aware, Spybot Search & Destroy, Windows Defender, Superantispyware, and that's about it)

Though yeah, if you've also posted your log at TSG forums, then they're supposed to be the experts, so it's probably best to see what instructions they give you...
DJ Egg is offline   Reply With Quote
Old 13th July 2008, 23:37   #40
bjarnihk
Junior Member
 
Join Date: Jul 2008
Posts: 4
Thank you DJ Egg, that was quick
I'm no computer expert so I need to ask, what do I do to fix the problem?
Should I delete IfxWlxEN.dll?
The two files missing, do I need to find them somewhere and put them in the location mentioned?
I ran the scan again and pressed the "Fix checked" button after checking the lines you suggested but Winamp still can't play mp3 files after reboot...
I have taken no action to the other three suggestions you made...
Attached Files
File Type: txt hijackthis 13072008 at 2235.txt (27.9 KB, 674 views)
bjarnihk is offline   Reply With Quote
Reply
Go Back   Winamp & Shoutcast Forums > Winamp > Winamp Technical Support

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump