A debugger has been found running in your system.

[Andy542]

Hi,

I keep getting the message below in my laptop. I'm running Windows XP Pro.

C:\\WINNT\System32\WinSCard.dll
A debugger has been found running in your system. Please, unload it from memory and restart your program.

Can anyone kindly help me in sorting it out?

Never underestimate the power of human stupidity

 

[BadBigBen]

1. When are you getting the message? every so often or at startup?

2. what software was installed lately?

3. what AV are you using?

4. are the drivers up to date?


General info:

the above message usually comes up, when a program tries to access memory, while e.g. a Debugger / AntiVirus / driver / etc. are accessing the same memory space...

see:
Games: Error Message: A Debugger Has Been Detected: Unload the Debugger and Try Again

http://support.microsoft.com/kb/812759

Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"

 

[Andy542]

I'm getting the message at startup and thereafter a number of times. I'm able to log in to the laptop but cannot see my desktop (unless I log in using safe mode).

This is a users laptop and he is denying installing anything though I'm sure he did install something. He downloaded a file with the name - MX_KEY - the day the laptop started having this error.

I use Symantec Endpoint Protection.

The drivers are up to date.

Never underestimate the power of human stupidity

 

[strongm]

>MX_KEY

There is a product called MobileEx which can be used to unlock mobile phones (legitimately -although your service provider may try and argue the toss).

However, it costs money and carries protection, part iof which uses winscard.dll.

There are cracked versions (illegal), that bypass the protection. In some cases the crack used replaces winscard.dll with an alternative version, and sometimes that alternative version casues the problem you are seeing.

You need to replace it with an original version, and remove any illegal software from user's machine. Even if they installed, used, and then uninstalled it leaves the dodgy winscard in place, I believe

 

[goombawaho]

You must berate the user for messing around with a work computer.

OR

You must give the user a noogie** if the user is using any cracked software on a work computer. That's a big problem should you ever get audited.

** (Tek Tips does not endorse the mistreatment of employees unless they really deserve it.)

 

[cmeagan656]

If you have the laptop locked down it's possible that the user attempted to install the rogue software and it didn't fully install.

If you have system restore enabled, you could try a system restore to a point before the problem started.

Hope this helps.

Please help us help you. Read Tek-Tips posting polices before posting.
Canadian members check out Tek-Tips in Canada for socializing, networking, and anything non-technical.

 

[BadBigBen]

Boot into safemode...

then check the AUTOSTART programss and services... see what progs are starting at logon...

disable one after another... CCleaner is nice for this, as it allows you to disable (or delete) startup items...



Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"

 

[2ffat]

You can also run Hijack This from Trend Micro. If you can't figure out the output you can try posting it at Hijack This De Security or forum760.

James P. Cottingham
[sup]I'm number 1,229!
I'm number 1,229![/sup]

 

[goombawaho]

Someone explain to me how people have the nerve to mess around with their work computers (porn, software installs, social media sites, online shopping, etc).

 

[G0AOZ]

Someone explain to me how people have the nerve to mess around with their work computers... Probably boredom, or maybe lack of managerial authority over how they should be using their workplace 'tools'.

ROGER - G0AOZ.

 

[Turkbear]

Hi,
That is also a failure of IT management - if users are only given limited rights on their PCs and a good proxy server filters all external internet access, the ability to screw up a company PC is limited. ( In my former company, we also removed floppy drives )





To Paraphrase:"The Help you get is proportional to the Help you give.."

 

[goombawaho]

Amen - G0AOZ & Turkbear.