"ending program: shelliconhiddenwindow"

Discussion in 'Malware Help (A Specialist Will Reply)' started by justyouraveragejoe, May 14, 2005.

  1. justyouraveragejoe

    justyouraveragejoe Private E-2

    Forgive me if I'm in the wrong forum with this one. When I shut down my computer i get a very brief message box that says "ending program: shelliconhiddenwindow". I don't see anything like this in my program files. I religiously update and run spywareblaster, adaware, spybot s&d, and crapcleaner. I've also done all the other prerequisits requested in the stickies.

    Since this started, my computer is extremely slow to startup (literally 5 minutes to get everything loaded up and the houglass to go away). My McAfee viruscan and security center seem to take the longest to load.

    Once my system is up, everything works o.k. and at an accepable speed considering I have a very basic desktop computer. Here's my specs:
    Dell Dimension 2400, MS Windows XP SP2, Intel Pentium 4 cpu 2.53GHz, 126MB RAM, Intel 82845G/GL/GE/PE/GV Graphics Controller.

    Thanks in advance to anyone who can help.
     
  2. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Not finding any info, sounds like a rare one, so we have to send you through the tutorial :(

    Please follow the steps below:

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus RemovalMake sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
  3. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Oops, might have something. Do you have Musicmatch Jukebox installed? If so, remove it from startup and see it goes away. Also, look for mimboot.exe and remove it from startup. That should fix you up :)
     
  4. justyouraveragejoe

    justyouraveragejoe Private E-2

    Yes I have musicmatch jukebox installed. Problem is I've never messed with startup and don't even know where it is. Can you help me out?
     
  5. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Sure, go to Start, run and type in msconfig. Click on the startup tab and there are all the programs running on startup. Remove anything with MusicMatch jukebox as well as mimboot.exe and reboot. Problem should be solved.
     
  6. justyouraveragejoe

    justyouraveragejoe Private E-2

    OK, thanks. I did what you said. Now , after i rebooted, i get this message:

    " System configuration utility
    you have used the system configuration utility to make changes to the way windows starts. The system config utility is currently in the diagnostic or selective startup mode, causing this message to be displayed and the utility to run every time windows starts. Choose the normal startup mode on the general tab to start windows normally and undo the changes you made using the system configuration utility." then there's a box saying " don't show this mesage again or launch system config utility when windows starts."

    Should I check the box or just click OK?
     
  7. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Either or :) You can just select ok, but it is easier to check the box that says do not show again.
     
  8. justyouraveragejoe

    justyouraveragejoe Private E-2

    Great! Startup is quicker now. Couple more questions if you don't mind:
    1. What was that "shelliconhiddenwindow" thing anyway? Spyware?
    2. Can you look at my latest HJT log to see if there's anything funky in there?
    Thanks for your time M.A.
     
  9. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    If you like you can attach a current HJT log to confirm your clean.

    http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

    http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

    http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

    http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

    http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting
     
  10. justyouraveragejoe

    justyouraveragejoe Private E-2

    Thanks. Attached is the HJT log. Where did that "shelliconhiddenwindow" come from? Is it spyware or what?
     

    Attached Files:

  11. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Your HJT log is clean!

    As far as that ending program message, its not Malware related, it belongs to MusicMatch Jukebox.

    Are you having any further problems?
     
  12. justyouraveragejoe

    justyouraveragejoe Private E-2

    Thanks BJ. Just one more thing.... (do I sound like Columbo?) Last couple of times when I ran Spybot S&D, I hit immunize. It said "all known bad products already blocked." That's terrific! But then in the part that says !Browser helper to block bad downloads NOT installed, there's a box to check that says"enable permanent blocking of bad addresses in internet explorer" IT WON'T LET ME CHECK THE BOX. Very frustrating as I have been able to do this in the past. Otherwise, all's well.
     
  13. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Personally, I dont use that but thats up to you.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds