slow pc, sound driver issues, wzcsvc.dll issues...

First symptom, my windows theme reverted from what I had set. Then my wireless would not let me see the wireless networks. (Something with the Wireless Zero Configuration). I am without internet access on that computer. Then sound was disabled completely. I ran Ad-Aware and found some data miners. McAfee found a few things but got stuck on wzcsvc.dll everytime I ran it, which explains the wireless issues. I tried downloading a new .dll file but it would not let me replace it because it was in use. I tried uninstalling and reinstalling the Sound Card drivers but still no sound was recognized. I'm really at a loss for what is happening. Below is my hijack this log, hopefully I did this right.

Logfile of HijackThis v1.99.1
Scan saved at 5:26:00 PM, on 4/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\mcshield.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Linksys Wireless-B Media Adapter\bin\XWPCApplicationLoaderService.exe
C:\Program Files\Linksys Wireless-B Media Adapter\bin\XWPCHostService.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\iRiver\iHP100\iHPDetect.exe
C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Chris\Desktop\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [PtiuPbmd] Rundll32.exe ptipbm.dll,SetWriteBack
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe "
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe "
O4 - HKLM\..\Run: [TCASUTIEXE] TCAUDIAG.exe -off
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe "
O4 - HKLM\..\Run: [iHP-100] C:\Program Files\iRiver\iHP100\iHPDetect.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://wdownload.weatherbug.com/minibug/tricklers/AWS/MiniBugTransporter.cab?
O16 - DPF: {31932A5C-9234-4377-A920-72E7DD340DB4} (Snapfish File Upload ActiveX Control) - http://www.snapfish.com/SnapfishUpload.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52...pple.com/mickey/us/win/QuickTimeInstaller.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1093652337671
O16 - DPF: {AF087E66-838E-4A97-8A0B-0DDDA5DEA239} (OTAutoInstall Class) - https://trials.endeavors.com/autodesk/acad2005/clientdownloads/OTAI.CAB
O21 - SSODL: Mulberry - {4A5372ED-9A7E-7EAB-B096-3383B0E007E0} - C:\PROGRA~1\Mulberry\Reference Guide.dll (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Digital Media Adapter Application Loader Service (XWPCApplicationLoaderService) - Linksys Corporation - C:\Program Files\Linksys Wireless-B Media Adapter\bin\XWPCApplicationLoaderService.exe
O23 - Service: Digital Media Adapter Host Service (XWPCHostService) - Linksys Corporation - C:\Program Files\Linksys Wireless-B Media Adapter\bin\XWPCHostService.exe

 

Suggest you do a search for wzcsvc.dll, right-click on it and select properties, look through the version information. I suspect it may be a Linksys file.

Uninstall the Linksys programs in Control Panel -> Add/Remove Programs. Does the problem stop? If not you may have to uninstall the drivers for the Linksys hardware in Device Manager. Rerun the installation, but be careful to follow the instructions in the Linksys manual.

Matt
mmmm....hardware shuting down...maybe a resource conflict. Change the location of the PCI add-in cards in the PCI slots, this will also reinstall the drivers.
and BTW, welcome to the BBS

 

tried that

the wzcsvc.dll is a microsoft file, not linksys but I uninstalled the linksys programs as well as the wireless card (which is an ASUS card) and uninstalled all those related drivers to no avail.
I tried uninstalling and reinstalling all the audio drivers (it is an integral audio on my ASUS motherboard by SoundMAX). Within the control panel it says the drivers are working right, but then when looking at audio devices it says that there is no audio device for sound playback or sound recording and doesn't give me any options to change this. This has remained even after reinstalling everything sound related.
I'm wondering if there can be some sort of virus or trojan that keeps recreating itself but I'm really not sure.
The slowness of everything continues, it takes 10 minutes to boot up and sometimes won't respond to mouse-clicks for several minutes.
Any suggestions of possible actions. I have a couple hard drives so I'm tempted to back everything up to my auxiliary drive, reformat c:\ and reinstall windows because I'm clueless on what could cause such strange variety of problems like this...

 

cmorgan11, if you are comfortable with prodding in your computer do the following:

1. Uninstall your wireless card & sound drivers.
2. Shut down. Open the case & take out the wireless card.
3. Switch on the computer, go to BIOS & disable your sound card.
4. Load windows - scan for antivirus/malware etc.
5. Restart the computer, go into BIOS & enable the sound card.
6. Reload the sound drivers & check if its ok or not.
7. If its ok, pop in your wireless card & install its drivers.

Maybe it helps.

 

You could restore that dll using System File Checker:
http://helpwithwindows.com/WindowsXP/howto-24.html

Matt

 

and tried that

I tried the windows updating of the .dll files and such as instructed on that webpage. It seemed to work fine. When I ran McAfee, however, it still gets stuck on the wzcsvc.dll as before and will not go past it.
I also went into my BIOS disabled the sound card, scanned (nothing new found), and reenabled it to no avail. When I reinstalled the sound card drivers from my motherboard CD (onboard audio, no separate card) I was still not able to get it to recognize any sound device. In fact it won't even let me open up the SoundMAX Control Panel as it would before. Additionally, on windows start up I got the message: "No AD1 codec driver is installed." I believe this is the driver that I supposedly had just installed.

 

Did you uninstall the drivers ?

 

You could try this:
Go to the soundcard manufacturer's website and find recent drivers for your model.
Boot into Safe Mode (start tapping the F8 key when you see the keyboard LED stay lit). Go to Control Panel -> Add/Remove Programs and uninstall any programs related to the soundcard. Go to Device Manager and uninstall the soundcard (if it is there).
When you reboot to normal Windows and the Hardware wizard asks for the drivers, click Cancel. Run the updated soundcard drivers installation program and reboot. If Hardware wizard asks to be directed to drivers, browse to the folder with the updated version.

Matt
Edit: if your subscription with McAfee is up to date you should ask them why the AV is getting stuck with that file. You will find the contact address at the McAfee website, probably under "Support ".