There's A Poltergeist In My Computer! Or Is There?
Moderator: Thanas
- Peregrin Toker
- Emperor's Hand
- Posts: 8609
- Joined: 2002-07-04 10:57am
- Location: Denmark
- Contact:
There's A Poltergeist In My Computer! Or Is There?
For the last two days, I have experienced a quite strange phenomenon. What happens is that suddenly, the mouse cursor starts jumping randomly around and clicking various things without me having the slightest control over it - often opening random directories in the process and at its worst obstructing whatever I was doing. It's almost as if the computer has got a will of its own which occassionally manifests itself.
And I don't have a clue what it is! Despite the title, I will leave the rather silly explanation of supernatural involvement until nothing else is left.
I've scanned the computer for viruses with AVAST! and though it found and deleted several infected files, the "computer poltergeist" (as I've nicknamed the phenomenon) didn't go away - though its activity became a lot less annoying and less severe in its extent.
Another explanation is that my mouse is quite worn out, and since I'm buying a new computer next week or so (irrespective of these strange occurences), I won't have to endure the "computer poltergeist" for much more time.
Anyway - do you have any clues to what can be wrong with it?
And I don't have a clue what it is! Despite the title, I will leave the rather silly explanation of supernatural involvement until nothing else is left.
I've scanned the computer for viruses with AVAST! and though it found and deleted several infected files, the "computer poltergeist" (as I've nicknamed the phenomenon) didn't go away - though its activity became a lot less annoying and less severe in its extent.
Another explanation is that my mouse is quite worn out, and since I'm buying a new computer next week or so (irrespective of these strange occurences), I won't have to endure the "computer poltergeist" for much more time.
Anyway - do you have any clues to what can be wrong with it?
"Hi there, would you like to have a cookie?"
"No, actually I would HATE to have a cookie, you vapid waste of inedible flesh!"
"No, actually I would HATE to have a cookie, you vapid waste of inedible flesh!"
- Darth Wong
- Sith Lord
- Posts: 70028
- Joined: 2002-07-03 12:25am
- Location: Toronto, Canada
- Contact:
No idea what's causing that. Therefore, God created the universe.
"It's not evil for God to do it. Or for someone to do it at God's command."- Jonathan Boyd on baby-killing
"you guys are fascinated with the use of those "rules of logic" to the extent that you don't really want to discussus anything."- GC
"I do not believe Russian Roulette is a stupid act" - Embracer of Darkness
"Viagra commercials appear to save lives" - tharkûn on US health care.
http://www.stardestroyer.net/Mike/RantMode/Blurbs.html
"you guys are fascinated with the use of those "rules of logic" to the extent that you don't really want to discussus anything."- GC
"I do not believe Russian Roulette is a stupid act" - Embracer of Darkness
"Viagra commercials appear to save lives" - tharkûn on US health care.
http://www.stardestroyer.net/Mike/RantMode/Blurbs.html
- Peregrin Toker
- Emperor's Hand
- Posts: 8609
- Joined: 2002-07-04 10:57am
- Location: Denmark
- Contact:
- Darth Wong
- Sith Lord
- Posts: 70028
- Joined: 2002-07-03 12:25am
- Location: Toronto, Canada
- Contact:
Doesn't matter. You can't explain it, therefore God created the universe. Praise!Peregrin Toker wrote:I don't actually believe it to be a poltergeist, it's just a nickname I've given it.
"It's not evil for God to do it. Or for someone to do it at God's command."- Jonathan Boyd on baby-killing
"you guys are fascinated with the use of those "rules of logic" to the extent that you don't really want to discussus anything."- GC
"I do not believe Russian Roulette is a stupid act" - Embracer of Darkness
"Viagra commercials appear to save lives" - tharkûn on US health care.
http://www.stardestroyer.net/Mike/RantMode/Blurbs.html
"you guys are fascinated with the use of those "rules of logic" to the extent that you don't really want to discussus anything."- GC
"I do not believe Russian Roulette is a stupid act" - Embracer of Darkness
"Viagra commercials appear to save lives" - tharkûn on US health care.
http://www.stardestroyer.net/Mike/RantMode/Blurbs.html
- Einhander Sn0m4n
- Insane Railgunner
- Posts: 18630
- Joined: 2002-10-01 05:51am
- Location: Louisiana... or Dagobah. You know, where Yoda lives.
- Peregrin Toker
- Emperor's Hand
- Posts: 8609
- Joined: 2002-07-04 10:57am
- Location: Denmark
- Contact:
I've just downloaded Hijackthis.Einhander Sn0m4n wrote: Umm, get Hijackthis and run it. Then post a log. Do you have SpybotSD btw?
And no, I don't have SpybotSD but I do have SpywareNuker.
"Hi there, would you like to have a cookie?"
"No, actually I would HATE to have a cookie, you vapid waste of inedible flesh!"
"No, actually I would HATE to have a cookie, you vapid waste of inedible flesh!"
- SirNitram
- Rest in Peace, Black Mage
- Posts: 28367
- Joined: 2002-07-03 04:48pm
- Location: Somewhere between nowhere and everywhere
Looks like Mike has finished reading the Book of Mormom..
Anyway. I'd suggest running another antivirus. Sometimes you need to tag-team the little bastards.
Anyway. I'd suggest running another antivirus. Sometimes you need to tag-team the little bastards.
Manic Progressive: A liberal who violently swings from anger at politicos to despondency over them.
Out Of Context theatre: Ron Paul has repeatedly said he's not a racist. - Destructinator XIII on why Ron Paul isn't racist.
Shadowy Overlord - BMs/Black Mage Monkey - BOTM/Jetfire - Cybertron's Finest/General Miscreant/ASVS/Supermoderator Emeritus
Debator Classification: Trollhunter
Out Of Context theatre: Ron Paul has repeatedly said he's not a racist. - Destructinator XIII on why Ron Paul isn't racist.
Shadowy Overlord - BMs/Black Mage Monkey - BOTM/Jetfire - Cybertron's Finest/General Miscreant/ASVS/Supermoderator Emeritus
Debator Classification: Trollhunter
- Einhander Sn0m4n
- Insane Railgunner
- Posts: 18630
- Joined: 2002-10-01 05:51am
- Location: Louisiana... or Dagobah. You know, where Yoda lives.
SpywareNuker is CRAP! Uninstall the piece of shit. You want SpybotSD!Peregrin Toker wrote:I've just downloaded Hijackthis.Einhander Sn0m4n wrote: Umm, get Hijackthis and run it. Then post a log. Do you have SpybotSD btw?
And no, I don't have SpybotSD but I do have SpywareNuker.
- Peregrin Toker
- Emperor's Hand
- Posts: 8609
- Joined: 2002-07-04 10:57am
- Location: Denmark
- Contact:
- SirNitram
- Rest in Peace, Black Mage
- Posts: 28367
- Joined: 2002-07-03 04:48pm
- Location: Somewhere between nowhere and everywhere
Seperate program, to see if there's some AVAST doesn't know about.Peregrin Toker wrote:Another scan with AVAST!, or another antivirus program?SirNitram wrote:Anyway. I'd suggest running another antivirus. Sometimes you need to tag-team the little bastards.
Manic Progressive: A liberal who violently swings from anger at politicos to despondency over them.
Out Of Context theatre: Ron Paul has repeatedly said he's not a racist. - Destructinator XIII on why Ron Paul isn't racist.
Shadowy Overlord - BMs/Black Mage Monkey - BOTM/Jetfire - Cybertron's Finest/General Miscreant/ASVS/Supermoderator Emeritus
Debator Classification: Trollhunter
Out Of Context theatre: Ron Paul has repeatedly said he's not a racist. - Destructinator XIII on why Ron Paul isn't racist.
Shadowy Overlord - BMs/Black Mage Monkey - BOTM/Jetfire - Cybertron's Finest/General Miscreant/ASVS/Supermoderator Emeritus
Debator Classification: Trollhunter
- Peregrin Toker
- Emperor's Hand
- Posts: 8609
- Joined: 2002-07-04 10:57am
- Location: Denmark
- Contact:
Which antivirus programs do you recommend, Nitram?
Anyway, Einy, here's the HijackThis log:
Logfile of HijackThis v1.97.7
Scan saved at 20:06:37, on 25-07-2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
D:\Programmer\Alwil Software\Avast4\ashServ.exe
D:\Programmer\Fælles filer\Real\Update_OB\evntsvc.exe
D:\Programmer\Winamp\Winampa.exe
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
D:\PROGRA~1\ALWILS~1\Avast4\ashmaisv.exe
D:\Programmer\QuickTime\qttask.exe
D:\WINDOWS\System32\ctfmon.exe
D:\Programmer\Messenger\msmsgs.exe
D:\Programmer\Microsoft Office\Office\OSA.EXE
D:\Programmer\Microsoft Office\Office\FINDFAST.EXE
D:\WINDOWS\System32\wuauclt.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\taskmgr.exe
D:\WINDOWS\explorer.exe
E:\Simon\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.dk/Default.asp?Ath=f
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
R3 - Default URLSearchHook is missing
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - D:\Programmer\MyWay\myBar\1.bin\MYBAR.DLL
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Programmer\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - D:\Programmer\MyWay\myBar\1.bin\MYBAR.DLL
O4 - HKLM\..\Run: [TkBellExe] D:\Programmer\Fælles filer\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\Run: [WinampAgent] "D:\Programmer\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ashMaiSv] D:\PROGRA~1\ALWILS~1\Avast4\ashmaisv.exe
O4 - HKLM\..\Run: [QuickTime Task] "D:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [updater] D:\Programmer\Common files\updater\wupdater.exe
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "D:\Programmer\Messenger\msmsgs.exe" /background
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Microsoft Office-start.lnk = D:\Programmer\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: Microsoft Hurtig søgning.lnk = D:\Programmer\Microsoft Office\Office\FINDFAST.EXE
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O12 - Plugin for .pdf: D:\Programmer\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {15589FA1-C456-11CE-BF01-00AA0055595A} - http://www.spywarenuker.com/product/cam ... taller.exe
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/ ... mv9VCM.CAB
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/C ... 5373148148
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shoc ... wflash.cab
Anyway, Einy, here's the HijackThis log:
Logfile of HijackThis v1.97.7
Scan saved at 20:06:37, on 25-07-2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
D:\Programmer\Alwil Software\Avast4\ashServ.exe
D:\Programmer\Fælles filer\Real\Update_OB\evntsvc.exe
D:\Programmer\Winamp\Winampa.exe
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
D:\PROGRA~1\ALWILS~1\Avast4\ashmaisv.exe
D:\Programmer\QuickTime\qttask.exe
D:\WINDOWS\System32\ctfmon.exe
D:\Programmer\Messenger\msmsgs.exe
D:\Programmer\Microsoft Office\Office\OSA.EXE
D:\Programmer\Microsoft Office\Office\FINDFAST.EXE
D:\WINDOWS\System32\wuauclt.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\taskmgr.exe
D:\WINDOWS\explorer.exe
E:\Simon\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.dk/Default.asp?Ath=f
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
R3 - Default URLSearchHook is missing
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - D:\Programmer\MyWay\myBar\1.bin\MYBAR.DLL
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Programmer\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - D:\Programmer\MyWay\myBar\1.bin\MYBAR.DLL
O4 - HKLM\..\Run: [TkBellExe] D:\Programmer\Fælles filer\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\Run: [WinampAgent] "D:\Programmer\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ashMaiSv] D:\PROGRA~1\ALWILS~1\Avast4\ashmaisv.exe
O4 - HKLM\..\Run: [QuickTime Task] "D:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [updater] D:\Programmer\Common files\updater\wupdater.exe
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "D:\Programmer\Messenger\msmsgs.exe" /background
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Microsoft Office-start.lnk = D:\Programmer\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: Microsoft Hurtig søgning.lnk = D:\Programmer\Microsoft Office\Office\FINDFAST.EXE
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O12 - Plugin for .pdf: D:\Programmer\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {15589FA1-C456-11CE-BF01-00AA0055595A} - http://www.spywarenuker.com/product/cam ... taller.exe
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/ ... mv9VCM.CAB
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/C ... 5373148148
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shoc ... wflash.cab
"Hi there, would you like to have a cookie?"
"No, actually I would HATE to have a cookie, you vapid waste of inedible flesh!"
"No, actually I would HATE to have a cookie, you vapid waste of inedible flesh!"
- Einhander Sn0m4n
- Insane Railgunner
- Posts: 18630
- Joined: 2002-10-01 05:51am
- Location: Louisiana... or Dagobah. You know, where Yoda lives.
Peregrin Toker wrote: R3 - Default URLSearchHook is missing <== Fix it
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - D:\Programmer\MyWay\myBar\1.bin\MYBAR.DLL <== Remove it
O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - D:\Programmer\MyWay\myBar\1.bin\MYBAR.DLL <== Remove it
O4 - HKLM\..\Run: [TkBellExe] D:\Programmer\Fælles filer\Real\Update_OB\evntsvc.exe -osboot <== Your choice, but I recommend remove
O4 - HKLM\..\Run: [QuickTime Task] "D:\Programmer\QuickTime\qttask.exe" -atboottime <== Your choice, but I recommend remove
O4 - HKLM\..\Run: [updater] D:\Programmer\Common files\updater\wupdater.exe <== KILL THIS PLEASE: This is probly the source of your problems
O4 - Global Startup: Microsoft Office-start.lnk = D:\Programmer\Microsoft Office\Office\OSA.EXE <== Your choice, but I recommend remove
O4 - Global Startup: Microsoft Hurtig søgning.lnk = D:\Programmer\Microsoft Office\Office\FINDFAST.EXE <== KILL WITH PREJUDICE! ITS RESOURCE HOG FROM HELL WITH NO BENEFIT!
O16 - DPF: {15589FA1-C456-11CE-BF01-00AA0055595A} - http://www.spywarenuker.com/product/cam ... taller.exe <== Remove
- Peregrin Toker
- Emperor's Hand
- Posts: 8609
- Joined: 2002-07-04 10:57am
- Location: Denmark
- Contact:
- Peregrin Toker
- Emperor's Hand
- Posts: 8609
- Joined: 2002-07-04 10:57am
- Location: Denmark
- Contact:
Okay, I've done what Einy told me to, and I still had those problems. However, this morning I've replaced my computer's mouse with a new one and I haven't experienced these poltergeist-like phenomena yet.
"Hi there, would you like to have a cookie?"
"No, actually I would HATE to have a cookie, you vapid waste of inedible flesh!"
"No, actually I would HATE to have a cookie, you vapid waste of inedible flesh!"
- Einhander Sn0m4n
- Insane Railgunner
- Posts: 18630
- Joined: 2002-10-01 05:51am
- Location: Louisiana... or Dagobah. You know, where Yoda lives.
- admiral_danielsben
- Padawan Learner
- Posts: 336
- Joined: 2004-05-05 05:16pm
- Location: The Vast Right-Wing Trekkie Conspiracy HQ
Either you are channeling your Mormon evil (or good, it's all POV) twin Ike Wong, or you're criticizing the use of religious words for non-religious situtations with obtuse sarcasm.Darth Wong wrote:Doesn't matter. You can't explain it, therefore God created the universe. Praise!Peregrin Toker wrote:I don't actually believe it to be a poltergeist, it's just a nickname I've given it.
-DanielSBen
----------------
"Certain death, small chance of sucess, what are we waiting for?" Gimli, son of Gloin
----------------
"Politics is supposed to be the second oldest profession. I have come to realize that it bears a very close resemblance to the first." - Ronald Reagan (1911-2004)
---------------
"If your lies are going to be this transparent, this is going to be a very short interrogation" -- Kira
"Then I'll try to make my lies more opaque..." -- Gul Darhe'el (DS9: Duet)
----------------
"Certain death, small chance of sucess, what are we waiting for?" Gimli, son of Gloin
----------------
"Politics is supposed to be the second oldest profession. I have come to realize that it bears a very close resemblance to the first." - Ronald Reagan (1911-2004)
---------------
"If your lies are going to be this transparent, this is going to be a very short interrogation" -- Kira
"Then I'll try to make my lies more opaque..." -- Gul Darhe'el (DS9: Duet)
- Peregrin Toker
- Emperor's Hand
- Posts: 8609
- Joined: 2002-07-04 10:57am
- Location: Denmark
- Contact: