1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Removed VX2 - Now PC is SLOW

Discussion in 'Malware and Virus Removal Archive' started by Crikerz, 2006/03/26.

  1. 2006/03/26
    Crikerz

    Crikerz Inactive Thread Starter

    Joined:
    2004/12/08
    Messages:
    41
    Likes Received:
    0
    Hey all,
    I got my self a new problem :(

    It all started with VX2. I have no idea how i got this, but i did. It affected my internet explorer, making it crash whenever someone tried to open it. This was not a problem for me as i use Firefox, but my Dad can only use IE. So i went about researching how to get rid of VX2.

    Took me ages to find a cure, tried loads of different things. But anyway, after some playing i found a site telling me to remove a list of files. I searched for the files, but only one came up, in severall locations. I deleted the file from all places i could find it using Killbox, choosing to un-register the dll first. Here are the files i deleted:
    Pocket Killbox version 2.0.0.648
    Running on Windows XP as Rich(Administrator)
    was started @ Saturday, March 25, 2006, 9:03 PM

    # 1 [Delete on Reboot]
    Path = C:\WINDOWS\system32\dhcpsapi.dll

    # 2 [Delete on Reboot]
    Path = C:\WINDOWS\system32\psapi.dll

    # 3 [Delete on Reboot]
    Path = C:\WINDOWS\system32\dllcache\dchpasapi.dll

    # 4 [Delete on Reboot]
    Path = C:\WINDOWS\system32\dllcache\psapi.dll

    # 5 [Delete on Reboot]
    Path = C:\program files\macromedia\dreamweaver\PSAPI.DLL

    # 6 [Delete on Reboot]
    Path = c:\program files\autoit3\psapi.dll

    # 7 [Delete on Reboot]
    Path = C:\ATI\SUPPORT\wxp-w2k-catalyst-8-071-041026a-018719c\psapi.dll

    # 8 [Delete on Reboot]
    Path = C:\ATI\SUPPORT\5-10_xp-2k_dd_cp_wdm_27256\psapi.dll

    # 9 [Delete on Reboot]
    Path = C:\VB\Visual Basic 6\Common\TOOLS\PSAPI.DLL

    I Rebooted @ 9:05:53 PM
    Killbox Closed(Exit) @ 9:05:55 PM

    This seemed to solve my problem, and i soon had IE running again fine.

    The problem is that now i have removed all of these files and got rid of VX2 (it doesnt show up in ad-aware) my computer seems to be running really slow.

    I dont know why, but whenever i leave the computer for a period of time it seems to get worse, taking longer to open applications or ever browsers. Also i often play World of Warcraft. Before i had no trouble. Now my WoW seems to crash whenever a large chunk of the game needs to be loaded.

    This is really annoying, and i have no idea why. Anyone got any suggestions.

    Thanks in advance.

    Crikerz
     
  2. 2006/03/27
    markp62

    markp62 Geek Member Alumni

    Joined:
    2002/05/01
    Messages:
    4,012
    Likes Received:
    16
    Some of those files you deleted are legitimate system files, except for these. I believe only the first one was bad.

    c:\program files\autoit3\psapi.dll
    C:\ATI\SUPPORT\wxp-w2k-catalyst-8-071-041026a-018719c\psapi.dll
    C:\ATI\SUPPORT\5-10_xp-2k_dd_cp_wdm_27256\psapi.dll
    C:\VB\Visual Basic 6\Common\TOOLS\PSAPI.DLL
    C:\program files\macromedia\dreamweaver\PSAPI.DLL

    Perhaps you should run the System File checker. Go to Start\Run, type in SFC /SCANNOW, and press Enter. Have your XP CD handy, as you will be prompted for it.
     

  3. to hide this advert.

  4. 2006/03/27
    Crikerz

    Crikerz Inactive Thread Starter

    Joined:
    2004/12/08
    Messages:
    41
    Likes Received:
    0
    hmm. I kinda thought that. I tried the SFC last night. It ran, the window with a progress bar came up. But it never prompted me for anything and closed when it got to the end of the progress bar. Should this happen?

    I will do a search for psapi.dll tonight when i get home and post what i find.

    If i cannot find this file then how will i replace it? Is there a way?
     
  5. 2006/03/27
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    System File checker exits on completion with no closing dialogue. To see which files, if any were replaced look in Event Viewer (Right click on My Computer > Manage > Event Viewer > System. You should see two entries - SFC start and SFC finish - any events inbetween these two may refer to files which were replaced - see screenshot.
     
  6. 2006/03/28
    Crikerz

    Crikerz Inactive Thread Starter

    Joined:
    2004/12/08
    Messages:
    41
    Likes Received:
    0
    ok, ive found the SFC in the event viewer. Heres wats logged:

    Windows File Protection scan found that the system file c:\windows\system32\devenum.dll has a bad signature. This file was restored to the original version to maintain system stability. The file version of the system file is 6.5.1.902.

    The protected system file c:\windows\system32\devenum.dll could not be restored to its original, valid version. The file version of the bad file is 6.5.1.902 The specific error code is 0x800b0100 [No signature was present in the subject.
    ].

    Windows File Protection scan found that the system file c:\windows\system32\psapi.dll has a bad signature. This file was restored to the original version to maintain system stability. The file version of the system file is 4.0.1371.1.

    Windows File Protection scan found that the system file c:\windows\system32\psapi.dll has a bad signature. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.1106.

    Thanks for the advice on the SFC

    Update: Ive just read about what devenum.dll does, and i think it is meant to be that way. This is because i am using a midi keyboard emulator that turns my PC keyboard into a keyboard.
     
    Last edited: 2006/03/28
  7. 2006/03/29
    Crikerz

    Crikerz Inactive Thread Starter

    Joined:
    2004/12/08
    Messages:
    41
    Likes Received:
    0
    Hmm, ive defraged my PC, and things seem to be running alot faster. Back to normal even. I think i will leave it as it is. Thanks for all the advice.

    Cheers.

    Crikerz
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.