wast2.exe

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

on 7/15/04 a program started trying to run on my computer. i was on a trusted website (foodtv.com) and when i closed down ie6 nothing on my desktop would respond. i did ctrl/alt/del to see what was running and it showed nothing. i restrated my computer and had did not experience the problem at that time. the following morning the same thing happened, i opened my yahoo homepage and the computer froze, when i finally got to where i could shut down the computer i got a message box stating that wast2.exe was trying to close. i turned the computer back on and did a search for the file and found it inder c:\windows. it's date created was 7/15/04, file size 126kb. i have no idea what this file is and want to know if it can be deleted from my computer safely.
 
Rename the file.
If the file is not needed, then it can be deleted.
--
Ron Sommer

jimintn2004 said:
on 7/15/04 a program started trying to run on my computer. i was on a
trusted website (foodtv.com) and when i closed down ie6 nothing on my
desktop would respond. i did ctrl/alt/del to see what was running and it
showed nothing. i restrated my computer and had did not experience the
problem at that time. the following morning the same thing happened, i
opened my yahoo homepage and the computer froze, when i finally got to where
i could shut down the computer i got a message box stating that wast2.exe
was trying to close. i turned the computer back on and did a search for the
file and found it inder c:\windows. it's date created was 7/15/04, file
size 126kb. i have no idea what this file is and want to know if it can be
deleted from my computer safely.
 
ok, maybe i should have asked what the file is first and then can it be deleted safely. it does not appear to be associtated with any program, at least that i can tell.
 
Offhand, I'd say it is a trojan (virus). There is no valid file by that name
that I can find. Try these "relatively" simple removal steps:

Restart in Safe mode by hitting F8 as Windows first begins to load on boot.
Logon as administrator.

Start/search/files and folders, look for <filename> and delete it wherever
it is found.

Start/run regedit, expand the + signs to look under these keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg

Look in the right hand pane for the string or strings that load that file.
Delete just those strings that contain the reference. Do not delete other
strings or the keys from the left pane. Close the registry editor when
completed, make sure you check all strings.

Go to the Control Panel/System/System Restore tab. Check the box to "Turn
off system restore on all drives". Click apply/ok. This will remove all
restore points, however you don't want them back as some or all of them will
contain the virus depending upon how recently you got infected.

Restart the system normally. Go back to the Control Panel/System and restart
System Restore.

Update your antivirus software.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

jimintn2004 said:
ok, maybe i should have asked what the file is first and then can it be
deleted safely. it does not appear to be associtated with any program, at
least that i can tell.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top