Programs non responsive

[PhilliePhan]

Did you mean Submit and not browse? When I click browse the choose file box comes up for system 32 with that file in the File Name box so I pressed open assuming that was what to do next and all it said was file cannot be found, so was I supposed to click SUBMIT and not browse?

-- Can you navigate to C:\WINDOWS\system32\wdaservc.dll manually with Windows Explorer and see if it indeed exists? It may have already been removed by one of the Anti-spy apps. I think it was part of VX2 infection, but I'm not positive, hence the Jotti scan.

-- Also, navigate to C:\WINDOWS\SYSTEM32\drivers\etc\hosts.bak and open it with Notepad and tell us what it says. This may well be legitimate (if unneeded).

I am not sure any remaining issues are malware-related......

Best Luck
PP

[lilia_sergei]

PP

I looked for the C:\WINDOWS\system32\wdaservc.dll extensively and could not find it anywhere, also performed searches for it and couldn't find it that way either. Is it no longer worthwhile to do the Jotti scan, or should I do it just incase?

I found the C:\WINDOWS\SYSTEM32\drivers\etc\hosts.bak and have attached all I found when opened in notepad.

Thank You
Sergei

[jholland1964]

Can I ask you sergi, had you done any previous cleaning with...? before you began experiencing all these "Programs non responsive" problems?
If you had, what did you use? Or had somebody else done some cleaning?

[PhilliePhan]

I found the C:\WINDOWS\SYSTEM32\drivers\etc\hosts.bak and have attached all I found when opened in notepad.

This is as I suspected . . . . It looks like an anti-spy app has modified your Hosts file to block access to these bad sites (similar to what the MVP's Hosts File does - see Silj's Sticky at the top of the Forum).

I imagine your actual Hosts file looks the same as this backup. Essentially, what it does is reroute querys for those listed bad websites back to your Local Machine (127.0.0.1 ) thereby denying access. No worries there if you want to keep it like this. Again, have a look at Silj's links if you want to pursue this in more depth.....

-- As for the other file, I suspect it has been removed by one of the scanners you ran, so no worries there. There are a couple other VX2 related baddies in the PFind - I notified Judy, but I suspect they have since been removed as well...

PP

[lilia_sergei]

Can I ask you sergi, had you done any previous cleaning with...? before you began experiencing all these "Programs non responsive" problems?
If you had, what did you use? Or had somebody else done some cleaning?

Do you mean anti-virus and disk cleanup type things, or other things? Or actually cleaning it, like cleaning out the fan and so on?

I don't know if this is really anything mention, but the slight problems I was having with my messengers (MSN, YIM) have gone now. Both have worked fine on the few occassion I have used them lately, things still have the unresponsiveness issue, but I have noticed when I use the internet that takes longer for internet related activitues to become unresponsive than when I open things like My Computer and so on.

Thanks PP, right now I'll probaly leave things as they are as it doesn't seem to be anything dangerous, but later on I shall look into it all and find out about it.

Thank You
Sergei

[jholland1964]

Here's a good suggestion from PP, as usual. Download and install Process Explorer
have it running as you Task Manager and when the stoppage hits, you might be able to use it to pinpoint the error...or the program that is actually causing all these problems. Try it and let us know.
Judy

[lilia_sergei]

Hi again,

I just wanted to drop by to give you guys here who have helped me the latest information on whats happened, slowly things got worse and got to the point where the computer was unable to properly load as there was vital start up processes missing. In the end we took the laptop to a professional, and she said from first glance at it all it seemed something had been slowly attacking the processes, and stopping them from working, and in many cases deleting them. The lady explained that it seemed to have gotten to the stage where almost all of the programs and processes had been rendered useless, amongst other things. She's going to look into it further and hopefully take care of it all for us, also everything is probably going to have to be reinstalled. When I get it back I'll be happy to tell you what had happened if anyone is interested.

I'd just like to say thank you to PP and Judy for all of your help, I really appreciated.

Thank You very much
Sergei

[PhilliePhan]

We are happy to try to help

Of course we would be interested in how things work out!

BTW - It looked to me that you had already tried to clean/cleaned a VX2 infection.
In the WinPfind log, there is this reference to the Lavasoft VX2 Cleaner tool:

22/08/2005 13:41:34 910336 C:\vx2cleaner.dll ()

I realized it was dated at about the time when there were a lot of these types of infections going around last year and figured that all that remained were remnants . . . Maybe I was mistaken?

Hope you have a nice holiday season!
PP

[jholland1964]

Gee Wish we could have been more help We definitely will be interested in hearing exactly what the problem was and it will help us to help others in the future.
Judy

[lilia_sergei]

You were a great help. So far were still not certain what the main problem was, almost everything all the programs have been messed with by something, something has been totally deleted only leaving the folder and some dodgy files behind. The only thing we know for certain was it was hidden/imbedded within my Norton so when the Norton was uninstalled all hell broke lose.