waudit.exe problem

Viruses and worms
1

Hey there,

I would like to ask for some help with waudit.exe, probably the same problem as was posted here:

http://forum.avast.com/index.php?topic=130078.0

Im attaching logs, hope it helps :slight_smile:

2

adding last attachment

3

Ive notified essexboy he or someone else will help you with that. :slight_smile:

4

Hi you will need to reset your Chrome home page and search engine manually

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:Commands
[CREATERESTOREPOINT]

:OTL
SRV - [2013/09/02 13:00:36 | 000,807,800 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe -- (Application Updater)
IE - HKU\S-1-5-21-4146758488-3307850422-1328174519-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www2.delta-search.com/?babsrc=HP_ss&mntrId=008EC860003CED57&affID=119294&tsp=5005
IE - HKU\S-1-5-21-4146758488-3307850422-1328174519-1001\..\URLSearchHook: {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\7.6\iobitappsToolbarIE.dll (Spigot, Inc.)
IE - HKU\S-1-5-21-4146758488-3307850422-1328174519-1001\..\URLSearchHook: {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-4146758488-3307850422-1328174519-1001\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-4146758488-3307850422-1328174519-1001\..\SearchScopes,DefaultScope = {4BFB13B3-D36D-435B-93FB-ED61248E8B21}
IE - HKU\S-1-5-21-4146758488-3307850422-1328174519-1001\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=008EC860003CED57&affID=119294&tsp=5005
O2 - BHO: (IObit Apps Toolbar) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\7.6\iobitappsToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll (Delta-search.com)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (IObit Apps Toolbar) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\7.6\iobitappsToolbarIE.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (uTorrentControl_v2 Toolbar) - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll (Delta-search.com)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (uTorrentControl_v2 Toolbar) - {7473B6BD-4691-4744-A82B-7854EB3D70B6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll (Conduit Ltd.)
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (uTorrentControl_v2 Toolbar) - {7473B6BD-4691-4744-A82B-7854EB3D70B6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll (Conduit Ltd.)
O4 - HKU\S-1-5-21-4146758488-3307850422-1328174519-1001..\Run: [tsiVideo] C:\Windows\SysWOW64\rundll32.exe C:\Users\DVID~1\AppData\Local\Temp\\tsiVi132.dll,start File not found
[2013/09/14 17:12:07 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\Delta
[2013/09/14 17:12:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Delta
[2013/09/14 17:05:15 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\searchplugins
[2013/09/10 23:28:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit Apps Toolbar
[2013/09/10 23:28:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Application Updater
[2013/09/15 10:12:40 | 000,045,056 | ---- | M] () -- C:\Windows\SysWow64\acovcnt.exe
[2013/09/14 17:12:07 | 000,000,000 | ---D | M] -- C:\Users\Dávid\AppData\Roaming\Delta

:Files
C:\Program Files (x86)\Common Files\Spigot
C:\Program Files (x86)\Application Updater
C:\Users\DVID~1\AppData\Local\Temp\iswizard

:Commands
[resethosts]
[emptytemp]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

5

Everything is fine now, thanks :slight_smile:

Had to delete one line of the code namely O3 - HKLM..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll (Delta-search.com)

as it caused program to stop responding. I checked the location and it was already gone, there was nothing in the C:\Program Files (x86)\Delta Folder already, so that probably caused problem while fixing, which I then restarted withou the one line and it worked after that. I ran both anti-virus and anti-malware tests with negative results on any problem :slight_smile:

Thank you! :slight_smile: