JR Boucicaut 3789 Report post Posted February 21, 2005 It started last night - I'd be online or using the computer and either the screen would start to go nuts (windows popping up and stuff) or the mouse would disappear. Only way to get rid of it is to restart. Anyone know what I need to do? Share this post Link to post Share on other sites
Fletch 219 Report post Posted February 21, 2005 Pop-ups as in ads? You may want to check for spyware. Download Ad-Aware and Spybot and run them both. Share this post Link to post Share on other sites
JR Boucicaut 3789 Report post Posted February 21, 2005 No, the actual windows (my IMs, browsers, stuff like that) Share this post Link to post Share on other sites
GekigangarIII 0 Report post Posted February 21, 2005 What anti-virus software are you running? As Fletch said, Spybot and ad-aware are two good places to start. But this sounds more like a trojan combined with some kind of remote control software to me...you can dl this self contained scanner from McAfee and run that as well:http://download.nai.com/products/mcafee-avert/stinger.exe Share this post Link to post Share on other sites
JR Boucicaut 3789 Report post Posted February 21, 2005 Trend Micro Internet Security. No viruses. Share this post Link to post Share on other sites
JR Boucicaut 3789 Report post Posted February 21, 2005 I also ran Ad-Aware, nothing there.I noticed that it only happens whenever I have WinAmp running. It's been working for a couple of hours w/o WA on. Never a problem til last night but I went ahead and upgraded it. We'll see what happens. Share this post Link to post Share on other sites
DrMolotov 0 Report post Posted February 21, 2005 What operating system and browser are you using? Share this post Link to post Share on other sites
Boycey 0 Report post Posted February 21, 2005 Welcome to my world, Boucicat :D My computer's always screwing up!By the way, like the article in Face-Off! Share this post Link to post Share on other sites
MissConduct 1 Report post Posted February 21, 2005 I also ran Ad-Aware, nothing there.I noticed that it only happens whenever I have WinAmp running. It's been working for a couple of hours w/o WA on. Never a problem til last night but I went ahead and upgraded it. We'll see what happens. JR: download HIJACK THIS and do a system scan and save a logfile.. and post results here mich Share this post Link to post Share on other sites
JR Boucicaut 3789 Report post Posted February 21, 2005 Logfile of HijackThis v1.99.1Scan saved at 4:22:52 PM, on 2/21/2005Platform: Windows XP (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\NVATray.exeC:\WINDOWS\System32\khooker.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exeC:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exeC:\Program Files\Ahead\InCD\InCD.exeC:\Program Files\Trend Micro\Internet Security\pccguide.exeC:\Program Files\Trend Micro\Internet Security\PCClient.exeC:\Program Files\Trend Micro\Internet Security\TMOAgent.exeC:\Program Files\AOL Fanfare\ac_oehook.exeC:\WINDOWS\System32\sistray.EXEC:\WINDOWS\System32\keyhook.exeC:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exeC:\Program Files\Netropa\Onscreen Display\OSD.exeC:\Program Files\Netropa\InetKb\Inetkb.exeC:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exeC:\Program Files\Common Files\AOL\ACS\AOLAcsd.exeC:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exeC:\Program Files\Ahead\InCD\InCDsrv.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Trend Micro\Internet Security\Tmntsrv.exeC:\Program Files\Trend Micro\Internet Security\tmproxy.exeC:\WINDOWS\wanmpsvc.exeC:\Program Files\Trend Micro\Internet Security\PccPfw.exeC:\Program Files\Trillian301\trillian.exeC:\Program Files\Winamp5\winampa.exeC:\Program Files\Winamp5\Winamp.exeC:\Program Files\Mozilla Firefox\firefox.exeD:\Hijackthis\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 213-84-88-83.adsl.xs4all.nl:3128N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\JR Boucicaut\Application Data\Mozilla\Profiles\default\rrrhi85p.slt\prefs.js)O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_12_0.dllO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dllO2 - BHO: Ipswitch.WsftpBrowserHelper - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Program Files\WS_FTP Pro\wsbho2K0.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\windows\googletoolbar2.dllO2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dllO2 - BHO: Wavexpress BHO - {C1D458F1-B97C-11D5-B3DF-00B0D0A5B433} - C:\Program Files\Wavexpress\TVTonic\WXBHO.dll (file missing)O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_12_0.dllO3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.1601.0\en-us\msntb.dllO3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\windows\googletoolbar2.dllO3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dllO4 - HKLM\..\Run: [NVIDIA nForce APU1 Utilities] NVATray.exeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initializeO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [siS KHooker] C:\WINDOWS\System32\khooker.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osbootO4 - HKLM\..\Run: [Realtime Audio Engine] mmrtkrnl.exeO4 - HKLM\..\Run: [Ad-watch] C:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exeO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exeO4 - HKLM\..\Run: [inCD] C:\Program Files\Ahead\InCD\InCD.exeO4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security\pccguide.exe"O4 - HKLM\..\Run: [PCClient.exe] "C:\Program Files\Trend Micro\Internet Security\PCClient.exe"O4 - HKLM\..\Run: [TM Outbreak Agent] "C:\Program Files\Trend Micro\Internet Security\TMOAgent.exe" /runO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [AOL Fanfare Outlook Express Plug-in] "C:\Program Files\AOL Fanfare\ac_oehook.exe"O4 - HKLM\..\Run: [siS Tray] C:\WINDOWS\System32\sistray.EXEO4 - HKLM\..\Run: [siS Windows KeyHook] C:\WINDOWS\System32\keyhook.exeO4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp5\winampa.exeO4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exeO4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTMLO8 - Extra context menu item: &Google Search - res://c:\windows\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: &Subscribe to this feed - file://C:\Documents and Settings\JR Boucicaut\Application Data\AOL Fanfare\subscribe.htmO8 - Extra context menu item: Backward Links - res://c:\windows\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Cached Snapshot of Page - res://c:\windows\GoogleToolbar2.dll/cmcache.htmlO8 - Extra context menu item: Download with NetPumper - C:\Program Files\NetPumper\AddUrl.htmO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Similar Pages - res://c:\windows\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Translate into English - res://c:\windows\GoogleToolbar2.dll/cmtrans.htmlO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dllO9 - Extra button: AOL Toolbar - {1AE2F26C-8E23-4930-A68D-9E681A764001} - C:\WINDOWS\System32\shdocvw.dllO9 - Extra 'Tools' menuitem: AOL Toolbar - {1AE2F26C-8E23-4930-A68D-9E681A764001} - C:\WINDOWS\System32\shdocvw.dllO9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dllO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dllO9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dllO9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dllO9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exeO9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXEO9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXEO16 - DPF: {05317530-B882-449D-9421-18D94FA3ED34} (OSInfo Control) - http://www.sis.com/support/chipdetect/OSInfo.cabO16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cabO16 - DPF: {16095503-786F-4097-AED6-5D567A26D760} (SiS_OCX Control) - http://www.sis.com/support/chipdetect/SiSAutodetectNT.cabO16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwe...etup1.0.0.8.cabO16 - DPF: {2253F320-AB68-4A07-917D-4F12D8884A06} (ChainCast VMR Client Proxy) - http://64.124.45.181/downloads/ccpm_0237.cabO16 - DPF: {27EB254C-C724-43B1-8DD8-F3AC9ED761B2} (Wavexpress Cab Helper) - http://client2.tvtonic.com/Webservice/Publ...7/TVTStage1.cabO16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/...s/yinst0401.cabO16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/200212...meInstaller.exeO16 - DPF: {65E7DB1D-0101-4100-BD66-C5C78C917F93} (WTDMMPVersion Class) - http://install.wildtangent.com/bgn/partner...lim/install.cabO16 - DPF: {6B4788E2-BAE8-11D2-A1B4-00400512739B} (PWMediaSendControl Class) - http://216.249.24.143/code/PWActiveXImgCtl.CABO16 - DPF: {72770C4F-967D-4517-982B-92D6B9015649} (DigWebHelper Class) - http://photos.msn.com/resources/neutral/co...X.cab?9,0,712,0O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab28578.cabO16 - DPF: {8EDAD21C-3584-4E66-A8AB-EB0E5584767D} - http://toolbar.google.com/data/GoogleActivate.cabO16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} (WTHoster Class) - http://install.wildtangent.com/bgn/partner...lim/install.cabO16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/web_...aploader_v6.cabO16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-32.cabO16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab28578.cabO23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exeO23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exeO23 - Service: Crypkey License - Unknown owner - crypserv.exe (file missing)O23 - Service: InCD File System Service (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exeO23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exeO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exeO23 - Service: Trend Micro Personal Firewall (PccPfw) - Trend Micro Incorporated. - C:\Program Files\Trend Micro\Internet Security\PccPfw.exeO23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Incorporated. - C:\Program Files\Trend Micro\Internet Security\Tmntsrv.exeO23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Incorporated. - C:\Program Files\Trend Micro\Internet Security\tmproxy.exeO23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe Share this post Link to post Share on other sites
MissConduct 1 Report post Posted February 21, 2005 Looks good you can delete (file missing) ones.. but those don't cause nuffin.. seems your ok virus/adware wise??? lolmich Share this post Link to post Share on other sites
MissConduct 1 Report post Posted February 21, 2005 Have you installed anything new lately? Software/Hardware Share this post Link to post Share on other sites
cbettner66 0 Report post Posted February 21, 2005 what kind of mouse do u have?i have a mouse with the funky buttons on the side that switch between applications and stuff - and occasionally it goes haywire and starts switching between applications Share this post Link to post Share on other sites
JR Boucicaut 3789 Report post Posted February 21, 2005 Old-school Microsoft mouse.Nothing new installed. But I went ahead and updated my video drivers.Everything has been running smoothly so far. Who knows. Share this post Link to post Share on other sites
cbettner66 0 Report post Posted February 21, 2005 thats really strange - i hope it keeps working though Share this post Link to post Share on other sites
cbettner66 0 Report post Posted February 21, 2005 i reccommend the microsoft anti-spyware program if you have those popup types of issues - it works much better than ad-aware and spybotif u got any other questions though let me know - im a computer guy :) :) Share this post Link to post Share on other sites
