Solved

iexplore.exe crashes when closing window (Alt-F4), wsaupdater.exe

Posted on 2004-08-29
6
460 Views
Last Modified: 2008-01-09
When surfing the web or mostly when closing an iexplore.exe window, computer becomes irresponsive. Impossible to move from window to window by alt-tabbing and task manager doesn't even pull up when pressing CTRL-ALT-DEL!!!

Eventually an End Program window (program not responding) appears.

The first irresponsive program that shows up is PPMem_Systray and the second one is ppct_st which happen to be the PestPatrol's MemCheck or CookiePatrol's TSRs.

Have to wait for every single irresponsive program windows to pop up and then click close to terminate the process. Other option would be to pull off the power cord but I try to only use this option as a last resort.

CURRENT TROUBLESHOOTING:
Temporarily disabled both PestPatrol TSR's to see if caused by it or not.
Scanned for Virus and spyware/adware with most recent updates using PestPatrol and NortonSystemWorks 2004.

Only Spyware or virus found is the wsaupdater.exe which when deleted will prevent my computer from signing on to any WinXP profile (immediate logon/logoff issue) but I don't think this is the reason though because it's been doing that for a long time now.

The wsaupdater.exe problem (described in detail in other messages within this site) was first detected after installing the famous Ada-Ware program.

PestPatrol right away detected this application as spyware! Go figure… It's supposed to FIGHT Spy/AdWare...

I'm running XP Home SP1 still (waiting for a better release of SP2 before I download it) and my iexplore.exe is version 6.0.2800....


Thanks for your help guys. You are awsome.


Pete.
0
Comment
Question by:pmarchessault
  • 3
  • 2
6 Comments
 
LVL 2

Expert Comment

by:cheritonit
ID: 11927188
Could you please download HijackThis from http://www.spychecker.com/program/hijackthis.html and post the report file?  Save the log file, then open in notepad and copy and paste into this window.

0
 
LVL 32

Expert Comment

by:Luc Franken
ID: 11927201
Hi pmarchessault,

First of all, please take a look at the general ad/spyware page at EE: http:Q_20975384.html

As you've allready tried ad-aware (I assume you fully updated it and have done a full system scan)
Try Hijackthis, download it into a folder of it's own, not on the desktop or any temporary folder (something like c:\hjt\hijackthis.exe) will do fine.
Close all browser windows, then, run the program, accept the first warning (make sure to read it!!) then click "scan" and "save log"
Post the entire contents of the logfile here, and we'll take a look at it.

Greetings,

LucF
0
 
LVL 32

Expert Comment

by:Luc Franken
ID: 11927203
Hmm... pretty slow today it seems :) sorry cheritonit.
0
U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

 
LVL 2

Expert Comment

by:cheritonit
ID: 11927215
great minds....., LucF ;)
0
 
LVL 2

Accepted Solution

by:
cheritonit earned 50 total points
ID: 11928280
I think there are several things called wsaupdater.exe .... tread with caution!

Read this:

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_BLAZEFIND.A

check to see whether it is possible you have that trojan, or if it is the genuine thing.
0
 

Author Comment

by:pmarchessault
ID: 11939029
Thank you so much cheritonit!

In accordance with the instructions, I didn't have %program files%\windowssa\omniscient.exe or the windowssa folder on my computer but I know that at some point in time, I used to have it in.
I did however change the registry key value from wsaupdater.exe to userinit.exe and rebooted.

I scanned again with PestPatrol and it still told me that wsaupdater.exe was a worm so I deleted it but this time, when I rebooted it worked just fine (having taken care of the registry key ahead of time). So I took the liberty to delete the file. Hopefully it was okay to do.

I'm still wondering if wsaupdater was originally a WinXP executable or not.
Everything seems to work fine without it anyway so...

Thank you so much for your great help again.


Pete.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Issue: Unstable cursor in Windows XP and Windows runs extremely slow in that any click will bring up the Hour glass (sometimes for several seconds before giving you what you want) . Troubleshooting Process and the FINAL FIX: This issue see…
If you have done a reformat of your hard drive and proceeded to do a successful Windows XP installation, you may notice that a choice between two operating systems when you start up the machine. Here is how to get rid of this: Click Start Clic…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Learn how to create flexible layouts using relative units in CSS.  New relative units added in CSS3 include vw(viewports width), vh(viewports height), vmin(minimum of viewports height and width), and vmax (maximum of viewports height and width).

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now