Re: End Program - sw error

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



John,

I missed the real deal. I thought that sw was your shorthand for software.

Open Task Manager and see if sw.exe is running. Ctrl + Shift + Esc
Do a Search on your machine for sw.exe.
Do a Search on your machine for the other SilentSpy files mentioned below.

<quote>
SW.exe - Useless
sw.exe
Spyware.SilentSpy
It is a software program that monitors all the actions on local and
networked computers.

Adds the value: "SSConfig" = "SW.exe"
to the registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

Adds the subkey: "SW"
to the registry keys:
HKEY_LOCAL_MACHINE\Software
HKEY_LOCAL_MACHINE\CurrentControlSet\Enum

Adds the value: "0" =
"SW\{B7EAFDC0-A680-11D0-96d8-00AA0051E51D}\{9B365890-165F-11D0-A195-0020AFD1
56E4}"
to the registry key:
HKEY_LOCAL_MACHINE\CurrentControlSet\Services\kmixer\Enum

Creates the following files:
C:\Silent-Spy.cnt
C:\Silent-Spy.hlp
C:\Wlp.sys
C:\Wlg.sys
C:\SW.htm
Creates the folder C:\SSS, which stores screenshots that the spyware
captures.

Captures and logs the following items:
- Every window that you open and interacted with.
- All of the Web site titles and addresses that you visit.
- All the keystrokes and windows in which the keystrokes were entered.
- Periodic screen shots.
<quote>
http://www.greatis.com/appdata/u/s/sw.exe.htm

Also
http://www.symantec.com/smb/security_response/writeup.jsp?docid=2004-061111-5712-99&tabid=2

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:OoW90WvDHHA.4112@xxxxxxxxxxxxxxxxxxxx,
John <Ladiepaw@xxxxxxxxxxx> hunted and pecked:
Unfortunately I do not recognize the sw program that is being identified
in the End Program pop up window. This pop up occurs after I
receive the DWWIN error message which states that "dwwin.exe dll failed
to initialize error when shuting down".
I have looked in the startup tab after running msconfig but have nothing
running associated with any application named sw. I have also run
malware and anti-virus software and have nothing being reported. I have
read that the sw reference may be associated with the Acrobat (i.e
reader) or shockwave application.

I have also tried the suggestion below, but still receive the popup on
an intermittent bbasis.

Not sure if there is anything you can suggest.



Wesley Vogel wrote:
Close the program before shutting down.

Get rid of whatever malware that you have on your machine.

Try this...
http://www.kellys-korner-xp.com/xp_tweaks.htm

Read the instructions at the top.
76. Right hand side
Auto End Tasks to Enable a Proper Shutdown

shutdown.reg is the file you want.

Reboot after you have merged the shutdown.reg file.

shutdown.reg does the following:

* Sets ClearPageFileAtShutdown to 0.
If ClearPageFileAtShutdown is set to 1, shutdown takes a *long* time.

* Sets AutoEndTasks to 1.
Processes end automatically. The system does *NOT* wait until the
process ends, and, the process will *NOT* take more time than the value
of the HungAppTimeout entry, the End Task dialog box does *NOT* appear,
stating that the application cannot respond to the End Task request.

* Sets WaitToKillServiceTimeout to 1000 (1 second).
Determines how long the system waits for services to stop after notifying
the service that the system is shutting down. The Default value is 20000
(20 seconds).

.



Relevant Pages

  • Re: Windows Explorer Folder resize problem (WindowsXP-SP2)
    ... There are two distinct/different Shell Registry keys - ... Did you apply the Bag MRU size increase to the ShellNoRoam as well? ... The resizing is only saved if I resize the root window *My Computer*. ... to increase the "Bag MRU size" registry key value to something higher ...
    (microsoft.public.windowsxp.general)
  • Re: Adding My Music to the classic start menu
    ... Have any idea what registry key might control ... Click on the startup tab and then, in the startup tab window, click ... Click on the option marked 'display as a menu' then ... The information in this mail/post is supplied "as is". ...
    (microsoft.public.windowsxp.customize)
  • Re: Error 1402 - whats causing this???
    ... Bitte in den Newsgroup antworten damit jeder etwas davon hat. ... I get a window as if a installation is trying to happen ... Setup cannot open the registry key. ...
    (microsoft.public.outlook.general)
  • Re: Cant solve C00D11F8 problem
    ... Under the registry key ... See http://www.nwlink.com/~zachd/pss/pss.html for some helpful WMP info. ... > window, when I doubleclick on Properties for the drive, nothing happens. ... > On the "fix" page you suggest, I tried the fix to restore ASPI files. ...
    (microsoft.public.windowsmedia.player)
  • Re: Task Manager view (Display shown)
    ... above the tabs. ... For some reason when I open Task Manager all I get in ... the window is a list of processes....nothing else. ...
    (microsoft.public.windowsxp.general)