Programs non responsive

[lilia_sergei]

Sorry its taken me a while to get back to you, had some internet connection problems, thankfully unconnected to all of this.

I was prompted by Window Live Messenger to download the update and went to the Java site and downloaded from there, it was quite a bit before any of this started. (all it was about was to make the ''winks'' work) I think I've managed to do the WinPFind stuff fine, it took me a few tries to complete it but it seems to have come out fine. I'm going to do the Task Manager stuff sometime this morning when I'm not likely to get interupted.

Thanks
Sergei

[jholland1964]

Hello sergei,
I am waiting for PP to analyze that WPFind log, that absolutely is not my area of expertise!
In the meantime can you try this scan for me...at least see if you can get it to work Trial of Spysweeper
It won't remove but I believe you should be able to download and scan and save a log. If you can then let it scan and then save the log to the desktop. Post back here with that log.
Before you scan, if you have not Enabled Viewing of Hidden Files and Folders then please do so by
opening My Computer.
Then go to Tools, Folder Options, View Tab,
Under the Hidden files and folders heading select Show hidden files and folders.
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm.
Click OK.
After you do that THEN run that Spysweeper scan and save the log and post it here.
In the meantime I will see if I can get PP to look at that other log.
Judy

[jholland1964]

Hi sergi,
PP had a look at that WPFind log. He notes that there are some remnants of a Vx2 infection. Let's see if we can make sure it is all gone.
Not sure if you said you had AdAwareSE on the computer or not.
Download AdAwareSE from this link
http://www.lavasoft.de/products/ad-a...e_personal.php

and it's Vx2 Plug-in from this link;
http://www.lavasoft.de/support/secur...x2_cleaner.php

Install Ad-AwareSE using the default options, then install vx2cleaner_inst.exe, taking all the defaults there as well.

Run Ad-Aware, update to the latest definitions, then click on Add-ons in the lefthand column. Select VX2 Cleaner V2.0 and click Run Tool. Click "OK", then, if something is found, click "Clean" as in the directions given. Click "Close", and exit Ad-Aware.

Reboot your PC and run Ad-Aware again. This time, click on the Start button in Ad-Aware, select "Perform smart system scan" and click Next. Once the scan finishes, click "Next" again. Select all objects found (right click anywhere in the list of found objects and click "Select All Objects"). Click "Next" one more time, then "OK" to confirm the removal.

You will be prompted to set Ad-Aware to run on reboot, click "OK". Exit Ad-Aware and restart your PC once again.

Next you will need to go to this website;
http://virusscan.jotti.org/
Right at the very top of that opening page you will see a place to upload a file for scanning.
In the box there type the following ;
C:\WINDOWS\system32\wdaservc.dll () and then click the Browse button. The file will be uploaded there and scanned by multiple programs for viruses. This can take awhile because multiple programs are used. Even if it seems unresponsive please let it run.
Come back here with the results of both of these actions.
Judy

[lilia_sergei]

I already have the Ad-Aware SE downloaded on my computer and the Plug-in, I shall scan with the Plug-in this time. I also did those Task Manager things that were suggested by you and none of them made a difference. Nothing changed.

Thank You
Sergei

[lilia_sergei]

Next you will need to go to this website;
http://virusscan.jotti.org/
Right at the very top of that opening page you will see a place to upload a file for scanning.
In the box there type the following ;
C:\WINDOWS\system32\wdaservc.dll () and then click the Browse button. The file will be uploaded there and scanned by multiple programs for viruses. This can take awhile because multiple programs are used. Even if it seems unresponsive please let it run.
Come back here with the results of both of these actions.
Judy

Did you mean Submit and not browse? When I click browse the choose file box comes up for system 32 with that file in the File Name box so I pressed open assuming that was what to do next and all it said was file cannot be found, so was I supposed to click SUBMIT and not browse?

Sergei

[PhilliePhan]

Did you mean Submit and not browse? When I click browse the choose file box comes up for system 32 with that file in the File Name box so I pressed open assuming that was what to do next and all it said was file cannot be found, so was I supposed to click SUBMIT and not browse?

-- Can you navigate to C:\WINDOWS\system32\wdaservc.dll manually with Windows Explorer and see if it indeed exists? It may have already been removed by one of the Anti-spy apps. I think it was part of VX2 infection, but I'm not positive, hence the Jotti scan.

-- Also, navigate to C:\WINDOWS\SYSTEM32\drivers\etc\hosts.bak and open it with Notepad and tell us what it says. This may well be legitimate (if unneeded).

I am not sure any remaining issues are malware-related......

Best Luck
PP