There's A Poltergeist In My Computer! Or Is There?

GEC: Discuss gaming, computers and electronics and venture into the bizarre world of STGODs.

Moderator: Thanas

Locked
User avatar
Peregrin Toker
Emperor's Hand
Posts: 8609
Joined: 2002-07-04 10:57am
Location: Denmark
Contact:

There's A Poltergeist In My Computer! Or Is There?

Post by Peregrin Toker »

For the last two days, I have experienced a quite strange phenomenon. What happens is that suddenly, the mouse cursor starts jumping randomly around and clicking various things without me having the slightest control over it - often opening random directories in the process and at its worst obstructing whatever I was doing. It's almost as if the computer has got a will of its own which occassionally manifests itself.

And I don't have a clue what it is! Despite the title, I will leave the rather silly explanation of supernatural involvement until nothing else is left.

I've scanned the computer for viruses with AVAST! and though it found and deleted several infected files, the "computer poltergeist" (as I've nicknamed the phenomenon) didn't go away - though its activity became a lot less annoying and less severe in its extent.

Another explanation is that my mouse is quite worn out, and since I'm buying a new computer next week or so (irrespective of these strange occurences), I won't have to endure the "computer poltergeist" for much more time.


Anyway - do you have any clues to what can be wrong with it?
"Hi there, would you like to have a cookie?"

"No, actually I would HATE to have a cookie, you vapid waste of inedible flesh!"
User avatar
Darth Wong
Sith Lord
Sith Lord
Posts: 70028
Joined: 2002-07-03 12:25am
Location: Toronto, Canada
Contact:

Post by Darth Wong »

No idea what's causing that. Therefore, God created the universe.
Image
"It's not evil for God to do it. Or for someone to do it at God's command."- Jonathan Boyd on baby-killing

"you guys are fascinated with the use of those "rules of logic" to the extent that you don't really want to discussus anything."- GC

"I do not believe Russian Roulette is a stupid act" - Embracer of Darkness

"Viagra commercials appear to save lives" - tharkûn on US health care.

http://www.stardestroyer.net/Mike/RantMode/Blurbs.html
User avatar
Peregrin Toker
Emperor's Hand
Posts: 8609
Joined: 2002-07-04 10:57am
Location: Denmark
Contact:

Post by Peregrin Toker »

I don't actually believe it to be a poltergeist, it's just a nickname I've given it.
"Hi there, would you like to have a cookie?"

"No, actually I would HATE to have a cookie, you vapid waste of inedible flesh!"
User avatar
Darth Wong
Sith Lord
Sith Lord
Posts: 70028
Joined: 2002-07-03 12:25am
Location: Toronto, Canada
Contact:

Post by Darth Wong »

Peregrin Toker wrote:I don't actually believe it to be a poltergeist, it's just a nickname I've given it.
Doesn't matter. You can't explain it, therefore God created the universe. Praise!
Image
"It's not evil for God to do it. Or for someone to do it at God's command."- Jonathan Boyd on baby-killing

"you guys are fascinated with the use of those "rules of logic" to the extent that you don't really want to discussus anything."- GC

"I do not believe Russian Roulette is a stupid act" - Embracer of Darkness

"Viagra commercials appear to save lives" - tharkûn on US health care.

http://www.stardestroyer.net/Mike/RantMode/Blurbs.html
User avatar
Einhander Sn0m4n
Insane Railgunner
Posts: 18630
Joined: 2002-10-01 05:51am
Location: Louisiana... or Dagobah. You know, where Yoda lives.

Post by Einhander Sn0m4n »

0.0





Umm, get Hijackthis and run it. Then post a log. Do you have SpybotSD btw?
Image Image
User avatar
Peregrin Toker
Emperor's Hand
Posts: 8609
Joined: 2002-07-04 10:57am
Location: Denmark
Contact:

Post by Peregrin Toker »

Einhander Sn0m4n wrote: Umm, get Hijackthis and run it. Then post a log. Do you have SpybotSD btw?
I've just downloaded Hijackthis.

And no, I don't have SpybotSD but I do have SpywareNuker.
"Hi there, would you like to have a cookie?"

"No, actually I would HATE to have a cookie, you vapid waste of inedible flesh!"
User avatar
SirNitram
Rest in Peace, Black Mage
Posts: 28367
Joined: 2002-07-03 04:48pm
Location: Somewhere between nowhere and everywhere

Post by SirNitram »

Looks like Mike has finished reading the Book of Mormom..


Anyway. I'd suggest running another antivirus. Sometimes you need to tag-team the little bastards.
Manic Progressive: A liberal who violently swings from anger at politicos to despondency over them.

Out Of Context theatre: Ron Paul has repeatedly said he's not a racist. - Destructinator XIII on why Ron Paul isn't racist.

Shadowy Overlord - BMs/Black Mage Monkey - BOTM/Jetfire - Cybertron's Finest/General Miscreant/ASVS/Supermoderator Emeritus

Debator Classification: Trollhunter
User avatar
Einhander Sn0m4n
Insane Railgunner
Posts: 18630
Joined: 2002-10-01 05:51am
Location: Louisiana... or Dagobah. You know, where Yoda lives.

Post by Einhander Sn0m4n »

Peregrin Toker wrote:
Einhander Sn0m4n wrote: Umm, get Hijackthis and run it. Then post a log. Do you have SpybotSD btw?
I've just downloaded Hijackthis.

And no, I don't have SpybotSD but I do have SpywareNuker.
SpywareNuker is CRAP! Uninstall the piece of shit. You want SpybotSD!
Image Image
User avatar
Peregrin Toker
Emperor's Hand
Posts: 8609
Joined: 2002-07-04 10:57am
Location: Denmark
Contact:

Post by Peregrin Toker »

SirNitram wrote:Anyway. I'd suggest running another antivirus. Sometimes you need to tag-team the little bastards.
Another scan with AVAST!, or another antivirus program?
"Hi there, would you like to have a cookie?"

"No, actually I would HATE to have a cookie, you vapid waste of inedible flesh!"
User avatar
SirNitram
Rest in Peace, Black Mage
Posts: 28367
Joined: 2002-07-03 04:48pm
Location: Somewhere between nowhere and everywhere

Post by SirNitram »

Peregrin Toker wrote:
SirNitram wrote:Anyway. I'd suggest running another antivirus. Sometimes you need to tag-team the little bastards.
Another scan with AVAST!, or another antivirus program?
Seperate program, to see if there's some AVAST doesn't know about.
Manic Progressive: A liberal who violently swings from anger at politicos to despondency over them.

Out Of Context theatre: Ron Paul has repeatedly said he's not a racist. - Destructinator XIII on why Ron Paul isn't racist.

Shadowy Overlord - BMs/Black Mage Monkey - BOTM/Jetfire - Cybertron's Finest/General Miscreant/ASVS/Supermoderator Emeritus

Debator Classification: Trollhunter
User avatar
Peregrin Toker
Emperor's Hand
Posts: 8609
Joined: 2002-07-04 10:57am
Location: Denmark
Contact:

Post by Peregrin Toker »

Which antivirus programs do you recommend, Nitram?


Anyway, Einy, here's the HijackThis log:


Logfile of HijackThis v1.97.7
Scan saved at 20:06:37, on 25-07-2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
D:\Programmer\Alwil Software\Avast4\ashServ.exe
D:\Programmer\Fælles filer\Real\Update_OB\evntsvc.exe
D:\Programmer\Winamp\Winampa.exe
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
D:\PROGRA~1\ALWILS~1\Avast4\ashmaisv.exe
D:\Programmer\QuickTime\qttask.exe
D:\WINDOWS\System32\ctfmon.exe
D:\Programmer\Messenger\msmsgs.exe
D:\Programmer\Microsoft Office\Office\OSA.EXE
D:\Programmer\Microsoft Office\Office\FINDFAST.EXE
D:\WINDOWS\System32\wuauclt.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\taskmgr.exe
D:\WINDOWS\explorer.exe
E:\Simon\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.dk/Default.asp?Ath=f
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
R3 - Default URLSearchHook is missing
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - D:\Programmer\MyWay\myBar\1.bin\MYBAR.DLL
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Programmer\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - D:\Programmer\MyWay\myBar\1.bin\MYBAR.DLL
O4 - HKLM\..\Run: [TkBellExe] D:\Programmer\Fælles filer\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\Run: [WinampAgent] "D:\Programmer\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ashMaiSv] D:\PROGRA~1\ALWILS~1\Avast4\ashmaisv.exe
O4 - HKLM\..\Run: [QuickTime Task] "D:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [updater] D:\Programmer\Common files\updater\wupdater.exe
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "D:\Programmer\Messenger\msmsgs.exe" /background
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Microsoft Office-start.lnk = D:\Programmer\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: Microsoft Hurtig søgning.lnk = D:\Programmer\Microsoft Office\Office\FINDFAST.EXE
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O12 - Plugin for .pdf: D:\Programmer\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {15589FA1-C456-11CE-BF01-00AA0055595A} - http://www.spywarenuker.com/product/cam ... taller.exe
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/ ... mv9VCM.CAB
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/C ... 5373148148
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shoc ... wflash.cab
"Hi there, would you like to have a cookie?"

"No, actually I would HATE to have a cookie, you vapid waste of inedible flesh!"
User avatar
Einhander Sn0m4n
Insane Railgunner
Posts: 18630
Joined: 2002-10-01 05:51am
Location: Louisiana... or Dagobah. You know, where Yoda lives.

Post by Einhander Sn0m4n »

Peregrin Toker wrote: R3 - Default URLSearchHook is missing <== Fix it
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - D:\Programmer\MyWay\myBar\1.bin\MYBAR.DLL <== Remove it
O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - D:\Programmer\MyWay\myBar\1.bin\MYBAR.DLL <== Remove it
O4 - HKLM\..\Run: [TkBellExe] D:\Programmer\Fælles filer\Real\Update_OB\evntsvc.exe -osboot <== Your choice, but I recommend remove
O4 - HKLM\..\Run: [QuickTime Task] "D:\Programmer\QuickTime\qttask.exe" -atboottime <== Your choice, but I recommend remove
O4 - HKLM\..\Run: [updater] D:\Programmer\Common files\updater\wupdater.exe <== KILL THIS PLEASE: This is probly the source of your problems
O4 - Global Startup: Microsoft Office-start.lnk = D:\Programmer\Microsoft Office\Office\OSA.EXE <== Your choice, but I recommend remove
O4 - Global Startup: Microsoft Hurtig søgning.lnk = D:\Programmer\Microsoft Office\Office\FINDFAST.EXE <== KILL WITH PREJUDICE! ITS RESOURCE HOG FROM HELL WITH NO BENEFIT!
O16 - DPF: {15589FA1-C456-11CE-BF01-00AA0055595A} - http://www.spywarenuker.com/product/cam ... taller.exe <== Remove
Image Image
User avatar
Peregrin Toker
Emperor's Hand
Posts: 8609
Joined: 2002-07-04 10:57am
Location: Denmark
Contact:

Post by Peregrin Toker »

Thanks Einy,
"Hi there, would you like to have a cookie?"

"No, actually I would HATE to have a cookie, you vapid waste of inedible flesh!"
User avatar
Peregrin Toker
Emperor's Hand
Posts: 8609
Joined: 2002-07-04 10:57am
Location: Denmark
Contact:

Post by Peregrin Toker »

Okay, I've done what Einy told me to, and I still had those problems. However, this morning I've replaced my computer's mouse with a new one and I haven't experienced these poltergeist-like phenomena yet.
"Hi there, would you like to have a cookie?"

"No, actually I would HATE to have a cookie, you vapid waste of inedible flesh!"
User avatar
Einhander Sn0m4n
Insane Railgunner
Posts: 18630
Joined: 2002-10-01 05:51am
Location: Louisiana... or Dagobah. You know, where Yoda lives.

Post by Einhander Sn0m4n »

So it was a maus problem? Glad you fixed it.

Any time, Toker. :)
Image Image
User avatar
admiral_danielsben
Padawan Learner
Posts: 336
Joined: 2004-05-05 05:16pm
Location: The Vast Right-Wing Trekkie Conspiracy HQ

Post by admiral_danielsben »

Darth Wong wrote:
Peregrin Toker wrote:I don't actually believe it to be a poltergeist, it's just a nickname I've given it.
Doesn't matter. You can't explain it, therefore God created the universe. Praise!
Either you are channeling your Mormon evil (or good, it's all POV) twin Ike Wong, or you're criticizing the use of religious words for non-religious situtations with obtuse sarcasm.
-DanielSBen
----------------
"Certain death, small chance of sucess, what are we waiting for?" Gimli, son of Gloin
----------------
"Politics is supposed to be the second oldest profession. I have come to realize that it bears a very close resemblance to the first." - Ronald Reagan (1911-2004)
---------------
"If your lies are going to be this transparent, this is going to be a very short interrogation" -- Kira

"Then I'll try to make my lies more opaque..." -- Gul Darhe'el (DS9: Duet)
User avatar
Peregrin Toker
Emperor's Hand
Posts: 8609
Joined: 2002-07-04 10:57am
Location: Denmark
Contact:

Post by Peregrin Toker »

Einhander Sn0m4n wrote:So it was a maus problem? Glad you fixed it.

Any time, Toker. :)
Yep, it was indeed the MAUS.

Image
"Hi there, would you like to have a cookie?"

"No, actually I would HATE to have a cookie, you vapid waste of inedible flesh!"
User avatar
phongn
Rebel Leader
Posts: 18487
Joined: 2002-07-03 11:11pm

Post by phongn »

Alright, this is enough. Question answered....

Image
Locked