Tech Problem Aggregator

Windows XP Playing Random Audio Files/Popups

Q: Windows XP Playing Random Audio Files/Popups

Hello,

I am working on the Windows XP OS, and recently had to fight off a couple of Downloader virus infections. Since then, my computer keeps playing random audio files that I have never downloaded onto my computer, mostly ads for something, and at one point, the beginnning of a baseball game. CPU activity spikes when the files are played, but there is no way to stop them, and no visible reason they'd be playing (I won't even have a browser up when they play). I've tried using msconfig to keep things I don't recognize from starting up, but that doesn't appear to be the problem. Google searches for the same problem haven't turned up anything helpful, and now my computer is also turning up a lot of popups, even when my browser is not open (yes, I do have cable Internet).

I think it's a virus, but I've run several virus and malware/spyware programs (PC Doctor, Spybot, several antivirus programs, including Norton), and nothing is catching it. Any ideas on what this is and how to fix it?

I've gone through the five steps and posted my Panda ActiveScan and Deckard/Hijack This logs below. Thanks for any help you can give me!!

Panda Active Scan:

;***********************************************************************************************************************************************************************************
ANALYSIS: 2008-04-01 18:37:32
PROTECTIONS: 2
MALWARE: 9
SUSPECTS: 1
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
Spyware Doctor with AntiVirus 4.4.5 Yes Yes
Norton AntiVirus 2005 2005 No Yes
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00149104 Cookie/Date TrackingCookie No 0 Yes No C:\Documents and Settings\Beth\Cookies\[email protected][2].txt
00160284 Cookie/Findwhat TrackingCookie No 0 Yes No C:\Documents and Settings\Owner.MILLERFAM\Cookies\[email protected][1].txt
00160284 Cookie/Findwhat TrackingCookie No 0 Yes No C:\Documents and Settings\Beth\Cookies\[email protected][1].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\Owner.MILLERFAM\Application Data\Mozilla\Firefox\Profiles\oq0z3w8v.default\cookies.txt[.apmebf.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\Beth\Application Data\Mozilla\Firefox\Profiles\35mxc0m0.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\Beth\Application Data\Mozilla\Firefox\Profiles\35mxc0m0.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\Beth\Application Data\Mozilla\Firefox\Profiles\35mxc0m0.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\Beth\Application Data\Mozilla\Firefox\Profiles\35mxc0m0.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\Beth\Application Data\Mozilla\Firefox\Profiles\35mxc0m0.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\Owner.MILLERFAM\Application Data\Mozilla\Firefox\Profiles\oq0z3w8v.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\Owner.MILLERFAM\Application Data\Mozilla\Firefox\Profiles\oq0z3w8v.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\Owner.MILLERFAM\Application Data\Mozilla\Firefox\Profiles\oq0z3w8v.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\Owner.MILLERFAM\Application Data\Mozilla\Firefox\Profiles\oq0z3w8v.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\Owner.MILLERFAM\Application Data\Mozilla\Firefox\Profiles\oq0z3w8v.default\cookies.txt[.advertising.com/]
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\Owner.MILLERFAM\Cookies\[email protected][1].txt
00194327 Cookie/Go TrackingCookie No 0 Yes No C:\Documents and Settings\Owner.MILLERFAM\Application Data\Mozilla\Firefox\Profiles\oq0z3w8v.default\cookies.txt[.go.com/]
00194327 Cookie/Go TrackingCookie No 0 Yes No C:\Documents and Settings\Owner.MILLERFAM\Application Data\Mozilla\Firefox\Profiles\oq0z3w8v.default\cookies.txt[.go.com/]
00194327 Cookie/Go TrackingCookie No 0 Yes No C:\Documents and Settings\Owner.MILLERFAM\Application Data\Mozilla\Firefox\Profiles\oq0z3w8v.default\cookies.txt[.go.com/]
00194327 Cookie/Go TrackingCookie No 0 Yes No C:\Documents and Settings\Beth\Application Data\Mozilla\Firefox\Profiles\35mxc0m0.default\cookies.txt[.go.com/]
00194327 Cookie/Go TrackingCookie No 0 Yes No C:\Documents and Settings\Owner.MILLERFAM\Application Data\Mozilla\Firefox\Profiles\oq0z3w8v.default\cookies.txt[.go.com/]
00207338 Cookie/Target TrackingCookie No 0 Yes No C:\Documents and Settings\Owner.MILLERFAM\Application Data\Mozilla\Firefox\Profiles\oq0z3w8v.default\cookies.txt[.target.com/]
02907934 Trj/Downloader.TAV Virus/Trojan Yes 1 Yes No C:\WINDOWS\INSTALLER\{0CE553AE-91B6-4DF1-B9E8-46DD6CACD5EB}\DRIVESYS.DLL
02908672 Adware/VapSup Adware No 0 Yes No C:\WINDOWS\dwnrpofk.dll
02909975 Cookie/CookingLuck TrackingCookie No 0 Yes No C:\Documents and Settings\Beth\Cookies\[email protected][1].txt
02909975 Cookie/CookingLuck TrackingCookie No 0 Yes No C:\Documents and Settings\Owner.MILLERFAM\Cookies\[email protected][1].txt
;===================================================================================================================================================================================
SUSPECTS
Sent Location F
;===================================================================================================================================================================================
No C:\PROGRAM FILES\MYWEBSEARCH\BAR\2.BIN\F3HTMLMU.DLL F
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description F
;===================================================================================================================================================================================
;===================================================================================================================================================================================


Deckard Scan

Deckard's System Scanner v20071014.68
Run by Owner on 2008-04-01 18:56:55
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
7: 2008-04-01 22:57:02 UTC - RP7 - Deckard's System Scanner Restore Point
6: 2008-04-01 22:53:10 UTC - RP6 - Software Distribution Service 3.0
5: 2008-04-01 20:27:03 UTC - RP5 - System Checkpoint
4: 2008-03-31 15:43:30 UTC - RP4 - System Checkpoint
3: 2008-03-30 14:57:57 UTC - RP3 - System Checkpoint


-- First Restore Point --
1: 2008-03-27 23:45:46 UTC - RP1 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-04-01 18:59:48
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCSETMGR.EXE
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCEVTMGR.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\ehome\ehrecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\Program Files\McAfee\MSC\mcmscsvc.exe
C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe
C:\Program Files\McAfee\MSC\mcpromgr.exe
C:\Program Files\McAfee\MPF\MpfSrv.exe
C:\Program Files\Norton AntiVirus\NAVAPSVC.EXE
C:\Program Files\Norton AntiVirus\IWP\NPFMNTOR.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\RioMSC.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\alg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\MyWebSearch\bar\2.bin\M3SRCHMN.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Common Files\Symantec Shared\CCAPP.EXE
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\MyWebSearch\bar\2.bin\M3SRCHMN.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\soundman.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Digital Media Reader\readericon45G.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ehome\ehmsas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\BigFix\bigfix.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.bin
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Documents and Settings\Owner.MILLERFAM\Desktop\dss.exe
C:\Program Files\Jasc Software Inc\Paint Shop Pro 8\Paint Shop Pro.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.netzero.net/s/search?r=minisearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.netzero.net/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://my.netzero.net/s/sp?r=al&cf=s...O=A&UT=classic
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://my.netzero.net/s/search?r=minisearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/...ch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.netzero.net/s/search?r=minisearch
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.comcast.net/toolbar2.0/search/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Comcast
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLL
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - (no file)
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLL
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLL
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\Program Files\ComcastToolbar\comcasttoolbar.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NAVSHEXT.DLL
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\WINDOWS\system32\bae.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NAVSHEXT.DLL
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLL
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\Program Files\ComcastToolbar\comcasttoolbar.dll
O4 - HKLM\..\Run: [Reminder] %WINDIR%\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [ddoctorv2] "C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe" /P ddoctorv2
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\2.bin\m3SrchMn.exe" /m=2 /w
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [readericon] C:\Program Files\Digital Media Reader\readericon45G.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [DelayShred] c:\PROGRA~1\mcafee\mshr\ShrCL.EXE /P7 /q C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\T3954LC5\TRACE_~1.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\RWGTU6M5\INFORM~3.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\RWGTU6M5\INFORM~2.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\T3954LC5\INFORM~1.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\RWGTU6M5\BLANK_~1.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\T3954LC5\DOWNLO~1.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\RWGTU6M5\TOSEEK~1.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\8FM61CQB\INFORM~2.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\T3954LC5\INFORM~4.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\8FM61CQB\ADS_2_~1.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\T3954LC5\INFORM~3.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\8FM61CQB\ADS_1_~1.SH!
O4 - HKUS\S-1-5-18\..\Run: [Power2GoExpress] NA (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Power2GoExpress] NA (User 'Default user')
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\bigfix.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbar...rch.jhtml?p=ZK
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://www.pandasecurity.com/actives.../as2stubie.cab
O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll
O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
O21 - SSODL: DriveSys - {0ce553ae-91b6-4df1-b9e8-46dd6cacd5eb} - C:\WINDOWS\Installer\{0ce553ae-91b6-4df1-b9e8-46dd6cacd5eb}\DriveSys.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCEVTMGR.EXE
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPWDSVC.EXE
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCSETMGR.EXE
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_0.EXE
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\Program Files\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\Program Files\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MpfSrv.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\NAVAPSVC.EXE
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMNTOR.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: Rio MSC Manager (RioMSC) - Digital Networks North America, Inc. - C:\WINDOWS\system32\RioMSC.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVSCAN.EXE
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBSERV.EXE
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SupportSoft Sprocket Service (ddoctorv2) (sprtsvc_ddoctorv2) - SupportSoft, Inc. - C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe


--
End of file - 15262 bytes

-- File Associations -----------------------------------------------------------

All associations okay.


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

All drivers whitelisted.


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service>
R2 RioMSC (Rio MSC Manager) - c:\windows\system32\riomsc.exe <Not Verified; Digital Networks North America, Inc.; Rio Mass Storage Class Device Manager>


-- Device Manager: Disabled ----------------------------------------------------

No disabled devices found.


-- Scheduled Tasks -------------------------------------------------------------

2008-03-28 21:16:33 530 --a------ C:\WINDOWS\Tasks\Norton AntiVirus - Scan my computer - Owner.job
2008-03-26 23:44:19 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2008-02-18 09:00:00 260 --a------ C:\WINDOWS\Tasks\Disk Cleanup.job
2008-02-09 21:47:12 340 --a------ C:\WINDOWS\Tasks\McDefragTask.job
2008-02-09 21:47:11 332 --a------ C:\WINDOWS\Tasks\McQcTask.job


-- Files created between 2008-03-01 and 2008-04-01 -----------------------------

2008-04-01 18:45:25 0 d-------- C:\ie-spyad_zo
2008-04-01 17:33:18 0 d-------- C:\Program Files\Panda Security
2008-04-01 17:33:17 0 d-------- C:\WINDOWS\LastGood
2008-03-27 17:28:52 0 d-------- C:\Documents and Settings\All Users\Application Data\PC Tools
2008-03-27 17:21:49 0 d-------- C:\WINDOWS\pss
2008-03-26 20:58:39 0 d-------- C:\Documents and Settings\LocalService\Application Data\Adobe
2008-03-26 20:58:37 0 dr------- C:\Documents and Settings\LocalService\Favorites
2008-03-26 20:58:37 0 d-------- C:\Documents and Settings\LocalService\Application Data\Real
2008-03-26 20:58:37 0 d-------- C:\Documents and Settings\LocalService\Application Data\COMCASTTOOLBAR
2008-03-26 17:41:33 0 d-------- C:\Program Files\Common Files\PC Tools
2008-03-26 17:31:06 0 d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2008-03-26 17:30:53 0 d-------- C:\Program Files\Spyware Doctor
2008-03-26 17:30:53 0 d-------- C:\Documents and Settings\Owner.MILLERFAM\Application Data\PC Tools
2008-03-23 19:57:23 158 --a------ C:\tempdel.bat
2008-03-23 19:57:13 151552 --a------ C:\WINDOWS\qvdntlmw.dll
2008-03-23 19:57:13 81920 --a------ C:\WINDOWS\norlatmx.exe
2008-03-23 19:57:13 212992 --a------ C:\WINDOWS\kdftlboemno.dll
2008-03-23 19:57:13 212992 --a------ C:\WINDOWS\dwnrpofk.dll
2008-03-23 19:57:12 221184 --a------ C:\WINDOWS\vbgtorfd.dll
2008-03-23 14:03:10 0 d-------- C:\Program Files\Tall Emu
2008-03-19 23:44:55 0 d-------- C:\Program Files\Safari
2008-03-17 12:58:10 0 d-------- C:\Documents and Settings\Owner.MILLERFAM\Application Data\Template
2008-03-17 12:58:09 0 --a------ C:\Documents and Settings\Owner.MILLERFAM\Application Data\wklnhst.dat
2008-03-14 13:31:21 0 d-------- C:\Program Files\Common Files\xing shared
2008-03-12 16:51:28 0 d-------- C:\SMART
2008-03-01 12:22:49 0 d-------- C:\Program Files\iPod


-- Find3M Report ---------------------------------------------------------------

2008-04-01 17:19:40 0 d-------- C:\Documents and Settings\Owner.MILLERFAM\Application Data\OpenOffice.org2
2008-04-01 17:17:56 0 d-------- C:\Program Files\Common Files
2008-03-31 18:37:14 0 d-------- C:\Program Files\Common Files\Symantec Shared
2008-03-31 14:31:09 0 d-------- C:\Program Files\McAfee
2008-03-28 08:39:19 0 d-------- C:\Program Files\Norton AntiVirus
2008-03-28 08:36:34 0 d-------- C:\Program Files\Symantec
2008-03-26 18:37:00 0 d-------- C:\Documents and Settings\Owner.MILLERFAM\Application Data\ComcastToolbar
2008-03-19 23:47:33 0 d-------- C:\Program Files\Avant Browser
2008-03-19 23:45:28 0 d-------- C:\Documents and Settings\Owner.MILLERFAM\Application Data\Apple Computer
2008-03-14 13:31:18 0 d-------- C:\Program Files\Real
2008-03-14 13:31:10 0 d-------- C:\Program Files\Common Files\Real
2008-03-12 16:51:28 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-03-01 12:23:08 0 d-------- C:\Program Files\iTunes
2008-02-25 19:54:35 0 d-------- C:\Documents and Settings\Owner.MILLERFAM\Application Data\Real
2008-02-23 13:44:39 0 d-------- C:\Documents and Settings\Owner.MILLERFAM\Application Data\Yahoo!
2008-02-21 00:50:32 0 d-------- C:\Program Files\QuickTime
2008-02-14 08:44:55 0 d-------- C:\Program Files\Google
2008-02-14 08:44:55 0 d-------- C:\Program Files\AskPBar
2008-02-10 14:29:19 0 d-------- C:\Program Files\Yahoo!
2008-02-10 14:28:45 0 d-------- C:\Program Files\Trillian
2008-02-10 14:27:49 0 d-------- C:\Program Files\ICQToolbar
2008-02-09 21:47:27 0 d-------- C:\Program Files\Common Files\McAfee
2008-02-09 21:47:04 0 d-------- C:\Program Files\McAfee.com
2008-02-02 22:29:15 0 d-------- C:\Documents and Settings\Owner.MILLERFAM\Application Data\Adobe
2008-01-27 19:15:09 3121 --a------ C:\WINDOWS\mozver.dat


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Reminder"="%WINDIR%\Creator\Remind_XP.exe" []
"Recguard"="%WINDIR%\SMINST\RECGUARD.EXE" []
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [01/17/2008 11:42 AM]
"MSKDetectorExe"="C:\Program Files\McAfee\SpamKiller\MSKDetct.exe" [08/12/2005 07:16 PM]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [02/01/2008 12:13 AM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [02/19/2008 02:10 PM]
"ISTray"="C:\Program Files\Spyware Doctor\pctsTray.exe" [02/01/2008 12:55 PM]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [02/12/2004 01:38 PM]
"ddoctorv2"="C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe" [04/19/2007 03:21 PM]
"My Web Search Bar Search Scope Monitor"="C:\PROGRA~1\MYWEBS~1\bar\2.bin\m3SrchMn.exe" [10/24/2007 09:56 PM]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [03/14/2008 01:30 PM]
"Symantec NetDriver Monitor"="C:\PROGRA~1\SYMNET~1\SNDMon.exe" [03/28/2008 08:36 AM]
"SoundMan"="SOUNDMAN.EXE" [09/26/2005 06:07 PM C:\WINDOWS\soundman.exe]
"readericon"="C:\Program Files\Digital Media Reader\readericon45G.exe" [12/09/2005 09:44 PM]
"nwiz"="nwiz.exe" [09/18/2005 11:32 AM C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [09/18/2005 11:32 AM]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [09/18/2005 11:32 AM]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [05/12/2004 03:18 PM]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [08/06/2005 12:56 AM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Yahoo! Pager"="C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.exe" [08/30/2007 06:43 PM]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [10/13/2004 07:24 PM]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/10/2004 03:00 PM]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce]
"DelayShred"=c:\PROGRA~1\mcafee\mshr\ShrCL.EXE /P7 /q C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\T3954LC5\TRACE_~1.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\RWGTU6M5\INFORM~3.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\RWGTU6M5\INFORM~2.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\T3954LC5\INFORM~1.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\RWGTU6M5\BLANK_~1.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\T3954LC5\DOWNLO~1.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\RWGTU6M5\TOSEEK~1.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\8FM61CQB\INFORM~2.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\T3954LC5\INFORM~4.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\8FM61CQB\ADS_2_~1.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\T3954LC5\INFORM~3.SH! C:\DOCUME~1\OWNER~1.MIL\LOCALS~1\TEMPOR~1\Content.IE5\8FM61CQB\ADS_1_~1.SH!

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"Power2GoExpress"=NA

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableTaskMgr"=0 (0x0)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"DriveSys"= {0ce553ae-91b6-4df1-b9e8-46dd6cacd5eb} - C:\WINDOWS\Installer\{0ce553ae-91b6-4df1-b9e8-46dd6cacd5eb}\DriveSys.dll [03/23/2008 07:56 PM 14378]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice"



[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f29d5201-1d05-11db-af56-806d6172696f}]
AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe folder.htt 480 480

*Newly Created Service* - RKPAVPROC



-- End of Deckard's System Scanner: finished at 2008-04-01 19:00:55 ------------

Extra.txt is attached to the post.

A: Windows XP Playing Random Audio Files/Popups

Bumping because it has been 3 days with no reply.

3 more replies
Answer Match 84%

Hello everyone,

I've recently (about two days ago) come across a problem in which random audio sequences from various ads play on my speakers and headphones. They usually only last for about 10-20 seconds and then stop. I have ran multiple scans on normal and safe mode and nothing shows up. There are also occasions where a random Internet Explorer pop-up will suddenly appear. By doing Ctrl + alt + delete during one of the random audio samples I discovered the process IEXPLORE.EXE in the processes tab. Another oddity is that when I have my sound coming out of my headset the "wave" audio setting on the volume settings is automatically turned to the lowest volume. Lastly, I hear clicking sounds similar to when I double click on something albeit I'm not clicking anything... I am currently running Windows XP.

Thanks to anyone that can help.

A:Random audio playing/popups

Hello and welcome.. we should run these tools and see how we are.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware (v1.46) and save it to your desktop.Before you save it rename it to say zztoy.exe alternate download link 1alternate download link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "... Read more

3 more replies
Answer Match 82.74%

The issue just started yesterday with the System Restore virus. Removed this virus, restored all my icons and unhid my files. Then began recieving search redirects, random iexplorer popups and random soundfiles playing in background. Computer is running much slower. Tried other sites recommendations of running TDSSKiller, which I could not get to work even in Safe Mode. That being said, here are the logs which you require be posted:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:22:50 PM, on 11/10/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Frontier\Frontier Security Services\rps.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Frontier\Servicepoint\FrontierServicepointComHandler.exe
C:\Program Files\Frontier\Frontier Security Services\AVG\Identity Protection\agent\Bin\AVGIDSMonitor.exe
C:\Program Files\Frontier\Servicepoint\FrontierServicepoint.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\SearchFilterHo... Read more

More replies
Answer Match 76.86%

As soon as I turn my comp on, I hear mouse clickings, but nothing shows on the screen, the all of a sudden I hear random unknown audio files playing in my computer over and over. Please help!!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:50:00 PM, on 9/1/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Creative\VoiceCenter\AndreaVC.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\DOCUME~1\CARLOS~1.CUA\LOCALS~1\Temp\clclean.0001
C:\Program Files\Common Files\AOL\1170386951\ee\AOLSoftware.exe
C:\Program Files\Common Files\AOL\1170386951\ee\services\safetyCore\ver210_5_4_1\AOLSP Scheduler.exe
C:\Program Files\Common Files\AOL\Loader\aolload.exe
C:\Program Files\Common Files\AOL\Loader\aolload.exe
C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WIN... Read more

More replies
Answer Match 76.86%

Hello there! Here's the problem. Occasionally, and usually for 3-5 minutes, random audio files will play when nothing is open to play them. The audio also happens to be mostly advertising. I assumed a virus, so I have already run a full system virus and rootkit scan with Avira. Avira didn't find anything. Restarting the computer causes the audio to stop for about 10-15 minutes. Can anyone help me?

A:random advertising audio files playing

Hello and

This is a sign that you have some sort of Malware on your computer, that being said follow the instructions below...

Please read the guide here on preparing logs

http://www.bleepingcomputer.com/forums/topic34773.html

and then create a topic here

http://www.bleepingcomputer.com/forums/forum22.html

Good luck

2 more replies
Answer Match 76.02%

I have random audio files playing in the background when all programs are closed. I have found a couple trojans and removed them but cant make the audio files to stop playing. Here are my logs.

Hijackthis Log

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:39:36 AM, on 5/30/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16483)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
C:\Program Files (x86)\Intuit\QuickBooks 2011\QBW32.EXE
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Chris Lummus\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.foxnews.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.sweetpacks.com/?src=10&st=12&crg=3.5000006.10045&barid={B28CA58F-C328-11E2-9199-A4BADBFAE4E9}
R0 - HKLM\Software\Microsoft\Internet Exp... Read more

A:Random audio files playing in the background. Virus?

16 more replies
Answer Match 74.34%

I have random audio files playing. I am at work and can't function without the audio right now. These noises play over all other audio files. If it helps I work for Big Brothers Big Sisters! I recently (this week) ((thought)) I removed spyware protect 2009. Today When I was on google looking for help through IE I was clicking on links being redirected to random sites that were all the same I believe it was shopica. I have had no such issues using Mozilla!

So I just downloaded:
Killbox
Hijackthis (hopefully included log as an attachment)
Clean up!
rootkit revealer

I know how to restart in safe mode (should I stay connected when I do?)

I merely downloaded all programs listed I have not set them up in any fashion.
 

A:hacktool.rootkit, packed.generic.200, random audio files playing...

14 more replies
Answer Match 74.34%

I ripped some audio cds on a Windows 7 pc. The files were somehow assigned random names and folders arbitrarily created. I renamed all the files (lectures) in sequence. When I transfer them to my Galaxy S2, the files again assume random names and are all jumbled (out of sequence). I did this several times.
Thinking about getting a dedicated mp3 player, but budget is pretty tight.

More replies
Answer Match 70.98%

Hello all, Thanks for taking time to read this. I am baffled and I could really use some help.So, I will be sitting at my computer, and say playing a game, when out of no where I hear music, or a commercial. So the first thing I do is check my Volume Mixer, and I notice that Internet Explorer is playing sound... But internet Explorer isnt open?!?!I am pretty sure I have a virus. I did a scan a little while back, thought I picked up everything... But aparantly not..Here is my Hijackthis log.Any help would be appreciatedEDIT: I have just noticed the Explorer.EXE file and am suspicous of the capital EXE at the end of the file..Logfile of Trend Micro HijackThis v2.0.4Scan saved at 10:15:00 AM, on 10/08/2010Platform: Windows 7 (WinNT 6.00.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\Windows\system32\taskhost.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\System32\rundll32.exeC:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exeC:\Program Files\AVG\AVG9\avgtray.exeC:\Program Files\Razer\Copperhead\razerhid.exeC:\Program Files\Razer\Lycosa\razerhid.exeC:\Program Files\Microsoft Office\Office12\GrooveMonitor.exeC:\Windows\WindowsMobile\wmdc.exeC:\Program Files\Pando Networks\Media Booster\PMB.exeC:�... Read more

A:Windows 7 Playing Random Audio

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you let... Read more

16 more replies
Answer Match 66.36%

I have recently installed windows media player 10 and have a problem with it. Whenever i play an audio file in media player, media player becomes very slow and unresponsive. i have also discovered it is using between 90-99% of my cpu usage while playing audio files. if i use another media player (ie winamp) i do not have this problem, but i prefer to use media player. n e suggestions???
 

A:Windows Media Player 10 playing audio files

you can roll it back to wmp9 in add/remove-windows componets and delete the wmp10 install file. then redownload it. but you may have some conflict or it could be just a bad file. i like 9 better then 10 anyway.
 

3 more replies
Answer Match 65.94%

Random audio ads playing in background at various times, even when no apps are open.  Initials attempts to clean were temporary, malware returns (didnt seem to match any Google'd audio ad malware results).  Utilizing Nirsoft CurrPorts, did determine that the process is running IE in background, able to temporarily stop the audio by killing the IE process.
 
TIA for assistance in resolving this issue.
 
*****BEGIN LOG******
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:08-06-2015
Ran by ******* (administrator) on *****-OFFICE on 11-06-2015 07:56:09
Running from C:\temp\FRST
Loaded Profiles: lMende & UpdatusUser (Available Profiles: lMende & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClien... Read more

A:random audio ad playing in background at random times - no apps open

Greetings leadface and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.If you would allow me to call you by your first name I would prefer to do that. ===================================================Ground Rules:First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met. Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter prob... Read more

16 more replies
Answer Match 65.94%

Hello I have recently got an email from my friend saying that I could get some free iTunes voucher codes. so I opened the program while using AVG 9.0, My computer then changed its theme to the windows 98 theme. and started to shut down but I went into the Run tool and aborted the shutdown.I then scanned with avg for viruses but I had no luck, so I installed Avast 5 then uninstalled AVG.Avast found 7 Infected files then I deleted them and was told to restart, so I did and everything was as normal.But then Windows was asking to update so I did but 3 security updates failed(Those 3 updates were the only ones there).So I tried going to the update center but this message popped up"Connection closed by remote server" Image below.While I was trying to find out why Windows Update was not working random pop-ups opened every so often. Some of the websites tried to download Viruses on opening but others were just scams. Avast stopped the viruses from downloading immediately. I then ran a boot scan with Avast and found 3 Infected Files(Deleted).Then more pop-ups opened more frequently and many websites on Google.com were redirected to the same websites as the pop-ups. I was then told to get Malwarebytes Anti-Malware, this program found 5 infected files(Deleted).Pop-up Exampleshxxp://cndot.net/?xurl=http://hytr81zz02.com/RKL2oxJe6w6qwGo093f67c7b910289f036f95a2a1501b0eb06c&xref=http://cndot.net/search.phphxxp://currenteliminator.com/?xurl=http://hytr81zz02.com/KZN1pyLD734jSDs... Read more

A:Cannot update Windows XP(In any way), Random popups leading to malicious files

Anyone know how to fix this? Please

7 more replies
Answer Match 65.52%

Hello TechSupportForum :)

I am currently having issues with my asus laptop; since two days ago, it has been behaving strange:
1. The files/folders that I used to save on the desktop (under my account, i.e. user) are missing. I can only find some of the program shortcut such as Mozilla Firefox, Nitro Reader, AVG2013, etc.

However, sometimes those shortcuts, when double-clicked, would work and sometimes wouldn't. When would work, the program behaves as if it were the first time I used it, with the welcome screen or tips... When wouldn't work, it pops up a small dialog, stating at the top of the bar: "Windows Security" then at the next part it says: "These files can't be opened. Your internet security settings prevented one or more files from being opened." And then there is a link to "Why these files can't be opened?"

When I click the link, it takes me to the Windows Help and support dialog; which shows the setting for the Internet Explorer, such as the zone for local, intranet, etc...

One weird thing about this first issue is that when I look in the C:\windows\Users\User\Desktop ; my files and folders are there. But again, sometimes are okay to open, sometimes aren't.

Like when I chose to save the dds.scr on my desktop, it was saved well...but I wasn't able to locate in the desktop. Then I tried running the file without saving it in the first place, but there was no such option...then I tried changing the default location of downloaded file t... Read more

A:Windows Security (These Files can't be opened) & Weird Audio playing

Bump, please.

19 more replies
Answer Match 64.26%

Hi,

Posting for my wife's Sony VAIO laptop. Within the last month it has experienced two things that I think may be linked to an infection.

1) Popups (well, new tabs) while using Firefox. Seem to be for a variety of places, most recently "buzzcity" with an animation of a not-very-clad woman looking to "chat".

2) The computer will start playing songs I've never heard before (and is not stored on the computer anywhere) when it is left alone for a while - this has happened several times in the middle of the night.

I have recently run MalwareBytes in safe mode and it removed a couple of things, but the popups at least continued (haven't left the machine alone long enough to see if the songs come back).

My DDS log is below and I have attached the other two requested files. Note that when I opened GMER I was not able to check a large number of the boxes that your instructions requested, as they were greyed out - not sure if this is an issue.

Also, I do not have access to a Windows install disc or boot CD, but would be happy to make one if given instructions.

Many thanks,
Gus

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_30
Run by Lindsay at 13:05:19 on 2012-02-08
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.2.1033.18.3950.2698 [GMT -5:00]
.
AV: Norton Internet Security *Disabled/Outdated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-D... Read more

A:Popups and random music playing

Couple of further bits of info:

- the popups are for buzzcrazy, not buzzcity
- VAIO Messenger has been popping up with errors recently as well -this is new
- I also can't use the USB ports (e.g., to access the external hard drive). They do work in safe mode, but not in regular windows

Thanks,
Gus

1 more replies
Answer Match 64.26%

I'm unfortunately somewhat computer illiterate, so bear with me as I try to break down the issue I'm encountering.

I use an online database called Verint Impact 360 to gather audio files from a company's call center. I have the Verint codecs (VerintCodecs.exe) installed on my Windows PC which allow me to play the audio files using Windows Media Player. However, when I try to open the files using a customized program designed by my company, I'm unable to play the calls.

We had an IT member that found a way to convert the calls into a usable format with OpenOffice Spreadsheet by renaming the files. Unfortunately, he's since left the company, and I was unable to determine how he was able to convert the calls.

So, I guess my question is: Is there some way to embed the codec into the call file so that it could be played on other platforms?

Summary: -The calls are in .wav format -I have installed on the computer VerintCodecs.exe -I can only play the audio files in Windows Media Player (I've tried on the customized program and VLC, neither of which work)

I would greatly appreciate if someone could give me some guidance.
 

A:Solved: Playing audio files that require a codec in programs other than Windows Media

If VLC will not play the files, then they are not the usual format of a .wav file
However, playing WAV files on VLC is rather effortless. That’s because VLC comes equipped with the digital programming that instructs it how to handle data sent via the WAV format. Here’s a step-by-step procedure for playing WAV files on the VLC.
1) After you have downloaded and installed the VLC player, open the VLC media player.
2) The VLC media player will display on your screen. On the menu bar, click on “Media.”
3) A drop-down window appears. Click on “Open File” and navigate to the location of the WAV file.
4) Click on the file in the “Select one or more files to open” window or once you are in the folder that the file is located in, type the name of the file in the “File name” window.
5) Click on the “Open” button. The file will load and the VLC media player will begin playing it automatically.
 

8 more replies
Answer Match 63.42%

In Mac OS Quick time does this (I can have 10 audios all playing simultaneously). WMP nor VLC seem capable of this.

I need a solution to this for both Linux/ubuntu and Windows 7. Maybe there's a way to customize vlc or wmp?

Thanks.

A:I need an audio player capable of playing multiple audio files simul

Multiple instances of MPC maybe?

2 more replies
Answer Match 63%

I am getting browser windows opening saying my pc is infected and at times it also plays commercials and music. I have tried running some other malware removal tools but they are not finding anything. Thanks for all your help in advance. My HiJackThis logfile is attached.
 
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 5:29:01 PM, on 9/26/2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0000)
 
 
Boot mode: Normal
 
Running processes:
D:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
C:\Fraps\fraps.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
D:\Program Files (x86)\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe
C:\Program Files\avast software\avast\avastui.exe
C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
F:\Battle.net\Battle.net.7963\Battle.net.exe
F:\Battle.net\Battle.net.7963\Battle.net Helper.exe
F:\Battle.net\Battle.net.7963\Battle.net Helper.exe
C:\Users\Rob\AppData\Roaming\Spotify\Spotify.exe
C:\Users\Rob\AppData\Roaming\Spotify\SpotifyCrashService.exe
C:\Users\Rob\AppData\Roaming\Spotify\Spotify.exe
C:\Users\Rob\AppData\Roaming\Spotify\SpotifyWebHelper.exe
C:\Users\Rob\AppData\Roaming\Spotify\Spotify.exe
C:\ProgramData\Battle.net\Agent\Agent.5195\Agent.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Pro... Read more

More replies
Answer Match 62.58%

Hi,

I was wondering if anyone could help me with my problem. Yesterday I was getting these random audio ads and popups even though I wasn't on any browser. To be honest I was downloading keygens and I think that's where the malware got in. I have since deleted everything I downloaded and did a full security scan with Norton 360 and MalwareBytes and removed any threats. The ads and popups have stopped but I just wanted you guys to look at my HijackThis log to see if there is anything else lurking about that needs deleted. Here is my log:

Logfile of HijackThis v1.99.1
Scan saved at 11:52:37, on 06/07/2011
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)

Running processes:
C:\Users\EDWARDS\AppData\Local\Valued Opinions\PanelApp\PanelApp.exe
C:\Program Files (x86)\Packard Bell\Hotkey Utility\HotkeyUtility.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\NetRatingsNetSight\NetSight\NielsenOnline.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\NetRatingsNetSight\NetSight\NielsenOnline.exe
C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program F... Read more

More replies
Answer Match 62.16%

I'm using and IBM Thinkpad running XP and recently had some virus issues. Symantic Antivirus and Spybot Search and Destroy are showing my machine is clean, but my machine keeps playing short audio snippets at random times of what sounds like TV sound (commercials, etc.). I've tried everything but no luck. Any help would be Greatly appreciated.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:45:41 AM, on 8/25/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
C:\WINDOWS\system32\AFinding.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\Nobicyt.exe
C:\WINDOWS\system32\perfs.exe
C:\WINDOWS\System32\RegSrvc.exe
C:\WINDOWS... Read more

More replies
Answer Match 62.16%

First off, I want to thank you for viewing this post and for helping me resolve this issue. I'll give you the back-story of what happened. This morning, I turned on my computer as normal and played games. I then turned on my Skype so I could talk to the friends I was playing with. After a while, while playing my game, my computer randomly restarts itself. When it finally booted, I immediately got back on Skype and started my game. After some time, however, it started playing random audio such as advertisements, music, etc. I thought it was Skype so I closed it. The audio continued to play. I knew it couldn't have been my game because League of Legends does not play radio and advertisements. However, I closed my game after a while in an attempt to figure out what is playing the audio. I opened up my Volume Control and noticed that there was something called "Name Not Available". I muted this and the audio stopped. This should not be there, however, and I'm trying to figure out what is making this audio play and how I can get rid of it.
 
Anti-virus/Anti-spyware programs:

AVG (Free Version)
Malwarebytes Anti-Malware
CCleaner

 

A:Random Audio Playing

No one seems to answer on this page. I had the same problem, and I posted on this page this morning. I have the same problem as you, and no one answered. Instead of waiting 5 days,  I posted my problem on http://www.techspot.com/ someone answered within 10 minuets. I am now on the last step. If you want to veiw my thread, its here: http://www.techspot.com/community/topics/name-not-available-in-audio-mixer.199084/#post-1370593

7 more replies
Answer Match 62.16%

This sounds like a similar problem as others and I suspect we may have gotten a rootkit on the computer. We get random audio sound effects as well as ads play. Also, at times search results seem to be hijacked and send us to other locations.

Please help correct this problem.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:51:37 AM, on 9/1/2012
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Internet Explorer v9.00 (9.00.8112.16447)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Internet Content Filter\SafeEyes.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files (x86)\AVG Secure Search\vprot.exe
C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files (x86)\C... Read more

More replies
Answer Match 62.16%

Last night some random audio ads started playing on my PC - not from any webpage, but from the PC itself. I ran TDSSKiller but it didn't find anything, I also ran Malwarebytes Anti-malware, which found 11 objects including two Trojans. I quarantined them and deleted them.
 
I want to make absolutely sure, however, that my PC is free of malware now. I'd be very grateful to anyone who helped me out. I ran a DDS log and the results are as follows:
 
DDS
 
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 6.0.2900.5512  BrowserJavaVersion: 10.21.2
Run by mike01 at 7:39:37 on 2013-08-28
Microsoft Windows XP Home Edition  5.1.2600.3.932.81.1033.18.2047.679 [GMT 1:00]
.
AV: Sophos Anti-Virus *Disabled/Outdated* {3F13C776-3CBE-4DE9-8BF6-09E5183CA2BD}
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ================
.
H:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe
H:\WINDOWS\Explorer.EXE
H:\Program Files\AVAST Software\Avast\AvastSvc.exe
H:\WINDOWS\system32\spoolsv.exe
H:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
H:\Program Files\Belkin\F5D8053\v6\WifiSvc.exe
H:\Program Files\Bonjour\mDNSResponder.exe
H:\Program Files\Java\jre7\bin\jqs.exe
H:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
H:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
H:\WINDOWS\system32\nvsvc32.exe
H:\Program Files\Malwarebytes' Anti-Malware\mbamgui... Read more

A:Random Audio Ads Playing

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/505860 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

4 more replies
Answer Match 62.16%

Tried a few things from other sites, nothing worked, now I'm hoping someone will be awesome enough to help me out.

I just get random commercials and snippets of audio playing and it will take over my soundcard so no other device can use it.

I killed every process I could in task manager and it was still going.

I don't know what other detail to give except I'm on Windows 7.

Thanks in advance for any help.


.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421
Run by emo at 18:22:43 on 2011-11-18
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.2036.415 [GMT -8:00]
.
AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Lavasoft Ad-Watch Live! *Enabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.... Read more

A:Random audio playing

Hello and welcome to TSF


We will do our best to assist you. However, in order to do so, please follow all instructions provided in the sequence given. Do not install/re-install any programs or run any fixes or scanners that you have not been instructed to use. This may cause conflicts with the tools being used in the cleanup process.

If you have questions regarding any of the instructions or problems running any tools, please let us know.

You may wish to subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

-------------------------------------

You have more than one antivirus program running:Lavasoft Ad-Watch Live! Anti-Virus and Microsoft Security Essentials. This does not give you extra protection. They will conflict with each other and give false positives, slow your system down and cause system instability. Chose one a/v to keep and uninstall the other.



We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

A guide and tutorial on using ComboFix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
See this link for instructions on how to do this:
How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

... Read more

4 more replies
Answer Match 62.16%

My laptop will play random audio, usually kitchen cleanser commercials, even when nothing is running except backround programs. Logfile of Trend Micro HijackThis v2.0.4Scan saved at 3:10:06 PM, on 9/18/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Alwil Software\Avast5\AvastSvc.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\AVG\AVG9\avgwdsvc.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\AVG\AVG9\avgnsx.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOW... Read more

A:Random audio playing - Please help!

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

25 more replies
Answer Match 62.16%

I am presently trying to remove an audiolog.exe malware from a computer running Windows XP and any assistance would be helpful

Thank you

Paul
 

More replies
Answer Match 62.16%

Hi,
 
There are random audio advertisements playing in the background on my computer. They are usually short bursts of different ads that come on for about 5 seconds and then turn off for a little while. They are not the result of an application or program, because even when everything is closed I can still hear them. They are fairly recent, and have been playing for about 3 weeks. I can't seem to figure out how to get rid of them. I am running a Windows Vista 32-bit system on a Toshiba laptop. Any help would be greatly appreciated.

A:Random audio ads playing

Welcome aboard  Please download Rkill (courtesy of BleepingComputer.com) to your Desktop.There are 2 different versions. If one of them won't run then download and try to run the other one.You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/Double-click on the Rkill desktop icon to run the tool.If using Vista or Windows 7 right-click on it and choose Run As Administrator.A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.If not, delete the file, then download and use the one provided in Link 2.Do not reboot until instructed.If the tool does not run from any of the links provided, please let me know.If normal mode still doesn't work, run the tool from safe mode.When the scan is done Notepad will open with rKill log.Post it in your next reply.NOTE. rKill.txt log will also be present on your desktop.

3 more replies
Answer Match 62.16%

Greetings:

I found you guys through a google search and read the thread about random audio playing. I followed the steps about downloading Hijack this and have a log (That I will place below.) Could someone take a look and give me a hand with this?

To give more information, I was attacked last night through a unsecured browser and immediately severed the connection. Then I ran Ad-Aware, Clean-up and will run Spybot in a minute. I found a malicious program that I immediately got rid of but I still get random audio ads playing.

Thanks for your assistance in advanced

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 4:28:03 PM, on 1/5/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\S24EvMon.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\... Read more

More replies
Answer Match 62.16%

Sometimes my internet explorer 8 opens in the background and runs random annoying audio ads... Also when i install malwarebytes i have to rename the program to "go.exe" or something like that in order for it to actually open, otherwise it partially opens and shows up in task manager but wont pull up on screen.. its quite annoying.here's my log..aLogfile of Trend Micro HijackThis v2.0.2Scan saved at 9:25:03 PM, on 8/10/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\Linksys\WMP110\gtwpssrv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\PnkBstrA.exeC:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYSC:\WINDOWS\system32\svchost.exeC:\Program Files\Links... Read more

A:Random IE audio ads playing

Welcome to the BleepingComputer Forums. Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. If you have not already downloaded Random's System Information Tool (RSIT), please download Random's System Information Tool (RSIT) by random/random which includes a HijackThis log and save it to your desktop. If you have RSIT already on your computer, please run it again. Double click on RSIT.exe to run RSIT. Click Continue at the disclaimer screen. Please post the contents of log.txt. Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. Please post your HijackThis log as a reply to this thread and not as an attachment. I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. I do not think that you are attaching anything scary but others may do so. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other tool until ... Read more

2 more replies
Answer Match 62.16%

This problem just recently started on Sunday. Two audio advertisements played at random periods during the day, and then a popup unrelated to the browser I was using (the ad program's icon in the toolbar was a blank sheet of paper) appeared. I assumed it was something to do with Skype, but ran Malwarebytes and Microsoft Security Essentials to be safe. Microsoft came up clean, but MB found Malware.Packer.Gen and PUP.Optional.OpenCandy. Both were removed without any problems.
 
Today another random audio ad played, so I came here to seek help. This computer has no other history of infections.
Any assistance would be appreciated. Thank you.
 
 
DDS Log
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.16518  BrowserJavaVersion: 10.45.2
Run by Anslea at 21:21:21 on 2014-02-18
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.8078.5107 [GMT -5:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\Microsoft Security Client\MsMpEng... Read more

A:Random Audio Commercials/Popups

Hello Catghost I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same"... Read more

17 more replies
Answer Match 61.32%

So i got my laptop about a week ago and i'm already having virus issues
My laptop has been playing random bits of audio and commercials and music and just a bunch of random stuff
it happens even when i have the wireless turned off and when my laptops pretty much idle
i think i may have contracted it from an infected data disk i got from someone but i'm not sure cuz i have Limewire too (which is now uninstalled)

I've also been getting an "Improper plug-in. Adobe Reader will now quit" message at random times
I have no idea what thats about

The last thing is, even when i dont have IE pages open i get asked at random times about being redirected to another page and if i want to stay on this website

Also my Norton isn't picking it up any of this either, i've run that about 10 times on full scan to catch it but ended up with nothing
i have a DDS log and HJT log as well
Any kind of help would be greatly appreciated as i'd rather not have to do a system restore already...
DDS (Ver_09-05-14.01) - NTFSx86
Run by Tony at 14:18:53.08 on Sat 06/13/2009
Internet Explorer: 8.0.6001.18783
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.3002.1582 [GMT -4:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windo... Read more

A:Its that random audio virus also getting a bunch of odd popups

Hello and to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.-----------------------------------------------------------We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, ... Read more

11 more replies
Answer Match 61.32%

I am using Windows 7.Hello everyone @ BleepingComputer! I've been having this recent problem where random audio clips would play. It ranges from advertisements, music, to random people just talking. There seems to be no apparent theme with these audio clips and they only play when I disable/enable one of my playback devices. I usually switch between my headphones and speakers, and when I do, the random clips come on.I've done some research on the topic and looked for the culprits in my system32 folder but I had no luck there. So, I followed the instructions all of the other helpers have given and ran my own virus scan (MSE & SpyBot) along with MalwareBytes and finally ComboFix. The three former choices showed nothing, including MalwareBytes, but ComboFix managed to delete install.exe which I thought was the source of my problem. A quick Google search revealed to me that this was in fact a virus and I thought that I wouldn't have the problem anymore. Sadly I was mistaken, and the random audio keeps playing and it's really annoying.I decided to run ComboFix again to see if the install.exe had managed to find its way back into my computer but ComboFix showed that it didn't delete any threats. The printed log showed this.So now I'm stuck. I've done everything that the helpers have instructed in previous threads and to no avail. What should be my next plan of action? Reformat?Thanks BleepingComputer. I appreciate your patience.~ Ro... Read more

A:Random audio clips playing

Since you ran Combofix....Please follow the instructions in ==>This Guide<== starting at Step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

3 more replies
Answer Match 61.32%

Earlier today i visited some of my usual sites online. there was a clicking sound like web pages being opened but no pages were popping up then advertisments began playing in background not always the same advertisment. MBAM scan clean Mcafee clean ad-ware clean please help

thanks

A:Random audio playing in background

Hello and welcome,we'll try these now.Next run ATF and SAS: If you cannot access Safe Mode,run in normal ,but let me know.Note: On Vista, "Windows Temp" is disabled. To empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator".From your regular user account..Download Attribune's ATF Cleaner and then SUPERAntiSpyware , Free Home Version. Save both to desktop ..DO NOT run yet.Open SUPER from icon and install and Update itUnder Scanner Options make sure the following are checked (leave all others unchecked):Close browsers before scanning.Scan for tracking cookies.Terminate memory threats before quarantining.Click the "Close" button to leave the control center screen and exit the program. DO NOT run yet.Now reboot into Safe Mode: How to enter safe mode(XP)Using the F8 MethodRestart your computer. When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu. Select the option for Safe Mode using the arrow keys. Then press enter on your keyboard to boot into Safe Mode. Double-click ATF-Cleaner.exe to run the program.Under Main "Select Files to Delete" choose: Select All.Click the Empty Selected button.If you use Firefox or Opera browser click that browser at the top and choose: Select AllClick the Empty ... Read more

1 more replies
Answer Match 61.32%

For the past few days my computer has been playing random bits of audio from time to time. These sounds have ranged from news interviews to bits of music. They play even when no other applications are running. I've run Malwarebytes several times and each time it found and removed malware. However the problem persists. I ran a program called TDSSkiller I believe it was called, but it didn't find anything. Whenever the sound plays it appears as Name Not Available in the volume mixer. I'm using Windows 7 64-bit as my OS. If you guys could help me I'd greatly appreciate it, this is extremely annoying. Thank you.

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.4.1
Run by Kevin at 2:29:33 on 2012-08-14
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.6049.3266 [GMT -4:00]
.
AV: Trend Micro Titanium Internet Security *Disabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902}
SP: Trend Micro Titanium Internet Security *Disabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalS... Read more

A:Random Audio Playing on Computer

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

4 more replies
Answer Match 61.32%

HJT Log below.
System will play random clips of audio.
Trend Anitvirus and MS Defender find nothing wrong.
Thank you in advance for your help.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:23:17 AM, on 7/1/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINDOWS\system32\ifxspmgt.exe
C:\WINDOWS\system32\ifxtcs.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
C:\Program Files\PDF Complete\pdfsvc.exe
C:\WINDOWS\system32\IfxPsdSv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\Program Files\HPQ\Shared\Sierra Wireless\Win32\Unicode\SWIHPWMI.exe
C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
C:\Program Files\Trend Micro\OfficeScan Client\TmPfw.exe
C:\WINDOWS\TEMP\PBA3F8.EXE
C:\Program Files\Trend Micro\OfficeScan Client\CNTAoSMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hewlett-Packard\IAM\bin\asghost.exe
C:\WINDOWS\system32\Accelero... Read more

A:HJT Log - Random Audio Clips Playing.

Hi Welcome to TSG!!
Please visit this webpage for instructions for downloading and running ComboFix.

Post the log from ComboFix when you've accomplished that, along with a new HijackThis log.
 

1 more replies
Answer Match 61.32%

Hi, My computer recently started occasionally playing random audio clips. This happens a few times an hour, and it occurs even if no application or window is open. Sometimes the clips seem to be the audio portion of a DIY video or a health/lifestyle news item, and sometimes it's in Spanish. My computer is a Dell Precision laptop with an Intel Quad-Core i7-2620M CPU, and 8 GB of RAM. I'm running Windows 7 Professional 64-bit, Service Pack 1. After the problem started, I installed all available Windows updates and then ran a full Defender scan. Defender found and removed the Alureon virus, but this didn't fix the problem. I saw that this problem has appeared in the BC forums before, but I see that the fix depends to some extent on diagnostic info from the infected machine, so I did not attempt to recreate any of the fixes. Any help you can give me would be much appreciated. Thanks, MikeEdit: Moved topic from Windows 7 to the more appropriate forum. ~ Animal

A:Random audio clips playing

Hello Mike, and Welcome -As you stated, there can be several reasons for this type of problem. This can range from a minor infection, to a major problem.So lets start with a bit of information from your computer. 2 basic programs first that only take a few minutes. This can show us your Security programs, and if other programs are up to date.Download Security Check by Screen317* Save it to your Desktop.* Double-click SecurityCheck.exe* Follow the onscreen instructions inside the black box.* A Notepad document should open automatically called checkup.txt; please post the contents of that document.Note: If any security program requests permission to access the Internet, allow it to do so.  This can show us if there is / has been problems with your computer, and if it relates to any programs you use.Download MiniToolBox, Save it to your desktop and run it.Checkmark the following boxes:•Flush DNS•Report IE Proxy Settings•Reset IE Proxy Settings•Report FF Proxy Settings•Reset FF Proxy Settings•List content of Hosts•List IP configuration•List last 10 Event Viewer log•List Installed Programs•List Users, Partitions and Memory size.•List Minidump Files Click Go and copy / paste the result (Result.txt). Thank You -

11 more replies
Answer Match 61.32%

Random audio ads and news clips keep playing on my computer and they are definitely not originating from any window I have open.

SysInfo:

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz, Intel64 Family 6 Model 42 Stepping 7
Processor Count: 8
RAM: 8139 Mb
Graphics Card: Radeon (TM) HD 7690M XT, 1024 Mb
Hard Drives: C: Total - 689290 MB, Free - 585568 MB; D: Total - 21849 MB, Free - 2353 MB; E: Total - 4054 MB, Free - 1098 MB;
Motherboard: Hewlett-Packard, 17FB
Antivirus: Microsoft Security Essentials, Disabled

HijackThis Log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:52:23 AM, on 9/8/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16447)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HP SimplePass 2012\TouchControl.exe
C:\Program Files (x86)\HP SimplePass 2012\BioMonitor.exe
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Users\Trevor\Local Settings\Apps\F.lux\flux.exe
C:\Program Files (x86)\Java\jre6\bin\javaw.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
C:\Program Files (x86)\Commo... Read more

A:Random audio playing in background

9 more replies
Answer Match 61.32%

Hi guys,

I've been having these random audio ads play in the background and it's driving me mad - tried running Anti-Malware Bytes, Kaspersky TDSS etc. and the ads still persist. I'm not in the mood to reformat my hard-drive, so I'm hoping someone here can help. Thanks in advance!

Here is my FRST logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Anthony (administrator) on HOMEPC on 11-04-2015 17:50:48
Running from C:\Users\Anthony\Desktop
Loaded Profiles: Anthony (Available profiles: Anthony)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporat... Read more

A:Random audio ads playing in background

And here is the Addition.txt log:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Anthony at 2015-04-11 17:51:06
Running from C:\Users\Anthony\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (Version: 7.2.4 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1... Read more

23 more replies
Answer Match 61.32%

While visiting a site I look at everyday (online classifieds ads), my system suddenly rebooted on it's own and when it restarted, 2-3 overlapping audio loops of some television shows or ads were playing. No programs were running and Task Manager shows no processess using large amounts memory but the performance monitor showed the CPU was maxed out. Norton full scan showed nothing of interest, it removed some tracking cookies. Malware scan found one file and removed it. Rebooted and the problem is still present. I have not yet been able to get the gmer to run successfully, keeps not letting me save the "ark.txt" file as you requested.

requested log files...

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16483
Run by Brad at 16:15:23 on 2013-05-31
.
============== Running Processes ===============
.
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.retrievertraining.net/forums/
uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=83&bd=Pavilion&pf=cndt
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=83&bd=Pavilion&pf=cndt
mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=83&bd=Pavilion&pf=cndt
uProxyOverride = 127.0.0.1:9421;<local>
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
uURLSearchHooks: YTNavAssistPlugin Class: {81017EA9-9AA8-4A6A-... Read more

A:Random audio loops playing

Hi and Welcome!!

My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:
The fixes are specific to your problem and should only be used for the issues on this machine.
It's often worth reading through these instructions and printing them for ease of reference.
If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
Please reply to this thread. Do not start a new topic.
If you happen to have a flash drive/thumb drive please have that ready in the event that we need to use it.
Please be sure to subscribe to the topic if you have not already done so.
IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.
DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your operating system and losing all your programs and data.

Having said that.... Let's get going!!
----------

Please download aswMBR to your desktop.
Double click the aswMBR icon to run it.
Click the Scan button to start scan.
If you are asked to update the Avast Virus database please allow it to ... Read more

19 more replies
Answer Match 61.32%

I am fixing my friends laptop. He had some issues that were resolved using Malware Anti-Malware Bytes as his computer was completly unprocted before. He also had browser redirects that were fixed with Hijack this. However, after resolving those issues he still has a strange problem. Random audio ads will play even when there is nothing open. I thought it was maybe simply a problem with Google Chrome but it still happens when Chrome is not open. Is there any way to resolve this?

I actually just ran a MAMB scan. The last time I did so there were 0 objects infected this time there were six. I allowed MAMB to fix them. I have the log saved if posting it is required.

A:Random Audio Ads Playing In Background

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Please download GMER from here(doesnot work on 64 bit OS)http://www2.gmer.net/download.phpTemporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.GMER will open to the Rootkit/Malware tab and perform an automatic Full Scan when first run. (do not use the computer while the scan is in progress)If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.Now click the Scan button. If you see a rootkit warning window, click OK.When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.Click the Copy button and paste the results into your next reply. DownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here

3 more replies
Answer Match 61.32%

Hello I am new here and I am not that good with computers but I really need some help. My computer has random audio playing with no applications open. I am starting school soon and I need this PC clean as soon as possible. Thank you for your time.

A:Random audio playing in the background

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and
Quote:




Having problems with spyware and pop-ups? First Steps




a link at the top of each page.

Please follow our pre-posting process outlined below.

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Answer Match 61.32%

I've been having problems with my computer just playing random audio like jokes, interviews and music. It happens and no windows pop up to show that i can stop it i usually have to restart my computer to stop it or wait for it to stop which can be a hour or two.i have a log report any ideas on what to do?








thank you for your time.

More replies
Answer Match 61.32%

Hi, I have recently had random audio start playing in the background. At the moment is seems to be the news, but previously it has been music and foreign talking. It has happened before a couple of months ago but I managed to fix the issue with a system restore. Can you help with a more permanent fix. I am not particularly computer savy. Thanks in advance.
 

A:Random audio playing in background

Hi and welcome.

Please download the latest version of TDSSKiller from here and save it to your Desktop.

Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.

Put a checkmark beside loaded modules.

A reboot will be needed to apply the changes. Do it.
TDSSKiller will launch automatically after the reboot. Also your computer may seem very slow and unusable. This is normal. Give it enough time to load your background programs.
Then click on Change parameters in TDSSKiller.
Check all boxes then click OK.

Click the Start Scan button.

The scan should take no longer than 2 minutes.
If a suspicious object is detected, the default action will be Skip, click on Continue.

If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.

Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Please download ComboFix from Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**

Please, never rename Combofix unless instru... Read more

1 more replies
Answer Match 61.32%

I am not sure if I am supposed to run GMER since I have 64 bit system. Please let me know if I need to do this. I am, however attaching the other two zip files as requested.

I originally posted in the wrong area so below is the original post and reply.

Original post:
Hi, I am having an issue with random audio playing on my laptop. It starts after I connect to the internet. It does not play all of the time, but in spurts. There are ads, music, foreign lanquages, etc. They sometimes play on top of each other.... like 4 or 5 at a time. When this happens, it is not only annoying, but seems to slow my computer down. I have tried virus scanning, using PC clean up tools, etc. I am really at a loss. I did read another post in one of your forums regarding the same issue and you directed them to download systemlook.exe to the desktop. I have done that but did not run it yet. I would like to know what I should do before I run another thing! I hope you can help me. Looking forward to your instructions.
Debbie

Original reply:
Hi and welcome to TSF I would suggest you go here and follow the instructions NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum
gather the ifno requested and make a note of anything you are unable to do then make a new thread here Virus/Trojan/Spyware Help - Tech Support Forum and post the info in that thread not here include the things you could not do


.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Int... Read more

A:Random Audio playing on laptop

Hi,

Download aswMBR to your desktop. Double click the aswMBR.exe to run it
Click the Scan button to start scan

On completion of the scan click save log, save it to your desktop and post in your next reply.

19 more replies
Answer Match 61.32%

A few days ago, while playing a game and Skyping with my friends, my computer restarted by itself. Confused, I ignored it and waited for it to boot. Once it finally booted up, everything seemed normal, so I started up my game again and got on Skype with my friends. A few minutes in, random advertisements, music, etc. started playing. I assumed it was Skype so I closed it. The audio still played. Once my game was over, I closed it and the audio still played. I had no programs open. I ran scans with Malwarebytes, AVG, and Malwarebytes rootkit. I then made a forum post here in an attempt to get help from someone who knows more about this than I do. The link to that can be found here: http://www.bleepingcomputer.com/forums/t/519574/random-audio-playing/
 
I had gotten help from someone named "Broni", who I thank very much for assisting, and I was advised to post here about my issue.
 
Programs that I have scanned with:
Malwarebytes
Malwarebytes Rootkit
FSS
Minibox
Rkill
AVG
Security Check
The logs for these can be found in the link I posted above for my previous forum post. Thank you for all your help and thank you for viewing my post.

A:Random Audio Playing When Nothing Is Open

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
 
Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your re... Read more

7 more replies
Answer Match 61.32%

Hello, I hope someone can help me out. My computer has been playng random audio clips out of nowhere lately. It seems to happen after it has been running for awhile. It plays anything from comedy clips, news clips, music (mostly rap and it has very offensive language). I am so frustrated with this and wondering how to stop it from happening.

I have run an avg scan and it comes up with nothing. I have disabled the sounds under sounds and audio devices in control panel. I just removed my yahoo messenger b/c that kept popping up randomly and then the audio would start in...nothing has helped.

The only way to stop the sounds are to turn the computer off and reboot. I hope someone can help me out. Thanks!!

A:computer playing random audio

Just to see if its a virus you should disconnect from the internet and see if it still plays the audio. If it doesn't that means a virus could be connecting to the net and prolly connecting to some web radio station.
If it still occurs than it must be an issue somewhere else.

2 more replies
Answer Match 61.32%

So far I've wiped my primary ssd via deleting all partitions but the problem seems to still persist. Could the malware be hidden somewhere on my secondary hard drives?  I believe it's piggybacking onto the Shockwave plugin on chrome to play the ads but I'm still not sure where the source is.
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-06-2015 01
Ran by Bryan (administrator) on BRYAN-PC on 01-07-2015 22:30:18
Running from C:\Users\Bryan\Desktop
Loaded Profiles: Bryan (Available Profiles: Bryan)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonit... Read more

A:Random audio ads playing in Chrome

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.

start

CloseProcesses:

(Microsoft Corporation) C:\Windows\System32\msconfig.exe
HKLM-x32\...\Run: [] => [X]
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

End
Save the files as fixlist.txt in the same folder where the Farbar tool is running from.The location is listed in the 3rd line of the Farbar log you have submitted.Run FRST and click Fix only once and wait.Restart the computer normally to reset the registry.The tool will create a log (Fixlog.txt) please post it to your reply.===Reset Chrome...Open Google Chrome, click on menu icon which is located right side top of the google chrome. Click "Settings" then "Show advanced settings" at the bottom of the screen. Click "Reset browser settings" button. Clear your cache and cookieshttps://support.google.com/chromebook/answer/183083?hl=enRestart Chrome.====If the problem persists continue.Temporarily disable your AV program so it does not interfere.Info on how to disable your security applications ... Read more

2 more replies
Answer Match 61.32%

On tuesday i was using my computer and it just started playing random audio. I closed all programs and it still would not stop. I then rebooted to safe mode and ran a MalwareBytes scan. I had something like 56 infections. I was able to quaranteen and delete all succesfully. I then rebooted to normal mode and did a system restore. I would post the MalwareBytes log but i lost it somewhere along the way. Here is my HJT logs:

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ACS.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Prog... Read more

A:Computer playing random audio

DDS (Ver_09-02-01.01) - NTFSx86
Run by Bryan at 12:37:59.35 on Fri 02/20/2009
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.958.544 [GMT -6:00]

AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Updated)
AV: avast! antivirus 4.8.1335 [VPS 090219-0] *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\ACS.exe
svchost.exe
svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\WINDOWS\System32\svchost.exe -k H... Read more

1 more replies
Answer Match 61.32%

Program runs on startup and plays odd sound clips/advertising. Ending the process forces windows to restart. Appears to be originating from "C:\Windows\system32\svchost.exe -k DcomLaunch" Thank you for your time.
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 8.0.7600.16671  BrowserJavaVersion: 10.45.2
Run by Legato at 13:31:34 on 2014-01-03
Microsoft Windows 7 Professional   6.1.7600.0.1252.1.1033.18.16297.10157 [GMT -5:00]
.
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\atieclxx.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files (x86)\Dyyno\Dyyno ... Read more

A:svchost.exe playing random audio

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number). Please downloadJunkware Removal Tool to your Desktop.Please close your security software to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.The tool will open and start scanning your system.Please be patient as this can take a while to complete, depending on your system's specifica... Read more

2 more replies
Answer Match 61.32%

I have a dell Vostro 2510 windows xp. For the last 2 months i have been fighting this problem. I get random audio playing in the background at differnent intervals. I have norton 360 and it dosn't seem to be picking anything up. I have seen similar entrys on this forum and the problems have been fixed. So I went to hijackthis and here is my log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:01:16 AM, on 5/27/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\SymcPCCULaunchSvc.exe
C:\WINDOWS\system32\DRIVERS\o2flash.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\ccSvcHst.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\ccSvcHst.exe
C:\Program Files\Micr... Read more

More replies
Answer Match 61.32%

Hello,My computer was hit with a viral attack last week and I am still suffering from lingering affects. Most notably is for no apparent reason my computer starts playing audio clips. These clips with last for a few minutes and then quit ont heir own. They often sound like advertisements.Another issue seems to be that the virus wiped out all of my desktop shortcuts and the programs are gone when I try to access them via the Start Menu (however I can find all software I had installed via the control panel)I have run Malwarebytes, Super Anti Spyware, and have Spyware Blaster running.Note: I run the GMER scan, but my computer Blue Screened before the scan completed. Tried several times with the same result.Attach Log.UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.IF REQUESTED, ZIP IT UP & ATTACH IT.DDS (Ver_11-05-19.01).Microsoft Windows XP ProfessionalBoot Device: \Device\HarddiskVolume2Install Date: 12/15/2005 7:58:01 PMSystem Uptime: 5/24/2011 4:51:42 PM (1 hours ago).Motherboard: Dell Inc. | | 0JC474Processor: Intel® Pentium® 4 CPU 2.80GHz | Microprocessor | 2793/800mhz.==== Disk Partitions =========================.A: is RemovableC: is FIXED (NTFS) - 70 GiB total, 40.503 GiB free.D: is CDROM (CDFS).==== Disabled Device Manager Items =============.==== System Restore Points ===================.No restore point in system..==== Installed Programs ======================.56005600_Help5600TrbAdobe Acrobat 4.0Adobe AIRAdobe Flas... Read more

A:Computer Keeps Playing Random Audio!

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

12 more replies
Answer Match 61.32%

My computer is playing random audio from movies and TV Shows without any movies playing. Can anybody help me?

A:Computer is playing random Audio!

Nevermind it's fixed!

1 more replies
Answer Match 61.32%

Hi,

For the last few days my computer has been playing random audio clips, which last anywhere from 2 seconds to several minutes long. This often happens when I have no programs running and I have checked the task manager to confirm this, however my knowledge on the "processes" is limited so I wouldn't know if there is any indication of the problem here.

I have ran Norton Internet and Anti-virus scans, but this is not picking anything up. I am using windows XP on desktop PC and use Google Chrome as my internet browser.

If anyone has had this problem or knows how to help me then I would be very grateful if you could help me to sort this out.

Thanks.

A:Random audio playing on computer

Hello AntStonehewer

This will probably be a malware problem

We cannot help you with malware removal in this forum.
Please read ?Virus/Trojan/Spyware Removal Help ? and follow the instructions very carefully; then, post all the requested logs and information in the Virus Help Forum
If you cannot complete any step, just miss it out and do what you can, but be sure to include this information in your post.
Please ensure that you create a new thread in the Virus Help Forum; not back here in this one.

Please be patient, as the Security Team Analysts are usually very busy; one of them will answer your request as soon as they can.

1 more replies
Answer Match 61.32%

I am using Windows 7.Hello everyone @ BleepingComputer! I've been having this recent problem where random audio clips would play. It ranges from advertisements, music, to random people just talking. There seems to be no apparent theme with these audio clips and they only play when I disable/enable one of my playback devices. I usually switch between my headphones and speakers, and when I do, the random clips come on.I've done some research on the topic and looked for the culprits in my system32 folder but I had no luck there. So, I followed the instructions all of the other helpers have given and ran my own virus scan (MSE & SpyBot) along with MalwareBytes and finally ComboFix. The three former choices showed nothing, including MalwareBytes, but ComboFix managed to delete install.exe which I thought was the source of my problem. A quick Google search revealed to me that this was in fact a virus and I thought that I wouldn't have the problem anymore. Sadly I was mistaken, and the random audio keeps playing and it's really annoying.I decided to run ComboFix again to see if the install.exe had managed to find its way back into my computer but ComboFix showed that it didn't delete any threats. The printed log showed this.So now I'm stuck. I've done everything that the helpers have instructed in previous threads and to no avail. What should be my next plan of action? Reformat?Thanks BleepingComputer. I appreciate your patience.~ Ro... Read more

A:Random audio clips playing

Moderators, please ignore and delete my topic. The problem was getting way too annoying and I ended up reformatting my hard drives. I apologize for any time wasted looking at my topic (doesn't look like it). Thank you for your kindness and patience.

~ Romelako

2 more replies
Answer Match 61.32%

It started a month or two ago; my son had some random sound playing in the background; that went away after a restart.    On occasion, i'd get the same thing where ads / audio from a video would continue after IE has closed; that would go away when stopping any remaining "iexplorer.exe" from the services in task manager.    Now it is happening far more ofter; even after a fresh start.
 
I also see under audio mixer, an "application" called "name not available".    I was suspicious it was a virus or malware, so i ran both Norton (360 installed) and a fresh download of "Malwarebytes".   Malwarebytes found, and removed, something.   Norton found nothing.   The problem persists.
 
My machine is an HP G72 Notebook, 2.00Ghz, P6100, 4GB Ram, and is running WIndows 7 Home Premium.
 
Any help is appreciated!
 
 

A:Random Audio playing in background

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Up... Read more

30 more replies
Answer Match 61.32%

I'm not sure what I did, but ever since this morning my laptop has been playing ad sounds randomly. I can tell by looking at the volume mixer that the sound is coming from internet explorer even though I don't have any instances of IE open. Also, I already tried doing a system restore to a restore point that was made before I started having this problem.

Here is the log of a Malawarebyte's Anti-Malware Quick Scan that I ran:
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4332

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

7/20/2010 1:36:36 PM
mbam-log-2010-07-20 (13-36-36).txt

Scan type: Quick scan
Objects scanned: 131587
Time elapsed: 7 minute(s), 50 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

And here is a log from HiJackThis:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:42:06 PM, on 7/20/2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mod... Read more

A:Random Audio Playing in the background

16 more replies
Answer Match 61.32%

I noticed today when I got home a few hours ago that my computer played a random audio clip of a woman speaking. I also noticed that it came in 1-2 second intervals. I checked on my task manager and nothing came up when it played for the second time. I think I've got a virus and I really want it removed. My Kaspersky virus scan didn't pick it up and I ran a full scan. Any help or opinions would be very appreciated, thank you.

More replies
Answer Match 61.32%

First off, I want to thank you for viewing this post and for helping me resolve this issue. I'll give you the back-story of what happened. This morning, I turned on my computer as normal and played games. I then turned on my Skype so I could talk to the friends I was playing with. After a while, while playing my game, my computer randomly restarts itself. When it finally booted, I immediately got back on Skype and started my game. After some time, however, it started playing random audio such as advertisements, music, etc. I thought it was Skype so I closed it. The audio continued to play. I knew it couldn't have been my game because League of Legends does not play radio and advertisements. However, I closed my game after a while in an attempt to figure out what is playing the audio. I opened up my Volume Control and noticed that there was something called "Name Not Available". I muted this and the audio stopped. This should not be there, however, and I'm trying to figure out what is making this audio play and how I can get rid of it.

Anti-virus/Anti-spyware programs:

AVG (Free Version)
Malwarebytes Anti-Malware
CCleaner

 

A:Random Audio playing in the background

Hmm. This is quite odd. I am not really sure but the only thing I can recommend with the details given is to run a full Malwarebytes Anti-Malware scan and see if it detects something. I am not really sure what else it could be. My first guess would be some sort of adware installed on your computer. If Malwarebytes comes up clean, then download SuperAntiSpyware and run a full scan. If that comes up clean, I am really not sure what the issue is and I hope someone else in the TS community can help you out and resolve the issue! Good luck!
 

6 more replies
Answer Match 61.32%

Hi, I am having an issue with random audio playing on my laptop. It starts after I connect to the internet. It does not play all of the time, but in spurts. There are ads, music, foreign lanquages, etc. They sometimes play on top of each other.... like 4 or 5 at a time. When this happens, it is not only annoying, but seems to slow my computer down. I have tried virus scanning, using PC clean up tools, etc. I am really at a loss. I did read another post in one of your forums regarding the same issue and you directed them to download systemlook.exe to the desktop. I have done that but did not run it yet. I would like to know what I should do before I run another thing! I hope you can help me. Looking forward to your instructions.
Debbie

A:Random Audio playing on laptop

Hi and welcome to TSF I would suggest you go here and follow the instructions NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum
gather the ifno requested and make a note of anything you are unable to do then make a new thread here Virus/Trojan/Spyware Help - Tech Support Forum and post the info in that thread not here include the things you could not do

5 more replies
Answer Match 61.32%

Hi there,

A couple of days ago I installed Driver genius on my PC and laptop. After running and updating all my drivers I noticed my laptop was playing the Bam off advertisement. A couple of minutes later my PC was playing another cleaning commercial through the speakers. I have ran Malwarebytes anti malware and Spybot which picked up a lot of problems. However they keep coming back. Could someone please point me in the right direction to get rid of this problem?

Cheers,

Nick

A:Audio adverts playing at random

Hello, I am moving this from W7 to the Am I Infected forum.Please post the MBAM log.The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.Now run TFC by OTPlease download TFC by Old Timer and save it to your desktop. alternate download linkSave any unsaved work. TFC will close ALL open programs including your browser! Double-click on TFC.exe to run it. If you are using Vista, right-click on the file and choose Run As Administrator. Click the Start button to begin the cleaning process and let it run uninterrupted to completion. Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.Follow with SAS:Please download and scan with SUPERAntiSpyware FreeDouble-click SUPERAntiSypware.exe and use the default settings for installation.An icon will be created on your desktop. Double-click that icon to launch the program.If it will not start, go to Start > All Prgrams > SUPERAntiSpyware and click on Alternate Start.If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-... Read more

1 more replies
Answer Match 61.32%

Hi, I have a problem with an audio clip playing at random times on my laptop. Specifically, it plays a short 2-3 second audio of "Who's that Pokemon?". I've run several scans with programs such as Ad-Aware, Comodo Security, and Malwarebytes with no luck. Any help would be much appreciated! Thanks.

Here's the HiJackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:10:01 PM, on 8/14/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Zune\ZuneLauncher.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Registry Mechanic\RMTray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Commo... Read more

More replies
Answer Match 61.32%

I have random audio playing on my computer that I am unable to locate. It doesnt show up in my task manager as a program. Internet explorer has randomly popped up as well, not as often as the audio but I am sure they are related. I am running Vista on an HP computer. I ran MalwareBYTES and found a few things that I was able to delete on my own (antivirus 8 being one of them). I tried running malwarebytes in safemode to see if that would pull up anything additional, and it did not.

I am unsure of what to do next to rid me of this. Thanks in advance for your assistance.

A:random audio playing on my computer

Hello and welcome. Please run these poast back all logs and tell me how it is now.Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!Be sure to download TDSSKiller.exe (v2.4.0.0) from Kaspersky's website and not TDSSKiller.zip which appears to be an older version 2.3.2.2 of the tool.Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.Click the Start Scan button.Do not use the computer during the scanIf the scan completes with nothing found, click Close to exit.If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).Copy and paste the contents of that file in your next reply.Rerun MBAM (MalwareBytes) like this:Open MBAM in normal/regular mode and click Update tab, select Check for Updates,when doneclick Scanne... Read more

7 more replies
Answer Match 61.32%

Operating system: Windows 7 Home Premium (with Service Pack 1)
 
Internet browser: Firefox 28.0
 
Antivirus software: Avira Free Antivirus
 
Date of discovery of problem: May 8, 2014
 
Last full antivirus scan: same; no threats found. Antivirus software updated just before scan.
 
Description of problem:
On May 8th an audio ad (for some soft drink or other, I think) suddenly started playing while I was looking at a youtube video. As it seemed unlikely youtube would have audio ads that played simultaneously with videos I suspected foul play right away but, then figured that maybe it was just some youtube malfunction after all. A few minutes later another random audio ad played while I was checking out a graphics tutorial page that didn't even have any embedded video. I decided it probably was an infection of some sort, after all, googled "random audio ads" - and found out that there is in fact malware that can cause this. So then I did a full scan with my antivirus software - which didn't turn up anything. I haven't used the computer since the scan, as I still think there's probably some malware on it.
 
How do I find out what it is?
What do I do to remove it?
Should I post the Avira log, even though it didn't turn up anything?

A:Random audio ads playing while browsing

Additional question: how do I back up my data if I don't have a "virgin" hard drive available? If I just shove everything onto my usual back-up disk, don't I risk infecting that with whatever it is that's plaguing my system? I don't want to back up my data at the cost of destroying my already-backed-up data...

17 more replies
Answer Match 61.32%

Thank you in advance for your help. I used this site a few years ago and it was the only way, after weeks of personal attempts, that i got my laptop in working order again. For about 5 days now my computer plays random audio on its own. I am on a wireless connection but the last time this occured I disconnected from the internet to see if it was being streamed from the internet and the audio continued. It is at random times, sometimes for just a few seconds, other times for up to 10-20 minutes at a time. The audio varies from what sounds to be NPR to music to commercial advertisements for movies and products. Typically the audio switches every so often as if a radio station is being changed. I also checked my task manager after reading posts where others having similar problems said they found a program running when it played and stopping when it ended. Nothing appears for me, however. Any help would be greatly appreciated!

DDS (Ver_09-02-01.01) - NTFSx86
Run by dustan marshall at 13:20:10.45 on Sun 02/08/2009
Internet Explorer: 7.0.6000.16764
Microsoft? Windows Vista? Home Premium 6.0.6000.0.1252.1.1033.18.2038.923 [GMT -5:00]
============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows&#... Read more

A:computer playing random audio

I wanted to add as well that today Tuesday, Feb 10 my computer has started freezing after being on for about 20-30 minutes. Whether I'm on the internet or playing a game it just freezes and i have to force off. The mouse cursor moves but CTL ALT DEL doest work. Thanks again.

23 more replies
Answer Match 61.32%

My computer was lagging on Monday and I opened the task manager to discover sv1.exe hogging resources. I ended the process.

Today (Thursday), I am starting to get random audio ads on the computer while sv1.exe is running. Ending the process solves the problem but how do I get rid of sv1.exe competely?

Thank you.

More replies
Answer Match 61.32%

Random Audio Ads are playing.  I only notice that ending audiodg.exe will stop the ad from playing temporarily but they come back and I notice audiodg.exe has restarted.  Ran the usual Malwarebytes, Adwcleaner, and various root kit removal tools but they don't find anything.  Here is the FRST log:
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-02-2015 01
Ran by JCondren (administrator) on EL2-JCONDREN on 20-02-2015 13:12:32
Running from C:\Users\jcondren\Desktop
Loaded Profiles: JCondren (Available profiles: tech & Tech & JCondren)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 10 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\HidMonitorSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86... Read more

A:Random Audio Ads Playing - Audiodg.exe

Hello paisan99 and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.
 
My name is Yılmaz and I'll help you with the cleanup of malware from your computer.
Before we move on, please read the following points carefully.
 
Please complete all steps in the specified order.
Even if tools don't find malware, I want you to post the logfiles anyway.
Please copy and paste the logfiles directly into your posts. Please do not attach them unless you are instructed to do so.
Read the instructions carefully. If you have problems, stop what you  were doing and describe the problems you encountered as precisely as  you can.
Don't install or uninstall software during the cleanup unless you are told to do so.
If you can't answer for the next few days, please let me know. If  you haven't answered within 5 days, I am assuming that you don't need  help anymore and your topic will be closed.
I can not guarantee that we will find and be able to remove all  malware. The cleaning process is not instant. Please continue to review  my answers until I tell you that your computer is clean
Please reply to this thread. Do not start a new topic
As my first language is not English, please do not use slang or idioms. It could be hard for me to understand.
 
Please open as administrator  the computer. How is open as administrator  the computer?
Disable your AntiVirus and AntiSpyware applications, as they will  interfere with our ... Read more

4 more replies
Answer Match 61.32%

Not really sure where to find the problem or how to fix it as this has never occurred to me before.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:22:30 AM, on 6/11/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Razer\BlackWidow\BlackWidowTray.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\AVG Secure Search\vprot.exe
C:\Program Files (x86)\Sony\Content Manager Assistant\CMA.exe
C:\Program Files (x86)\Sony\Content Manager Assistant\CMAWatcher.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Gaming\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\So... Read more

A:Random Audio Ads playing from speakers

14 more replies
Answer Match 61.32%

My laptop has been playing random audio ads in the background. Please help.
 

More replies
Answer Match 61.32%

Hi dear mods so i have been getting random audio ads in playing in the background. The time between them varies from 10 to 30, 40 minutes each. The ads are short, probably less than a minute each and they are about food items like bertolli's pasta and marie callendar pies if that matters at all haha. 
 
Thank you for your time and help!! Here's the FRST data
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-02-2015
Ran by xana (administrator) on MORPHINE on 08-02-2015 04:06:03
Running from C:\Users\xana\Downloads
Loaded Profiles: xana (Available profiles: xana)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdr... Read more

A:Random audio ads playing in background

sorry, accidentally posted two of the same thread. if the mods could please delete one that would be great. they are the same. thank you. 

18 more replies
Answer Match 61.32%

Hello there! Here's the problem. Occasionally, and usually for 3-5 minutes, random audio files will play when nothing is open to play them. The audio also happens to be mostly advertising. I assumed a virus, so I have already run a full system virus and rootkit scan with Avira. Avira didn't find anything. Restarting the computer causes the audio to stop for about 10-15 minutes. Can anyone help me? After posting this in thw rong plac e (sorry guys) i was instructed to create these logs and post them here.
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.1.0
Run by MyAdmin at 17:24:18 on 2012-07-23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3326.1164 [GMT -4:00]
.
AV: Avira Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
svchost.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre7\bin\... Read more

A:Random advertising Audio playing

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

3 more replies
Answer Match 61.32%

Not too sure whats going on here but recently I have had a few issues with random commercial audio playing out of the blue.. Even when a browser is not open. I also have noticed that clicking on Google links redirects me to other sites and these site appear to be random.

I also have been getting java error messages and a message saying google installer has quit working. Another thing I would like to mention is that my taskbar has a new icon that I have never seen before and if I mouse over the icon it says problem reports and solutions. From time to time I will get a popup asking me to download some program and its always the same program.

Edit: I also forgot to mention another problem I have come across which requires that I change the name of all my anti virus programs in order to run them. Dont have the change the name of the shortcut but the .exe file has to be changed.

Here is my Hijack this log:

C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Creative\ShareDLL\CADI\NotiMan.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam1.exe
C... Read more

More replies
Answer Match 60.48%

Hello, all~ To be truthful, I've been holding off on posting on various forums due to the lucrative processes involved in cleaning out a computer. It's had smaller problems before, all of which went away very easily at the sight of a typical virus scan. However, I've recently downloaded Google Chrome onto my computer and since this occurrence, my computer has been playing random audio advertisements at pretty much all hours of the day. After some research and snooping around on the internet, I've come to realize that the most likely cause of these ads would be malware, or some sort of other virus. I've deleted Google Chrome and I've run various scans with both Norton Security Suite and MalwareBytes Anti-Malware over the course of the past couple days. However, none of the scans have stopped the ads from playing on my computer. While the volume of the ads has dropped from near-constant playtime to a sort of "rarity" they still persist on my computer and act as not only a nuisance to my typical activities on this computer, but also as a parasite which is eating away at what little my computer has left to run on.

Currently, I am running on a Windows XP, Service Pack 3. For security, I've used Norton Security Suite and MalwareBytes Anti-Malware. If anyone is able to help me with my problem, then that is greatly appreciated. If anymore information is needed regarding my computer or the situation itself, please feel free to ask me, but please ... Read more

A:Random Audio Advertisements Playing on Computer

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) DownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results hereDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

9 more replies
Answer Match 60.48%

Hi guys i have a problem, when i am on my pc after about 30 mins i get this random audio playing usually about chinese tourist things but i don't know where it is coming from, even if i have no programs open and if i do i close them but it still keeps playing them. I wondered if anyone knew how to locate and get rid of these i have looked for programs i don't recongnise but can't any on my computer. i am running windows xp service pack 2.

thankyou
 

A:Problem keep getting random audio playing in the background

Please click here to download and install version 2.0.2 of the HijackThis Installer.

Run it and select Do a system scan and save a logfile.

The log will be saved in Notepad. Copy and paste the log in your next post.

Do not fix anything
 

3 more replies
Answer Match 60.48%

Hello! First and foremost, thank you for any help you can give me. I really appreciate it!

Today I started hearing voices...that is, a man/male saying "Congratulations, you've won!" would randomly play over my Dell 9100's speakers (running windows xp). The voice seemed to occur randomly, either a few minutes apart or longer. I looked for the source, thinking the voice belonged to a pop-up, yet there was no pop-up to be found.

Later, after leaving my PC alone for some time, I found an internet explorer pop-up on the screen (I use Google Chrome so I knew this was trouble!). I started some scans (mcafee and malwarebytes) but didn't find anything and decided the users here would be much more efficient. As I was running the scans, different noises began occurring (mostly short 1-10 second music clips, clunks, or clicks).

Outline of the problem:
*random audio clips with no associated pop-up
*pop-ups and clicking noises (I believe it is the noise that occurs in internet explorer when you click on links, though I'm not sure)

Again, thanks for your help and without further ado:



DDS (Ver_10-03-17.01) - NTFSx86
Run by Jason at 20:11:57.07 on Sun 07/25/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.158 [GMT -5:00]

AV: McAfee VirusScan Enterprise *On-access scanning enabled* (Updated) {918A2B0B-2C60-4016-A4AB-E868DEABF7F0}

============== Running Process... Read more

A:Invisible pop-ups and random, self-playing audio clips

Hi lost42 and welcome to TSF,


Please subscribe to this thread to get immediate notification of replies (if you haven't already) as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Read through this entire procedure and if you have any questions, please ask them before you begin. Then either print out, or copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.

It is IMPORTANT to carry out the instructions in the sequence listed below.

-------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Stay with me until given the 'all clear' even if symptoms diminish. Lack of symptoms does not always mean the job is complete.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by me or another helper at this forum.

-------------------------------------------

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

--------------------------------------------
Download ComboFix from here to your desktop.

Disable your AntiVirus and AntiSpyware applications as they will interfere with our tools and the removal. If you are unsure of how to do it,... Read more

14 more replies
Answer Match 60.48%

So my office mate at work has had his PC infected by a redirect malware of some kind. It takes him to some variant of this address

http://213.174.148.4/service/?706503214601bdb9157e6530780b084b_0

He is also experiencing some random audio playing at different times.

TIA for help.

A:Infected with redirect and random audio is playing

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/465487 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

18 more replies
Answer Match 60.48%

Today I turned on my computer and started healing a bunch of clicking noises after everything loaded up. You know, the noises that you hear sometimes over the internet. Anyways I hit Ctrl, Alt, Delete and looked at some of my active programs. I had 65 running! Usualy I have about 40 to 45 or so.

So I begin to look at a few of the programs and there are some odd ones. One was.

odb.exe

I have never seen this before so I am wondering if that is whats causing the clicking. So I went onto the internet and all of a sudden my lass.exe went up over 300k and my computer usage went over 65%. Then random audio clips just started playing by itself even after I log completely off the internet.

I did some research and it sounded alot like a virus or worm called Sasser that gets in through lass.exe but I ran the symantec remover and it said it did not detect it on my PC.

I am pretty much at a loss here and have no idea what to do next. Any help would be great.

A:Random Audio clips playing, Virus?

Hello and Welcome.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed. I currently have as many open topics as I can effectively handle; this will have you back in queue with the proper logs so an available helper would be able to assist.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Answer Match 60.48%

I have been trying to fix this issue for over a week now. After attempts to clean it I actually did a clean install or at least I believe I did. Still here. I even took my computer into a repair place got it back this afternoon and still hear the commercials playing in the background. So clearly they didnt fix it either. From all the research I have done I believe it to be the Rootkit.Boot.Harbinger.a. I have read some forums and used many of the tools that are suggested. Included AdwCleaner, Hitman Pro, Rkill, Roguekiller, Junkware Removal. Unfortunately nothing has worked. I currently have Malwarebytes installed my computer and that too usually finds nothing. Roguekiller seems to be the only one that ever finds malware but it doesnt seem to completely remove the virus. I finally figured out that the virus or at least part of it creates two registries in the internet section of the hkey current user. One being Emulation and the other being a GP rendering something. I am totally clueless and thought I could figure this out but clearly I am not an expert. With all that said I am looking for some guidance on getting rid of this virus once and for all.
 
Oh yeah I am running Windows 7 Professional on a Dell XPS computer
 
Originally I posted this in an incorrect forum but someone mentioned that I will probably need to run a log. If you can tell me how to go about doing that and a link to the software I may need I will get it right up

A:Random Audio Commercials Playing in Background

Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. Type the following in the edit box on FRST, after "Search:".rpcss.dllIt then should look like:Search: rpcss.dllClick Search button and post the log (Search.txt) it makes on the USB drive in your next reply.

32 more replies
Answer Match 60.48%

Hello
 
Not sure what my problem is but I hear commercials playing sometimes when I turn on my PC.
 
I run Avast antivirus, Windows Defender and have Windows Firewall running.
 
Windows 7 64 bit.
 
Not sure what else I need to post here... output from MSInfo or something like that?
Any help will be greatly appreciated.
 
Thanks in advance.
S.
Forgot to add that I start no programs (e.g. web browser) for this to happen, just happens sometimes when I log on.
 
Thanks.

A:Random commercials (audio only) playing when PC is started

D'oh!  And I've tried running Avast scan but it doesn't detect a problem.  No errors I can record.  Only the sound of the commercial playing.

Apologies in advance if I haven't supplied enough info.  I've read the 'what to do' forum and think I've covered everything.
 
Thanks.

7 more replies
Answer Match 60.48%

I have ran malwarebytes and tdsskiller in safe mode and neither found any threats.
I also ran AdwCleaner, which found one threat and removed it.
 
Restarted in normal mode and I'm still having the same problem.
 
EDIT: I have also recieved this message twice: "windows must now restart because the dcom server process launcher service terminated unexpectedly"
and this one once: "windows must now restart because the plug and play service terminated unexpectedly"

A:Random audio ads playing even when all programs are closed

Welcome aboard  Please download Rkill (courtesy of BleepingComputer.com) to your Desktop.There are 2 different versions. If one of them won't run then download and try to run the other one.You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/Double-click on the Rkill desktop icon to run the tool.If using Vista or Windows 7 right-click on it and choose Run As Administrator.A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.If not, delete the file, then download and use the one provided in Link 2.Do not reboot until instructed.If the tool does not run from any of the links provided, please let me know.If normal mode still doesn't work, run the tool from safe mode.When the scan is done Notepad will open with rKill log.Post it in your next reply.NOTE. rKill.txt log will also be present on your desktop.

3 more replies
Answer Match 60.48%

Hi -

Having an issue with some advertising audio playing randomly in the background. It only plays for a few seconds, but Malwarebytes Anti-Malware program has been going nuts since this happened.

The bubble above the task bar for that program keeps appearing every few seconds saying:

Successfully blocked access to a potentially malicious website: 178.238.36.17 (note, these IPs vary)

Type: outgoing
Port: 5000 (these vary), Process: iexplore.exe (sometimes svchost.exe or firefox.exe).

Thanks!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:36:13 PM, on 1/18/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Symantec AntiVirus\VPTray.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Sharp\Sharpdesk\IndexTray.exe
C:\Program Files\Sharp\Sharpdesk\SharpTray.exe
C:\Program Files\Sharp\Sharpdesk\FTPServer.exe
C:\PROGRA~1\Sharp\SHARPD~1\Indexer.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Sharp\Sharpdesk\nsapp.exe
C:\Windows\System32\nwtray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Adobe\Adobe Dr... Read more

A:Random Audio Bits Playing in Background?

11 more replies
Answer Match 60.48%

I hope someone can please help me with a problem I have been experiencing lately with my computer.  I sometimes hear random audio ads playing in the background for no reason.  It sounds like a commercial ad playing, yet there are no other windows open or programs running, other than the one I am using, which is not playing video or audio.  This occurs about once every few days when I am online, and I am only able to stop the background audio, if I restart my computer.  The audio is not constant, it just randomly appears out of nowhere on any given day or time.  I checked my volume mixer and there was an application named "name not available".  When I closed the volume mixer and opened it again, it was gone, and has not reappeared.  My Firefox browser is very slow, and constantly freezing and crashing ever since this audio problem began.  I am usually very cautious about the websites I visit, so I don't know how I might have become infected.  I scanned my system with Norton 360 and Malwarebytes, but both results came back clean, but I am still convinced something is not right.  I am running Windows Vista Home Premium 32 - bit operating system Service Pack 2.  I am not very computer savvy, so I do not want to do anything without advice first.  I am hoping there is someone who can please help me, as I have never experienced having a virus before.  Thank you so much for all of your help. 

A:Random audio ads playing in the background. Am I infected?

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
 
Please download the latest version of Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer. Make sure that Addition.txt is ticked as well.
Press Scan button.
It will make a log (FRST.txt) in th... Read more

42 more replies
Answer Match 60.48%

At some point in the last 2 months my 15 year old son downloaded a game to the "no games" laptop. When we attempted to use it recently, it was extremely slow and random audio began playing. It sounds like bits of radio, advertisements, news stories. Each bit is short, but plays back to back. When this occurs, the CPU usage climbs up to 100% despite no other programs open. My husband removed the game & associated files.

Before I found your website, I installed and ran Malwarebytes and it removed 3 files. I thought that had solved the problem, but it has returned. Internet Explorer also seems to be affected. The header (where the url and tabs show) looks like a film negative. The computer seems slower than normal...sluggish to respond to clicks and generally acting like a stubborn teen.

Thank you in advance for your help!

Charity

Here are the results from the scans listed in the forum instructions.


DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16476 BrowserJavaVersion: 10.25.2
Run by Owner at 17:04:11 on 2013-09-13
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4056.1964 [GMT -5:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ===============
.
C:\Windows\system3... Read more

A:Random audio playing, increased CPU usage

Hello and welcome to TSF!
Apologies for the wait. Do you still need help?

I am looking over your logs. If you have not done so already, you may wish to subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Also please note that this forum is very busy; if I don't hear back from you within three days, this thread will be closed.

2 more replies
Answer Match 60.48%

Windows 7 SP1 box seems to be infected with some kind of virus.
 
Antivirus - Microsoft Security Essentials (Updated)
Antimalware - Malwarebytes (Updated)'
 
In volume mixer there are 2 "Name Not Available" that seem to be the source of the audio.  It is a mixture of advertisements and radio.  There are no browser windows open and I don't see anything in the process list that could be the source.
 
TDSSKiller & Malwarebytes both came back clean.
 
Any help would be greatly appreciated.

A:Computer playing random audio at different times of the day

Hello trekLets try these alsoPlease download Rkill by Grinler and save it to your desktop.Link 1Link 2Double-click on the Rkill desktop icon to run the tool.If using Vista, right-click on it and Run As Administrator.A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.If not, delete the file, then download and use the one provided in Link 2.If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.If the tool does not run from any of the links provided, please let me know.Do not reboot the computer, you will need to run the application again.Run Malwarebyts again.Download RogueKiller from one of the following links and save it to your desktop:Link 1Link 2Close all programs and disconnect any USB or external drives before running the tool.Double-click RogueKiller.exe to run the tool (Vista or 7 users: Right-click and select Run As Administrator).Once the Prescan has finished, click Scan.Once the Status box shows "Scan Finished", just close the program. <--Don't fix anything!Copy and paste the report that opens into your next reply.The log can also be found on your desktop labeled (RKreport[X]_S_xxdatexx_xtimex)The highest number of [X], is the most recent Scan

11 more replies
Answer Match 60.48%

Hey all. well my computer starts playing random audio. sometimes it sounds Russian. or adverts or just music. i have Microsoft essentials running all the time. and also have malwarbytes for additional scanning. but to no avail. just happens randomly at any time. J just ran combofix and here is the log. please help me this is driving me mad

A:computer starts playing random audio

Hello fridgeitem I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same... Read more

22 more replies
Answer Match 60.48%

Hi,
I've got an older desktop that is primarily used for a media server that has picked up a rather nasty piece of malware.
Multiple runs of MBAM, Spybot both declare the system clean. The problem started with the Goggle Redirects and when that appeared fixed using the Gooredfix, the random audio started playing. It appears to be some sort of script running in the background that tries to direct a hidden IE window to a random site, some of them being internet radio sites. If it is valid, audio from that station just starts playing. The second I hit a key to try and see what process is running, it stops and leaves no trace that I can find.
If the random site doesn't work, I get an "ie script error window" pop up on my destop indicating a line error in the process of redirecting.

The google redirect keeps coming back no matter what I try.

Below is my HJT log.

Thanks for all your help in advance!

D
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:23:54 PM, on 4/19/2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\... Read more

A:Random audio playing along with Google Redirect

BUMP-

After much reading through the forums, I downloaded and ran Combofix.
I saved and renamed it on my desktop. When I ran it, I get the warning the MCaffee AV is running and needs to be disabled. I uninstalled Mcaffee several months ago and double checked and it was not running. I let Combofix run and it said it detectected the Volsnap.sys Rootkit. I clicked OK and let is attempt to fix. It ran for about 20 minutes then appeared to stall out.

Here is the Catchme.log it generated-

File "C:\WINDOWS\system32\drivers\volsnap.sys" added successfully
File list cleared
Any help would be greatly appreciated.

D
 

2 more replies
Answer Match 60.48%

On my iMac whenever I use the internet (I use google chrome) random audio from ads keep playing in the background. It can happen anywhere, not on specific websites; even on the new tab page. Sometimes they buffer, other times they stop halfway through, I don't know what's going on, this has been going on for about two days. Google Chrome has also been randomly crashing lately; here's the crash report, if it helps:

Process: Google Chrome [470]
Path: /Applications/Google Chrome.app/Contents/MacOS/Google Chrome
Identifier: com.google.Chrome
Version: 24.0.1312.36 (1312.36)
Code Type: X86 (Native)
Parent Process: launchd [155]
User ID: 503

Date/Time: 2012-12-09 16:08:44.433 -0500
OS Version: Mac OS X 10.8.2 (12C60)
Report Version: 10

Interval Since Last Report: 454321 sec
Crashes Since Last Report: 4
Per-App Interval Since Last Report: 24358 sec
Per-App Crashes Since Last Report: 4
Anonymous UUID: CA2F8BBF-97C7-C2E3-7D7D-E77F587C419F

Crashed Thread: 19 BrowserBlockingWorker2/-1204875264

Exception Type: EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x00000000b7af0fdc

VM Regions Near 0xb7af0fdc:
Stack 00000000b7aee000-00000000b7af0000 [ 8K] rw-/rwx SM=COW
--> Stack 00000000b7af0000-00000000b7af1000 [ 4K] ---/rwx SM=NUL
Stack 00000000b7af1000-00000000b82f2000 [ 8196K] rw-/rwx SM=COW

Thread 0:: CrBrowserMain Dispatch queue: com.apple.main-thread
0 com.apple.AppKit 0x96acd178 -[NSView _hasDrawMatrix] + 20
1 com.apple.AppKit 0x96b3ec12 -... Read more

More replies
Answer Match 60.48%

I have been trying to fix this issue for over a week now. After attempts to clean it I actually did a clean install or at least I believe I did. Still here. I even took my computer into a repair place got it back this afternoon and still hear the commercials playing in the background. So clearly they didnt fix it either. From all the research I have done I believe it to be the Rootkit.Boot.Harbinger.a. I have read some forums and used many of the tools that are suggested. Included AdwCleaner, Hitman Pro, Rkill, Roguekiller, Junkware Removal. Unfortunately nothing has worked. I currently have Malwarebytes installed my computer and that too usually finds nothing. Roguekiller seems to be the only one that ever finds malware but it doesnt seem to completely remove the virus. I finally figured out that the virus or at least part of it creates two registries in the internet section of the hkey current user. One being Emulation and the other being a GP rendering something. I am totally clueless and thought I could figure this out but clearly I am not an expert. With all that said I am looking for some guidance on getting rid of this virus once and for all.
 
Oh yeah I am running Windows 7 Professional on a Dell XPS computer

A:Random Audio Commercials Playing in Background

It's a virus infection.
 
Quick fix is to connect to the internet, then open your volume control mixer. You'll probably have an unknown audio device that is active. You can mute that device and the radio should stop.
 
This infection is the Zekos rootkit. I had a client infected with it a week ago. Removal takes careful work, because the virus patches itself to a crucial system file, and removing the file can cause a black screen on boot (which I had to deal with)
 
Once you've disabled the audio device I would start a thread in Virus, Spyware, Malware Removal Logs. You'll need to run and post a log of either DDS or Hijackthis.

3 more replies
Answer Match 60.48%

must be a virus. here is attachments as requested. thanks for you help

A:computer playing random audio clips

sorry, forgot the rest lol. here it is


DDS (Ver_09-10-26.01) - NTFSx86
Run by tonyseahawk at 8:58:37.10 on Wed 11/04/2009
Internet Explorer: 8.0.6001.18828 BrowserJavaVersion: 1.6.0_13
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.1917.1148 [GMT -7:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\WLTRYSVC.EXE
C:\Windows\System32\bcmwltry.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\PSIService.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\System32\alg.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32... Read more

3 more replies
Answer Match 60.48%

I was told to post in this forum. I apparently have the Zero Access Virus.

I have followed the steps taken as instructed before posting. I attached my logs since the post would not go through since it was to big. My GMER log could not be posted or attached as it was too big. Is there any alternative means of posting it?

A:Random Audio Ads Playing In Background Zero Access

Hello and Welcome to Bleeping Computer!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE:... Read more

15 more replies
Answer Match 60.48%

There is random audio playing in the background of my computer that I can't get rid of, it comes and goes but it's still annoying. I've tried two kinds of anti malware programs but it's still playing. I am by no means teach savvy so I assume I'm doing something wrong any assistance will be greatly appreciated.

A:Random audio playing in the background of my computer

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here.If you get crashes in normal mode,run it in safemode with networkingDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

1 more replies
Answer Match 60.48%

For some reason my computer plays audio from nowhere. I don't have anything but anti-virus software running. I've been having this problem for a while and I can't seem to get rid of it. It plays radio commercials, songs, and has said 'You are watching UNICEF TV' to me before. I don't understand whats wrong and I have no idea what i'm looking at in my hijackthis log. Any help would be appreciated. I have already run SUPERantispyware MalwareBytes Antimalware pro and avast! antivirus pro. Any other ideas?

A:Computer is playing random audio and commercials from nowhere

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Answer Match 60.06%

Hi,
I'm currently running Windows XP, and I've recently been hearing random audio clips coming from my computer. Messages like "Congratulations, you've won" and 1 or 2 others, along with random mouse clicking noises. A rogue internet explorer window will also occasionally pop up with random ads on it. I use Firefox exclusively, and otherwise never have any IE windows open. Also, when I open my task manager, I'll typically find at least 1 instance of iexplorer.exe running after I hear the clips. I've also noticed 5-10 instances of Olpt1tPX.exe in my task manager, and seeing how that doesn't exist as a common .exe when I google it, I imagine it's up to no good. I know other people have been having this same problem (with different .exe instances), and I looked around for a solution, but the only thing I ever found was helpers suggesting ComboFix be run, but I don't want to be too hasty and mess anything up (more than it already is, anyways), so I'll wait for your advice.

Additionally, I use Trend Micro AntiVirus on my computer, and around the same time I began to start seeing the error "Your Unauthorized Change Prevention Service has shut down. Trying restarting Trend Micro AntiVirus to restore your Unauthorized Change Prevention Service. If the problem persists, please restart your computer. If you continue to receive this warning, please contact Technical Support." I have also been unable to download any update... Read more

A:Random audio clips / internet explorer popups (HJT log included)

Hi and Welcome,

Please do the following:

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.

Disable any script blocking protection
Double click dds.pif to run the tool.
When done, two DDS.txt's will open.
Save both reports to your desktop.
---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.
NEXT


Download GMER Rootkit Scanner from here to your desktop. It will be a randomly named executable.

Double click the exe file.
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO, then use the following settings for a more complete scan.

Click the image to enlarge it

In the right panel, you will see several boxes that have been checked. Ensure the following are unchecked
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.

Save it where you can easily find it, such as your desktop, and attach it in reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries
 

2 more replies