Solved

iexplore.exe crashes when closing window (Alt-F4), wsaupdater.exe

Posted on 2004-08-29
6
461 Views
Last Modified: 2008-01-09
When surfing the web or mostly when closing an iexplore.exe window, computer becomes irresponsive. Impossible to move from window to window by alt-tabbing and task manager doesn't even pull up when pressing CTRL-ALT-DEL!!!

Eventually an End Program window (program not responding) appears.

The first irresponsive program that shows up is PPMem_Systray and the second one is ppct_st which happen to be the PestPatrol's MemCheck or CookiePatrol's TSRs.

Have to wait for every single irresponsive program windows to pop up and then click close to terminate the process. Other option would be to pull off the power cord but I try to only use this option as a last resort.

CURRENT TROUBLESHOOTING:
Temporarily disabled both PestPatrol TSR's to see if caused by it or not.
Scanned for Virus and spyware/adware with most recent updates using PestPatrol and NortonSystemWorks 2004.

Only Spyware or virus found is the wsaupdater.exe which when deleted will prevent my computer from signing on to any WinXP profile (immediate logon/logoff issue) but I don't think this is the reason though because it's been doing that for a long time now.

The wsaupdater.exe problem (described in detail in other messages within this site) was first detected after installing the famous Ada-Ware program.

PestPatrol right away detected this application as spyware! Go figure… It's supposed to FIGHT Spy/AdWare...

I'm running XP Home SP1 still (waiting for a better release of SP2 before I download it) and my iexplore.exe is version 6.0.2800....


Thanks for your help guys. You are awsome.


Pete.
0
Comment
Question by:pmarchessault
  • 3
  • 2
6 Comments
 
LVL 2

Expert Comment

by:cheritonit
ID: 11927188
Could you please download HijackThis from http://www.spychecker.com/program/hijackthis.html and post the report file?  Save the log file, then open in notepad and copy and paste into this window.

0
 
LVL 32

Expert Comment

by:Luc Franken
ID: 11927201
Hi pmarchessault,

First of all, please take a look at the general ad/spyware page at EE: http:Q_20975384.html

As you've allready tried ad-aware (I assume you fully updated it and have done a full system scan)
Try Hijackthis, download it into a folder of it's own, not on the desktop or any temporary folder (something like c:\hjt\hijackthis.exe) will do fine.
Close all browser windows, then, run the program, accept the first warning (make sure to read it!!) then click "scan" and "save log"
Post the entire contents of the logfile here, and we'll take a look at it.

Greetings,

LucF
0
 
LVL 32

Expert Comment

by:Luc Franken
ID: 11927203
Hmm... pretty slow today it seems :) sorry cheritonit.
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 
LVL 2

Expert Comment

by:cheritonit
ID: 11927215
great minds....., LucF ;)
0
 
LVL 2

Accepted Solution

by:
cheritonit earned 50 total points
ID: 11928280
I think there are several things called wsaupdater.exe .... tread with caution!

Read this:

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_BLAZEFIND.A

check to see whether it is possible you have that trojan, or if it is the genuine thing.
0
 

Author Comment

by:pmarchessault
ID: 11939029
Thank you so much cheritonit!

In accordance with the instructions, I didn't have %program files%\windowssa\omniscient.exe or the windowssa folder on my computer but I know that at some point in time, I used to have it in.
I did however change the registry key value from wsaupdater.exe to userinit.exe and rebooted.

I scanned again with PestPatrol and it still told me that wsaupdater.exe was a worm so I deleted it but this time, when I rebooted it worked just fine (having taken care of the registry key ahead of time). So I took the liberty to delete the file. Hopefully it was okay to do.

I'm still wondering if wsaupdater was originally a WinXP executable or not.
Everything seems to work fine without it anyway so...

Thank you so much for your great help again.


Pete.
0

Featured Post

Live: Real-Time Solutions, Start Here

Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
User laptop information 6 143
Toshiba Satellite 5 155
Copy and Paste Windows 7 Files Not Working 6 98
Windows XP on Acer Aspire One 49 184
Can you find a fax from a vendor you saved a decade ago in seconds? Have you ever cursed your PC under your breath during an audit because you couldn’t find the requested statement or driver history?  If you answered no to the first question or yes …
It is only natural that we all want our PCs to be in good working order, improved system performance, so that is exactly how programs are advertised to entice. They say things like:            •      PC crashes? Get registry cleaner to repair it!    …
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question