Wes
Currently using WMP10 - started with 8, then 9. Never had 11 (wary of beta).
The prefetched entries seem to relate to each of these three versions.
It seems as though all three versions are accessed and the latest one is
that executed.
I say this because the three "Registered Packages" entries are also for
v8( the 8F14 you have), 9 (the backup one) and 10 (the 1823 one you do not
have). Also the last accessed dates for all three are current.
FWIW - Think I have a full OEM CD - cos I slipstreamed it with XP2 - and
(think) copied files to I386) for ease of updates. i.e. don't have to put XP
CD in drive. Make sense?
SP2 contains WMP9 - 10 was a more recent upgrade.
The only problem that showed up in my safe mode diagnostics this morning was
that invasive cookie from real.com. I think (repeat think) I have deleted
everything to do with realplayer. Trouble is it doesn't show up in
add/remove programs.
Back to my OP - the multiple instances are showing in Widows Task Manager
under "Processes" not under "Applications". This still occurring when I Exit
WMP, then run another clip. If I close the file and open another it does not
occur. What is the difference between WMP Application and WMP Process?
From my testing these multiple processes seem to make the shutdown hang.
Haven't had another instance of the Event Viewer - might try later to play
each of the clips I used when this happened over the weekend.
I've had a look in the WMP ng but can't see any references.
Thanks again for your assistance.
Bill
: Bill,
:
: My...
: C:\Program Files\Windows Media Player\wmplayer.exe is version 9.0.0.2980
:
: The ones in Prefetch would normally be an ignore, but the fact that you
have
: three means that three *different* wmplayer.exe files have started at
least
: once on your machine.
:
: How old are those wmplayer.exe.pf files? The Created date and the
Modified
: date?
:
: Are you using WMP 8, 9 ,10 or 11?
:
: Do you have WMP 11? It's beta, that might be the problem.
:
: C:\WINDOWS\RegisteredPackages\{B3C1B200-8F14-4C49-96D3-67425AD59914}\
: wmplayer.exe version 8.0.0.4490 Looks like WMP 8. If I remember right 8
: comes with XP.
:
: I do not have...
: C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\ is
: apparently WMP 10
:
: You probably do not have this folder because XP was pre-installed on your
: machine and you did not get a real XP CD, just a restore CD.
: C:\WINDOWS\system32\dllcache
:
: This folder probably exists because you installed SP2.
: C:\WINDOWS\ServicePackFiles\i386
:
: I do not remember if SP2 includes WMP 10 or what. I do not have SP2.
:
: The one in $backup$ is probably the same as the one in
: C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}
:
: --
: Hope this helps. Let us know.
:
: Wes
: MS-MVP Windows Shell/User
:
: In : Oziebill <
[email protected]> hunted and pecked:
: > Thanks to all - I have a few extra instances of wmplayer,exe - do any
look
: > suspicious?
: >
: > I've run the User Profile Hive Cleanup Service - wmplayer still remains
as
: > an active process, and shutdown takes some seconds longer. Have not been
: > able to replicate the Media Event message.
: >
: > Intend running AV etc in Safe mode shortly.
: >
: > Bill
: >
: >
: >
: >
: >
: > : >> A Google search for Windows Media Event Viewer brings up nothing. That
: >> is suspicious.
: >>
: >> wmplayer.exe is normally the Windows Media Player located here...
: >> C:\Program Files\Windows Media Player
: >> and
: >> C:\WINDOWS\system32\dllcache
: >>
: >> There may also be one here...
: >> C:\WINDOWS\RegisteredPackages\{B3C1B200-8F14-4C49-96D3-67425AD59914}
: >>
: >> There are also trojans named wmplayer.exe
: >>
: >> Update your antivirus software and run a full system scan.
: >>
: >> Update whatever anti-spyware applications that you have and run a full
: >> system scan with each one.
: >>
: >> You might want to start in Safe Mode to run your antivirus and
: >> anti-spyware software.
: >>
: >> Running a full system antivirus scan or anti-spyware scan in Safe Mode
: >> can be a good idea. Some viruses and other malware like to conceal
: >> themselves in areas Windows protects while using them. Safe mode will
: >> prevent those applications access and therefore unprotect the viruses
or
: >> other malware allowing for easier removal.
: >>
: >> How to start Windows in Safe Mode Windows XP
: >>
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
: >>
: >> --
: >> Hope this helps. Let us know.
: >>
: >> Wes
: >> MS-MVP Windows Shell/User
: >>
: >> In : >> Oziebill <
[email protected]> hunted and pecked:
: >>> XP SP2 fully patched:
: >>>
: >>> Last few days start/turnoff/turnoff or restart just hangs. If I repeat
: >>> then turnsoff or restarts.
: >>> Not sure if related, but wmplayer.exe shows as a process after it has
: >>> been terminated normally. Also, sometimes I get message that Windows
: >>> Media Event Viewer needs to close.
: >>>
: >>> Windows Defender, AVG, Spybot and Adaware run daily without any
problems
: >>> showing.
: >>>
: >>>
: >>> Help appreciated.
: >>>
: >>> Bill
:
