Over 1 million tech questions and answers.

Windows 7 computer plays random audio, random reboots

Q: Windows 7 computer plays random audio, random reboots

Friends,
 
I have spent the past day and night reading this site, googling, checking reddit, the Windows Knowledge base, etc., trying to find if someone as identified the malicious software that's eating my son's computer and I am stumped.  
 
Random audio plays; random reboots, usually blamed on DCOM/ plug n play error.  The computer is a Sony Vaio running Windows 7.  Firewall is on/Windows Defender is up-to-date.  
 
I have run rkill, then tdsskiller, and Malwarebytes.  I downloaded them from an uninfected computer onto a USB drive, renamed the installer files (new names were help.exe and iexplormb.exe) then copied the installers onto the infected machine.  Installed them and ran rkill first, then tdsskiller (did not re-boot after it was finished) then installed Malwarebytes and let it update then ran it.  tdsskiller and Malwarebytes did identify some threats and removed those--but didn't solve the problem.
 
The computer is still playing random audio, though I haven't had a random reboot in a while.  Sigh.
 
Looking forward to hearing from someone who can guide me through this process effectively.  
 
Thanks in advance.
 
Cheers,
 
--Amee Mooseroom
-------------------------------------------------------------
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 8.0.7600.17267
Run by Abel at 19:16:50 on 2014-01-06
Microsoft Windows 7 Home Premium   6.1.7600.0.1252.1.1033.18.3950.755 [GMT -5:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\Dwm.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\SysWOW64\Rundll32.exe
C:\Program Files\Sony\VAIO Care\VCSpt.exe
C:\Program Files (x86)\iolo\System Mechanic\iologovernor64.exe
C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Windows\system32\BtwRSupportService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe
C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\SysWOW64\DllHost.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\Program Files\Microsoft Security Client\NisSrv.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\CCP.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\ThirdPartyAppMgr.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\PowerManager.exe
C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\SmartWi.exe
C:\Program Files\Sony\VAIO Update\VUAgent.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files\Sony\VAIO Care\VCPerfService.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Sony\VAIO Care\listener.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
C:\Program Files\Sony\VAIO Power Management\SPMService.exe
C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
C:\Program Files\Sony\VAIO Care\VCsystray.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com
uSearch Bar = Preserve
uDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=SNNT&bmod=SNNT
mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=SNNT&bmod=SNNT
mDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=SNNT&bmod=SNNT
mURLSearchHooks: {94625830-343a-4df0-88c1-444d195064d0} - <orphaned>
mWinlogon: Userinit = userinit.exe,
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
TB: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
TB: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
TB: <No Name>: {ae07101b-46d4-4a98-af68-0333ea26e113} - LocalServer32 - <no file>
uRun: [Sgtion Update] regsvr32.exe C:\Users\Abel\AppData\Local\Sgtion\bdspobxsjoxpn.dll
uRun: [GoogleChromeAutoLaunch_647CE367BF4084F1714AD8C1BE473C16] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
uRun: [ConduitFloatingPlugin_lcnnhcneegeeojhgpfijnlnocjdmlaon] "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Abel\AppData\Roaming\ValueApps\CH\TBVerifier.dll",RunConduitFloatingPlugin lcnnhcneegeeojhgpfijnlnocjdmlaon
uRun: [CAHeadless] C:\Program Files (x86)\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [SmartWiHelper] "C:\Program Files (x86)\Sony\SmartWi Connection Utility\SmartWiHelper.exe" /WindowsStartup
mRun: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun: [DNS7reminder] "C:\Program Files (x86)\Nuance\NaturallySpeaking11\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\NaturallySpeaking11\Ereg.ini
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
dRunOnce: [SpUninstallDeleteDir] rmdir /s /q "\SearchProtect"
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
TCP: NameServer = 10.0.0.1
TCP: Interfaces\{C3FA99C0-6D20-46D3-A571-87208C430CB4} : DHCPNameServer = 10.0.0.1
TCP: Interfaces\{C3FA99C0-6D20-46D3-A571-87208C430CB4}\4656661657C647 : DHCPNameServer = 10.1.1.118 10.3.1.36 10.3.1.27
TCP: Interfaces\{C3FA99C0-6D20-46D3-A571-87208C430CB4}\6425943534F4C4F444745413 : DHCPNameServer = 68.87.85.98 68.87.69.146
TCP: Interfaces\{C3FA99C0-6D20-46D3-A571-87208C430CB4}\96D284F64756C6 : DHCPNameServer = 172.16.48.2
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
x64-BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
x64-TB: <No Name>: {ae07101b-46d4-4a98-af68-0333ea26e113} - LocalServer32 - <no file>
x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
x64-Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3 
x64-Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
x64-Run: [IntelliPoint] "c:\Program Files\Microsoft IntelliPoint\ipoint.exe"
x64-Run: [Apoint] C:\Program Files (x86)\Apoint\Apoint.exe
x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
x64-DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-Notify: igfxcui - igfxdev.dll
x64-SSODL: WebCheck - <orphaned>
.
============= SERVICES / DRIVERS ===============
.
R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2013-9-27 248240]
R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2010-10-20 55024]
R1 ElRawDisk;ElRawDisk;C:\Windows\System32\drivers\ElRawDsk.sys [2012-12-27 30752]
R2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [2009-9-6 169312]
R2 BcmBtRSupport;Bluetooth Driver Management Service;C:\Windows\System32\BtwRSupportService.exe [2013-10-28 2255064]
R2 DragonSvc;Dragon Service;C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe [2010-7-23 296808]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-7-12 13336]
R2 ioloSystemService;iolo System Service;C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe [2013-12-23 1168960]
R2 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2012-8-30 134944]
R2 PDFsFilter;PDFsFilter;C:\Windows\System32\drivers\PDFsFilter.sys [2012-12-27 82160]
R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2010-6-1 367456]
R2 regi;regi;C:\Windows\System32\drivers\regi.sys [2010-10-20 14112]
R2 rimspci;rimspci;C:\Windows\System32\drivers\rimssne64.sys [2010-7-12 94208]
R2 risdsnpe;risdsnpe;C:\Windows\System32\drivers\risdsne64.sys [2010-7-12 78848]
R2 SampleCollector;VAIO Care Performance Service;C:\Program Files\Sony\VAIO Care\VCPerfService.exe [2010-10-20 252416]
R2 UNS;Intel® Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-10-20 2320920]
R2 VAIO Power Management;VAIO Power Management;C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2010-10-20 575856]
R2 VCFw;VAIO Content Folder Watcher;C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2010-6-17 851824]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;C:\Windows\System32\drivers\ArcSoftKsUFilter.sys [2010-10-20 19968]
R3 bcbtums;Bluetooth USB LD Filter;C:\Windows\System32\drivers\bcbtums.sys [2013-10-28 170712]
R3 btwampfl;btwampfl;C:\Windows\System32\drivers\btwampfl.sys [2013-10-28 166104]
R3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2010-10-20 39464]
R3 HECIx64;Intel® Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2010-6-4 56344]
R3 Impcd;Impcd;C:\Windows\System32\drivers\Impcd.sys [2010-7-12 158976]
R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]
R3 SFEP;Sony Firmware Extension Parser;C:\Windows\System32\drivers\SFEP.sys [2010-6-1 12032]
R3 SpfService;VAIO Entertainment Common Service;C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [2010-6-7 304496]
R3 VUAgent;VUAgent;C:\Program Files\Sony\VAIO Update\VUAgent.exe [2012-11-28 1286784]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2010-7-12 402720]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S3 IntcDAud;Intel® Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2010-7-12 271872]
S3 motccgp;Motorola USB Composite Device Driver;C:\Windows\System32\drivers\motccgp.sys [2012-1-25 22016]
S3 motccgpfl;MotCcgpFlService;C:\Windows\System32\drivers\motccgpfl.sys [2012-1-25 9728]
S3 motport;Motorola USB Diagnostic Port;C:\Windows\System32\drivers\motport.sys [2012-1-25 30720]
S3 SOHCImp;VAIO Media plus Content Importer;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2010-6-20 108400]
S3 SOHDms;VAIO Media plus Digital Media Server;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2010-6-18 423280]
S3 SOHDs;VAIO Media plus Device Searcher;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2010-6-20 67952]
S3 SWDUMon;SWDUMon;C:\Windows\System32\drivers\SWDUMon.sys [2013-10-18 16152]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]
S3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2010-6-9 537456]
S3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2010-6-9 384880]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2010-6-9 101232]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-12-29 1255736]
S4 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2010-10-8 202752]
S4 MotoHelper;MotoHelper Service;C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe [2012-2-1 214896]
S4 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944]
S4 uCamMonitor;CamMonitor;C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2010-10-20 104960]
.
=============== File Associations ===============
.
FileExt: .vbe: VBEFile=NOTEPAD.EXE "%1"
FileExt: .vbs: VBSFile=NOTEPAD.EXE "%1"
FileExt: .js: JSFile=NOTEPAD.EXE "%1"
FileExt: .jse: JSEFile=NOTEPAD.EXE "%1"
FileExt: .wsf: WSFFile=NOTEPAD.EXE "%1"
.
=============== Created Last 30 ================
.
2014-01-06 17:08:47 10315576 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{990A0302-C520-4458-91D4-A1633E3E0DE7}\mpengine.dll
2014-01-05 22:06:57 -------- d-----w- C:\Users\Abel\.android
2014-01-05 22:06:55 -------- d-----w- C:\Users\Abel\AppData\Local\cache
2014-01-05 22:06:54 -------- d-----w- C:\Users\Abel\AppData\Local\Mobogenie
2014-01-05 22:06:54 -------- d-----w- C:\Users\Abel\AppData\Local\genienext
2014-01-05 22:01:03 -------- d-----w- C:\Users\Abel\AppData\Roaming\ValueApps
2014-01-05 16:50:44 10315576 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-12-28 16:10:12 -------- d-----w- C:\Users\Abel\AppData\Roaming\.minecraft
2013-12-23 16:31:17 -------- d-----w- C:\ProgramData\ioloGovernor
2013-12-23 16:31:14 -------- d-----w- C:\Users\Abel\AppData\Roaming\ioloGovernor
2013-12-23 16:30:49 -------- d-----w- C:\Users\Abel\AppData\Local\Programs
.
==================== Find3M  ====================
.
2013-12-11 01:34:20 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2013-12-11 01:34:20 692616 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2013-12-03 15:47:22 57584 ----a-w- C:\Windows\System32\iolobtdfg.exe
2013-12-03 15:47:14 26184 ----a-w- C:\Windows\System32\smrgdf.exe
2013-12-03 15:01:56 2155152 ----a-w- C:\Windows\System32\Incinerator64.dll
2013-12-03 15:01:54 2097984 ----a-w- C:\Windows\SysWow64\Incinerator32.dll
2013-11-23 18:10:43 16152 ----a-w- C:\Windows\System32\drivers\SWDUMon.sys
2013-11-19 10:21:41 267936 ------w- C:\Windows\System32\MpSigStub.exe
2013-10-28 23:02:18 66264 ----a-w- C:\Windows\System32\btwdi.dll
2013-10-28 23:02:18 2255064 ----a-w- C:\Windows\System32\BtwRSupportService.exe
2013-10-28 23:02:18 166104 ----a-w- C:\Windows\System32\drivers\btwampfl.sys
2013-10-28 23:02:16 2232024 ----a-w- C:\Windows\System32\BcmBtRSupport.dll
2013-10-28 23:02:16 170712 ----a-w- C:\Windows\System32\drivers\bcbtums.sys
2013-10-16 15:18:44 439296 ----a-w- C:\Windows\System32\AdpeakProxy64.dll
.
============= FINISH: 19:17:41.17 ===============
 

RELEVANCY SCORE 200
Preferred Solution: Windows 7 computer plays random audio, random reboots

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Windows 7 computer plays random audio, random reboots

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/519922 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.A new DDS log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.Please do this even if you have previously posted logs for us.If you were unable to produce the logs originally please try once more.If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.If you are unsure about any of these characteristics just post what you can and we will guide you.Please tell us if you have your original Windows CD/DVD available. Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.
Thank you for your patience, and again sorry for the delay.
***************************************************
We need to see some information about what is happening in your machine. Please perform the following scan again: Download DDS by sUBs from the following link if you no longer have it available and save it to your destop.DDS.com Download LinkDouble click on the DDS icon, allow it to run. A small box will open, with an explanation about the tool. No input is needed, the scan is running. Notepad will open with the results. Follow the instructions that pop up for posting the results. Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.
Information on A/V control can be found HERE.As I am just a silly little program running on the BleepingComputer.com servers, please do not send me private messages as I do not know how to read and reply to them! Thanks!

Read other 5 answers
RELEVANCY SCORE 99.6

Ok, my laptop, which is a Toshiba, running Windows Vista, has just recently started playing what sounds like random radio stations out of the blue. It happens when I'm on the internet and when my laptop is just sitting idle. I've noticed that my internet is running slower as well as getting popup ads by something that says "Ad served by Precisead." I've run the Malwarebytes scan as well as Mcafee, which is my antivirus software, and it didn't find anything. Any help would really be appreciated!!

A:Computer plays random audio/radio

Hello, let's do another scan..Next run ATF and SAS:Note: On Vista, "Windows Temp" is disabled. To empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator".From your regular user account..Download Attribune's ATF Cleaner and then SUPERAntiSpyware , Free Home Version. Save both to desktop ..DO NOT run yet.Open SUPER from icon and install and Update itUnder Scanner Options make sure the following are checked (leave all others unchecked):Close browsers before scanning.Scan for tracking cookies.Terminate memory threats before quarantining.Click the "Close" button to leave the control center screen and exit the program. DO NOT run yet.Now reboot into Safe Mode: How to enter safe mode(XP)Using the F8 MethodRestart your computer. When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu. Select the option for Safe Mode using the arrow keys. Then press enter on your keyboard to boot into Safe Mode. Double-click ATF-Cleaner.exe to run the program.Under Main "Select Files to Delete" choose: Select All.Click the Empty Selected button.If you use Firefox or Opera browser click that browser at the top and choose: Select AllClick the Empty Selected button.If you would like to keep your saved passwords, please ... Read more

Read other 7 answers
RELEVANCY SCORE 99.6

I'm aware that there are several other threads on this topic, but because things evolve I thought it was easier to post my own thread.

The audio first started a month or two ago, and I thought one of my tabs had autoplay or something. When it kept happening, I went to Google and found some of the threads on here and tried some of what they suggested. It seemed to have worked, but tonight it just started up again. I have no idea why, I haven't done anything different to my normal internet use.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:34:38, on 05/12/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16455)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
C:\Users\Kayt\Local Settings\Apps\F.lux\flux.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe
C:\Program Files (x86)\Ask.com\Updater\Updater.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Program Files (x86)\BitTorrent\BitTorrent.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Window... Read more

Read other answers
RELEVANCY SCORE 94.8

My Computer has been functioning normaly exept for the fact that when i am on the internet or not, it will randomly play music or ads. I have no clue what this is. I need help. I have done virus scans with Trend Micro And i havent found anything. What should i do?

A:Computer Plays Random Music And Random people talking

Hello and Welcome to TSF.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new thread, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

------------------------------------------------------

Read other 1 answers
RELEVANCY SCORE 92

My symptoms:

1. Clicking on result links of Google searches re-directed to another crude list of search results;
2. Windows updates fail;
3. Random audio plays; and
4. Constant Malwarebytes Anti-Malware notifications that it's blocking outbound comms to "a potentially malicious website" with IPs in the range of 112.175.234.21 - 24 at various ports with an ever-increasing range from 5xxxx on up (I installed Malwarebytes after I began to experience the first three problems).

DDS.txt Contents:

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_31
Run by Phillip at 14:04:35 on 2012-09-23
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.8181.5397 [GMT -4:00]
.
AV: Bitdefender Antivirus *Enabled/Updated* {98CD50CE-5097-4098-9669-6C401FB3969C}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Bitdefender Antispyware *Enabled/Updated* {23ACB12A-76AD-4F16-ACD9-57326434DC21}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchos... Read more

A:Google Searches Redirected; Windows Updates Fail; Random Audio Plays

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the ... Read more

Read other 19 answers
RELEVANCY SCORE 91.2

Hi, I am running my laptop with Windows 7 and I have a virus that I am unable to get rid of. My laptop will stream audio at random for 15 seconds to a minute. I have tried using MalwareByte's Anti-Malware and some other antivirus programs, but have been unable to stop random audio starting on this laptop. I am also unable to install any Window Updates and google and yahoo redirects me to another site anytime I go to click on a link from a search. I do not know what else to try or what to do. Any help is greatly appreciated.DDS LOG: .DDS (Ver_2011-06-01.06) - NTFSx86 Internet Explorer: 8.0.7600.16385Run by JEN at 20:33:46 on 2011-06-01Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3003.1504 [GMT -5:00].AV: avast! Antivirus *Disabled/Updated* {20B878C2-E6E2-4EFF-ADB5-C3E74BCBA535}77SP: avast! Antivirus *Disabled/Updated* {20B878C2-E6E2-4EFF-ADB5-C3E74BCBA535}66SP: Windows Defender *Enabled/Updated* {20B878C2-E6E2-4EFF-ADB5-C3E74BCBA535}55.============== Running Processes ===============.C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\svchost.exe -k LocalSe... Read more

A:audio plays at random, won't install windows updates, and redirects google search links;

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator&#... Read more

Read other 81 answers
RELEVANCY SCORE 89.2

Hello:

I do hope I am posting this in the right place on this forum; here is the issue:

I have an audio ad playing at random in the background on my PC; there is no video with it, and it plays whether my browers are open, or not, and at this time I am using Google Chrome browser, although at the time of this posting, I am using IE.

I downloaded and installed HJT, but when I ran it, I got some message about for some reason the hosts file was denying access, and for Vista, I was to right-click the HJT icon on the desktop, and select 'Run As Administrator'; only one problem: for some reason, I do not have that option in the right-click context menu, but for all of the other icons on the desktop, I do have the option; what is up with that?

Sys Specs:

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft® Windows Vista™ Home Premium, Service Pack 2, 64 bit
Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 4400+, AMD64 Family 15 Model 107 Stepping 2
Processor Count: 2
RAM: 3965 Mb
Graphics Card: NVIDIA GeForce 6150SE nForce 430, 128 Mb
Hard Drives: C: Total - 76316 MB, Free - 18566 MB; D: Total - 114437 MB, Free - 112877 MB;
Motherboard: BIOSTAR Group, N61PB-M2S
Antivirus: Anti-Virus and Anti-Spyware, Updated and Enabled (provided through Verizon)

I will be the first one to admit that when it comes to something like this, I am clueless, but it seeems there might be many steps to removal, and I ask for your patience with me. Additionally, HJT... Read more

Read other answers
RELEVANCY SCORE 89.2

Acouple of days ago I started getting random audio streams being played on my PC. Out of no where I'll hear an audio clip of something coming out of my speaker. It can play for a few seconds up to a minute. I think I have a "ghost" living in my PC.
 

Read other answers
RELEVANCY SCORE 89.2

So our old computer just bit the dust, and right now we're using an extra system from my dad's work (a university) that they had lying around.

Every now and then -- it's happened maybe 6 or 7 times now over the last week -- I'll be surfing or listening to music when all the sudden I'll get some random audio that fades in, plays for 5-20 seconds, and then cuts out. The first couple of times it was music, today it's happened three times -- the first a piece of that Bill Gates and Jerry Seinfeld ad, then a NASCAR/Budweiser ad, then that first ad again, with maybe 10 minutes to 1/2 hr between each.

My first thought is that it was a website. I've been using Firefox for the last couple of years with Adblock, but now I'm trying out the Chrome browser and so I'm seeing ads for the first time in ages. I assumed it was some ad playing audio, but there are none to be seen. Besides, the audio just cuts in and out intermittently, like you're tuning a radio.

Because this is a new system (for us--there are a couple of other user accounts on it from the university), it's hard to pinpoint what it could be because we're reinstalling a whole lot at once. Possible culprits could be Chrome, Pidgin, or maybe the new USB wireless network adapter we got. (W've never used a USB one before -- is it possible it could be picking up TV signals?) It could also be a virus.

Any help would be really appreciated. Let me know if you need any... Read more

A:Random audio plays

I had the same problem. It stopped when I killed the WeatherBug process - an application that uses a live internet connection to constantly update info. Check if you have Weatherbug or a similar process like Skype running.
 

Read other 2 answers
RELEVANCY SCORE 89.2

I am using Windows XP Professional Service Pack 3 on a Dell Latitude E6410 laptop. Lately I am hearing random AUDIO ads playing when nothing is open. Normally right after a windows reboot. Was using FORTINET for virus control and for some reason it stopped making updates. Went to remove / reinstall and now will not let me reinstall the program. Please help. I have tried on my own using HIJACKTHIS, MALWAREBYTES, and SPYBOT. Nothing seems to catch it. Thanks. I know the NameServer = 4.2.2.2 was setup for my work to access their network. Otherwise when I remove this, I can't check my work email from their internal wireless hotspots or visit their internal websites. Running GMER right now and it found something attached to iexplore.exe running as hidden. That makes sense, when Fortinet was running it would always block this program from accessing some outside ip address.

DDS (Ver_2012-10-19.01) - NTFS_x86
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 10.7.2
Run by Mattress Firm at 18:02:40 on 2012-10-22
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3510.2611 [GMT -4:00]
.
.
============== Running Processes ================
.
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\idt\wdm\stacsv.exe
C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
C:\... Read more

A:Random Audio Ad Plays

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator&#... Read more

Read other 27 answers
RELEVANCY SCORE 88.8

Help me out, my computer plays random sounds I cant turn off and pop up windows when I dont even have a browser opened! :(

The sounds are making me crazy , its a usual ticking noise that plays 10 times and it can come back an hour later or 10 minutes after, the other day it was a lady talking,

Also sometimes Ill leave my computer with nothing open and come back with like 10 weird offer windows opened!

And the other day my firefox kept shutting off for no reasons

Here's my hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 17:00:35, on 2008-08-21
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Digidesign\Drivers\MMERefresh.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\Cheetah Burner\Cheetah CD Burner\NMSAccess.exe
C:\Prog... Read more

Read other answers
RELEVANCY SCORE 88.4

Hi there:

I installed a program I needed for school a couple weeks ago and ever since then my comp plays random sounds like "congratulations you've won" or what appears to be the beginning of other advertisements. I thought it only played when I had a browser opened...but I've just noticed it plays irregardless of a browser being opened or not.

Any help to remove these random noises from my computer would be greatly appreciated!

Thanks a lot:

josegrose
 

A:RE: computer plays random audio: "congratulations you've won!" and other sounds.

Read other 16 answers
RELEVANCY SCORE 88

Hello guys, I'm new here. Here is the story: This morning when I turned on my laptop and after its start-up, all the sudden I started to hear people talking/advertising, and then random music started to play. I think this has happened to me before, but I forgot how to solve this problem. I've tried to use Hijackthis and I did not know which one to remove. Any suggestion will be appreciated. Here is the log:Logfile of Trend Micro HijackThis v2.0.4Scan saved at 10:50:35 PM, on 9/6/2011Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exec:\program files\common files\logitech\lvmvfm\LVPrcSrv.exeC:\Program Files\Avira\AntiVir Desktop\sched.exeC:\Acer\Empowering Technology\ePower\ePower_DMC.exeC:\WINDOWS\system32\ctfmon.exeC:\PROGRA~1\PPStream\ppsap.exeC:\Acer\Empowering Technology\ePerforman... Read more

A:Random audio plays on background

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 3 answers
RELEVANCY SCORE 88

So as of a couple days ago a random audio clip played, I had chrome open so I thought it was a page, but then I closed it and it kept going. I also noticed my computer randomly makes clicking sounds and when it does this it acts like I clicked the task bar so that nothing is selected. The audio clips are commercials and just random stuff (I got the mario song once). I've been googling this for days and tried what people have suggested/run multiple spyware and virus programs with no luck.

Here is my Hijackthis log:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:57:07 PM, on 7/29/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core... Read more

A:Virus plays random audio ads

Hello and Welcome to TSF.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 19 answers
RELEVANCY SCORE 88

Hello, I have had this virus a few times before, and usually would simply system restore and it went away. However, this time I've been doing a lot recently and don't want to have to reinstall or re download all my stuff, so any advice I could get would be greatly appreciated. Basically, I'll be doing whatever on the internet, and a random audio ad will play. It persists after the browser is closed, and on several occassions that I tried, right through the shut down of the computer. Malwarebytes doesn't catch it, and I'm out of ideas.

A:Virus plays random audio ads

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and
Quote:




Having problems with spyware and pop-ups? First Steps




a link at the top of each page.

Please follow our pre-posting process outlined below.

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 88

Hello, I have had this virus a few times before, and usually would simply system restore and it went away. However, this time I've been doing a lot recently and don't want to have to reinstall or re download all my stuff, so any advice I could get would be greatly appreciated. Basically, I'll be doing whatever on the internet, and a random audio ad will play. It persists after the browser is closed, and on several occassions that I tried, right through the shut down of the computer. Malwarebytes doesn't catch it, and I'm out of ideas. Following is the report from DDS.txt

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7601.17514
Run by Ben at 16:29:04 on 2012-07-12
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.6143.4052 [GMT -4:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atieclxx.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\ATI Tec... Read more

A:Virus plays random audio ads

Hello and welcome to TSF.

Please download aswMBR.exe and save it to your desktop.

Double click aswMBR.exe to start the tool. (Vista/Windows 7 users - right click to run as administrator) At this time, select No when prompted to download the Avast database.
Click ScanUpon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet.
You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well.

Read other 19 answers
RELEVANCY SCORE 88

I've been doing computer clean-up for many, many years and have successfully used ComboFix dozens of times with no problems.However.I've been working on this computer for a couple of days. Got a little rootkit that nothing would remove. Tried malwarebytes, TDSS, Sophos, Eset, Spybot, and so on.So combofix was the next step. Windows 7 64-Bit It started successfully, and as soon as it said creating system restore point, it rebooted. Whether it was the malware or combofix that rebooted it, I am not certain. But afterwards, as soon as the Windows logo would come up, it would go to a black screen as if it was loading, I could see the mouse cursor, but couldn't move it. it would never go past that. booting to safe mode allowed me to move the mouse, but still the same black screen. Tried Last known config. nothing. Ran Frst64 and below is the log from the scan. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-01-2014Ran by SYSTEM on MININT-JOPVD7H on 03-01-2014 12:25:58Running from G:\Windows 7 Home Premium (X64) OS Language: English(US)Internet Explorer Version 8Boot Mode: RecoveryThe current controlset is ControlSet001ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.==================== Registry (Whitelisted) ==================HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor)HKLM\...\Run: [RunDLLEntry... Read more

A:Windows 7 No boot after Combofix: Audio Advertisements, Random Reboots, scanned with everything

Sorry, 1 quick addendum I forgot to mention. After the initial reboot that was forced by whatever, it made it to the desktop, but all the icons were missing. If I hit the "show desktop" button in the lower right corner, they would appear and I could click them just fine. But as soon as I would open anything, the icons on the desktop would be gone again. I could run programs, double-click documents, surf the internet, etc.. no problems. Just couldn't get the icons to stay put. Checked to make sure combofix wasn't running in the background, nor anything else of importance, and did a manual reboot, to which I found the problem listed above.
 
Thank you.

Read other 10 answers
RELEVANCY SCORE 86.4

I'm running a 64 bit windows 7 home premium computer.

I started getting random clips of music/ads/speech when I turn my computer on. It doesn't matter if I open a browser or not click anything, it just happens.

I tried system restore which I thought worked, but it came back, which made me think 1 I didn't delete it or 2 it came back when Microsoft Security Essentials updated its virus definitions somehow giving me a virus.

Either way...here is my info. I hope you can help.


.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_31
Run by iRoss at 10:47:56 on 2012-07-10
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3832.2314 [GMT -7:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -... Read more

A:Virus plays Random Audio with no programs open

I thought MSE finally got rid of it after a full scan. But this morning it started back up again. If anyone could help me out I will be grateful.

Read other 19 answers
RELEVANCY SCORE 86.4

Hello,My problem is that my computer randomly plays audio files that seem to be from the internet (advertisements) which I cannot control. There is no video that comes up only audio, and I have not noticed any different processes running in task manager. I also keep getting pop-up messages that ask for adobe flash player to update (see attached picture) When I close it, another instantly pops up.Here is the DDS file:.DDS (Ver_11-03-05.01) - NTFSx86 Run by matt at 20:35:51.59 on Thu 04/28/2011Internet Explorer: 8.0.6001.19048 BrowserJavaVersion: 1.6.0_24Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3326.1668 [GMT -7:00].AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}.============== Running Processes ===============.C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Program Files\Creative\Shared Files\CTAudSvc.exeC:\Windows\system32\svchost.exe -k GPS... Read more

A:Random audio plays & constant security updates

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 18 answers
RELEVANCY SCORE 85.2

Hey, first time poster here. I see quite a few people are having very similar troubles. I tried to run malwarebytes, and superantispyware. mbam caught 4 trojans that i failed to write down the names of. I think one of them was something like trojan.zbotr.gen another had hijacker. It seems to be a bit better after that. The fake antivirus program which I belive was titled windows vista recovery stopped popping up. But my desktop is still black, I can't find any of my files and google redirects.
I have follwed the directions for posting here.

.
DDS (Ver_2011-06-03.01) - NTFSx86
Internet Explorer: 7.0.6000.16982
Run by Daniel at 14:20:04 on 2011-06-06
Microsoft? Windows Vista? Home Premium 6.0.6000.0.1252.1.1033.18.2046.1039 [GMT -7:00]
.
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k Network... Read more

A:Google redirects, files hidden, and random audio plays

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 14 answers
RELEVANCY SCORE 84.4

Greetings,I have tried Kaspersky, Spybot, and Malwarebytes in Safe Mode. Only Kaspersky found Trojan-Clicker.Win32Cycler.gen and Trojan-Downloader.JS.Agent.fnp files, and others... It said it disinfected it but the random audio ads and mouse-clicks still occur. I have deleted all my user account Temp files, not the Windows ones. It is maddening....Here is my DDS.txt file:DDS (Ver_10-03-17.01) - NTFSx86 Run by Brian Rogers at 14:01:02.36 on Thu 08/19/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_18Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.165 [GMT -7:00]============== Running Processes ===============C:WINDOWSsystem32svchost -k DcomLaunchsvchost.exeC:WINDOWSSystem32svchost.exe -k netsvcssvchost.exesvchost.exesvchost.exe 4C:WINDOWSExplorer.EXEC:WINDOWSsystem32spoolsv.exeC:WINDOWSsystem32tbctray.exeC:WINDOWSsystem32ctfmon.exesvchost.exe 4svchost.exeC:Program FilesJavajre6binjqs.exeC:WINDOWSsystem32nvsvc32.exeC:WINDOWSSystem32svchost.exe -k imgsvcC:WINDOWSSystem32svchost.exe -k HTTPFilterC:Program FilesOperaopera.exeC:Documents and SettingsBrian RogersDesktopdds.scr============== Pseudo HJT Report ===============uStart Page = hxxp://students.animationmentor.com/#main.mainBHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:program filescommon filesadobeacrobatactivexAcroIEHelperShim.dllBHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:progra~1spybot~1SDHelper.dllBHO: Java™ Plug-In 2 SSV... Read more

A:Random audio plays randomly, Trojan Clicker.Win32 suspect

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:CODEmsconfigsafebootminimalactivexdrivers32netsvcs%SYSTEMDRIVE%\*.exe/md5st... Read more

Read other 2 answers
RELEVANCY SCORE 84.4

Randomly Plays audio commercials in the background. Very slow bogged down running pc.
 
DDS (Ver_2012-11-20.01) - NTFS_x86 
Internet Explorer: 8.0.6001.19088  BrowserJavaVersion: 10.45.2
Run by owner at 10:29:57 on 2014-01-18
#Option MBR scan  is disabled.
Microsoft® Windows Vista™ Home Premium   6.0.6001.1.1252.1.1033.18.3002.1636 [GMT -6:00]
.
AV: Trend Micro AntiVirus *Disabled/Outdated* {48929DFC-7A52-A34F-8351-C4DBEDBD9C50}
SP: Trend Micro AntiVirus *Disabled/Outdated* {F3F37C18-5C68-ACC1-B9E1-FFA9963AD6ED}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\SMINST\BLService.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Trend Micro\BM\TMBMSRV.e... Read more

A:Infected with Trojan Zekos & Plays Random audio Commercials in background

Hello StinkyweedI would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same... Read more

Read other 27 answers
RELEVANCY SCORE 82

I tried a google search of this problem but I am still experiencing issues.

My computer will occasionally play random sounds and audio. Like just 5 minutes ago i heard half a commerical about i dont even know what because it cuts off out of nowhere. I attached a log of all my running processes in case anyone can find something that does not belong. I know it is not any IM client because i know what they sound like and i dont have an IM client running anyway.

Any help you can give me is appreciated. Thanks in advance.
 

A:My computer plays random sounds

I googled these and they come up as trojans and should be removed.

O23 - Service: mabidwe Service (mabidwe) - Unknown owner - C:\Windows\system32\mabidwe.exe
O23 - Service: noytcyr Service (noytcyr) - Unknown owner - C:\Windows\system32\noytcyr.exe
O23 - Service: roytctm Service (roytctm) - Unknown owner - C:\Windows\system32\roytctm.exe
O23 - Service: soxpeca Service (soxpeca) - Unknown owner - C:\Windows\system32\soxpeca.exe
O23 - Service: tdydowkc Service (tdydowkc) - Unknown owner - C:\Windows\system32\tdydowkc.exe
O23 - Service: wsldoekd Service (wsldoekd) - Unknown owner - C:\Windows\system32\wsldoekd.exe


wsldoekd.exe - DangerousWe suggest you to remove wsldoekd.exe from your computer as soon as possible. Wsldoekd.exe is Trojan/Backdoor. Kill the process wsldoekd.exe and remove ...
www.greatis.com/appdata/d/w/wsldoekd.exe.htm

Follow instructions for removal in links at top of forum.
 

Read other 15 answers
RELEVANCY SCORE 82

hi, my computer randomly plays random music or advertisements even when i'm not running ie. please check my log, thank you.

Deckard's System Scanner v20071014.68
Run by Ed on 2008-04-21 14:23:30
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
91: 2008-04-21 18:23:45 UTC - RP140 - Deckard's System Scanner Restore Point
90: 2008-04-21 13:52:10 UTC - RP139 - System Checkpoint
89: 2008-04-20 12:41:15 UTC - RP138 - System Checkpoint
88: 2008-04-19 12:28:10 UTC - RP137 - System Checkpoint
87: 2008-04-18 10:40:11 UTC - RP136 - System Checkpoint


-- First Restore Point --
1: 2008-01-22 19:36:05 UTC - RP50 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Ed.exe) --------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:26:26 PM, on 4/21/2008
Platform: Windows XP SP3, v.3264 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\sts... Read more

A:computer plays random music/ads

Hello! Welcome to forums!

There are some things you should know:

One or more of the identified infections is a backdoor trojan.

This allows hackers to remotely control your computer, steal critical system information and download and execute files.

I would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

Though the trojan has been identified and can be killed, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:

How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?
When Should I Format, How Should I Reinstall

We can still clean this machine but I can't guarantee that it will be 100% secure afterwards. Let me know what you decide to do.

Read other 19 answers
RELEVANCY SCORE 82

I have no idea what my Dell is infected with. I have read some previous posts about similar problems with random ads playing in the background during computer usage. I tried a few of the removal techniques but none have worked for me.
 
I have a Dell Inspiron and I am running on Windows XP. Whenever I get on my computer and my volume is turned on I hear random commercials and advertisments playing in the background. I cannot see any other windows open other than the ones I am using and I cannot find anything in my task manager either. This has been  a problem I've been dealing with for a while, thanks in advance for helping me solve it!
 
 
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.19088
Run by Junia at 20:31:56 on 2013-10-21
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.17.48\ccSvcHst.exe
C:\Program Files\Common Files\Motive\pcServiceHost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:... Read more

A:My Computer Plays Random Invisible Ads

Hello  lordj,
Sorry for the delay.
 
Please download TDSSKiller from here: http://media.kaspersky.com/utilities/VirusUtilities/EN/tdsskiller.exe
 
Let it run, and if there is anything found, click "cure", then reboot your computer. Please post the report it gives you in your reply.
 
Please also let me know how your comouter is running now.
 
Thanks,
tea

Read other 4 answers
RELEVANCY SCORE 80.8

Hi guys!

I am really a computer noob, and I really need help to figure out the problem I have with my laptop.
Beginning yesterday, my computer suddenly plays random sounds that I think come up from some sort of advertisement or radio dialogues, some last for a few second, some lasts for about 3 minutes or so.
And I am using the Logitech MX Revolution Mouse, and notice my mouse automatically go from click-to-click scroll mode to free spin scroll mode, which I think indicating that my laptop opened a few invisible advertisements.
I try to run spyware and antivirus using PC Tools Spyware Doctor + Antivirus, and everytime I cleaned a few Adware.Advertising and Application.TrackingCookies, when I run yet another scan a few minutes after, I find the same infections again and again.

Can somebody tell me what happened and how I can solve this problem?
Thank you!

A:My computer suddenly plays random sounds

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 80.8

Hi, about 4 months ago my computer got some viruses which i was able to clean up with the help of hijackthis, avg anti virus and adaware, one of the symptoms it had back then was random music would be played when there was no program open to be playing it. Today the music is back, however I don't have any of the other symptoms. Can someone please take a look at my HJT log ?

Logfile of HijackThis v1.99.1
Scan saved at 4:21:30 PM, on 1/14/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\system32\basfipm.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program ... Read more

Read other answers
RELEVANCY SCORE 80

Hello. I have a two month old HP Pavilion DV6500 Notebook PC. It has an AMD Turion 64X2 TL-60 2GHz processor and 2GHz of RAM. It has never ran without an active virus/anti-spyware software on it. It doesn't bog down or give me any serious fits. About 10 days ago it started playing about a one second clip of sleigh bells at random times of the day or night. Last night it played, for the first time, the sound of an old fashion cash register "cha-ching". I've rescanned my system with both antivirus and anti-spyware software and both have come up clean. Here is my HijackThis log. Any help you could give would be appreciated.

Logfile of HijackThis v1.99.1
Scan saved at 6:21:16 AM, on 1/17/2008
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)

Running processes:
C:\Windows\system32\Dwm.exe
c:\Program Files\Bioscrypt\VeriSoft\Bin\AsGHost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
... Read more

A:Computer plays sound clips at random times

bump

If this is the wrong forum to post this question in or if no one wants to answer it, can someone direct me to a forum where I CAN get some help?

Thanks

Read other 4 answers
RELEVANCY SCORE 80

I have completed the 'five steps'.

Step 1: None of the listed programs were found.
Step 2: Can not locate an online that runs with Vista. (Tried both Panda and TrendMicro.)
Step 3: SpywareBlaster is installed and active, could not install IESpyad.
Step 4: OS is completely up to date.
Step 5: DSS Installed and ran: see below

I have a three month old laptop that is, at random times, playing random sound clips. I've heard it make sleigh bells, birds chirping, and a cash register 'cha ching'. My anti-virus has a warning that the definitions are out of date. I have ran LiveUpdate and it downloads a new virus definition update but doesn't seem to install it. My definitions are dated December 20th. These seem to be the only two problems I can find. Any help would be greatly appreciated.

Here is my DSS main.txt. I'll also include the extra.txt as an attachment.

Deckard's System Scanner v20071014.68
Run by Aaron on 2008-01-21 10:15:35
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- Last 5 Restore Point(s) --
11: 2008-01-19 23:00:04 UTC - RP136 - Scheduled Checkpoint
10: 2008-01-19 06:48:45 UTC - RP135 - Scheduled Checkpoint
9: 2008-01-18 06:08:31 UTC - RP134 - Scheduled Checkpoint
8: 2008-01-16 23:00:04 UTC - RP133 - Scheduled Checkpoint
7: 2008-01-15 23:00:06 UTC - RP132 - Scheduled Checkpoint


-- First Restore Point --
1: 2008-01-09 15:38:47 UTC - RP126 - Windows Update


Back... Read more

Read other answers
RELEVANCY SCORE 80

I'm new at this forum so I hope I posting right, my computer started playing bleeps in the background and then it would play a little longed up to 30 seconds or so it doesn't seem t effect anything but slow the system down and it sounds like the hard drive is always spinning and looking for something. I've ran a couple of security scans with no help of course.(Microsoft security essientials) (superantispyware) so I guess this is how you do it   Please help someone!

Read other answers
RELEVANCY SCORE 79.6

My Windows XP Media Edition PC is infected with something. The most obvious symptoms are:
1) When using Firefox, new browser windows will randomly open -- to URLs that seem random. This happens often.
2) On occasion, audio will start playing -- as if some streaming internet audio was playing. I do not recognize the audio.

The above behavior started yesterday, Dec 26. Until then, I had no knowledge that something was wrong. However, once this started, I looked at Norton's log. (I have Norton 2008 running on the system.) On Dec 22, Norton discovered Virtumonde -- and thought it had removed it. On Dec 23, Norton again discovered Virtumonde and again thought it removed it. Since then, Norton does not find Virtumonde.

After I discovered that my system was having problems, I took the following steps:

Yesterday (Dec 26) I installed Spybot S&D. Spybot discovered Virtumonde (even though Norton no longer does). Spybot thought it successfully removed the infected keys. On a subsequent reboot, Virtumonde was again detected by Spybot.

I then installed MBAM. MBAM found additional evidence of Virtumonde. MBAM removed what it found. Subsequent reboots and rescans show that MBAM and Spybot think my system is clean of all issues they can detect.

Nonetheless, my system is continuing to exhibit the behaviors listed at the top. (#1, for sure; I do not yet know if #2 is resolved.)

The PC is networked in a LAN; the LAN is connected to the WAN via a DLink router. Two o... Read more

A:Random new browser windows when using Firefox, and random audio

Disconnect from the net. Reset your router and give it a strong password.If you use Spybot's Teatimer, disable it for now----------------------------Update Malwarebytes. This time do a FULL scan and post the new log here for us to look at

Read other 2 answers
RELEVANCY SCORE 77.2

I've had this problem for a while now! When I play Starcraft 2, WoW or watch Youtube vids about Starcraft 2 my computer reboots. I get a black screen and then it quickly starts up again without any bluescreen. I tried using verifier.exe but when I restart I get an error and bluescreen about dtcdrom.sys.

I have tried reinstalling Windows XP, and running memtest without any errors. The problem still occurs.

Info about my computer:

OS Version: Microsoft Windows XP Home Edition, Service Pack 3, 32 bit
Processor: Intel(R) Core(TM)2 CPU 6600 @ 2.40GHz, x86 Family 6 Model 15 Stepping 6
Processor Count: 2
RAM: 2047 Mb
Graphics Card: NVIDIA GeForce 9800 GTX/9800 GTX+, 512 Mb
Hard Drives: C: Total - 238464 MB, Free - 175492 MB;
Motherboard: ASUSTeK Computer INC., P5B, Rev 1.xx, MB-1234567890
Antivirus: AVG Anti-Virus Free, Updated: Yes, On-Demand Scanner: Enabled

I attached a crashdump, I would really like to know what is wrong with my computer so I know what to replace or fix since I'm too poor to buy myself a new computer.

[Edit]: Forgot to mention I have cleaned the case from dust and all fans are working properly, all temperatures look normal to me.
 

A:Computer random reboots

Read other 14 answers
RELEVANCY SCORE 77.2

well i resently installed an agp card on my computer ati radeon 9200 128 vid card and now all of a sudden my computer has started to reboot at random no warning no bsod noting it just up reboots, some times it will work for days no problem and other times it runs untill all the programs load and then reboots, it always makes it thro windows startup and will sit at the login screen till u login it only starts acting up after login and all the programs load any help is appreciated oh and it hates my virus scanner of any sort trying to scan the system so i think it might be a virus, running an online scan now my system spes are ... well i know its a piece of sh!t but its all i have for now. intel celeron 466 785 of pc 133 ram 128 ati radeon 9200 agp 2x 120 gig drive 6 gig and a 37gig sblive xgamer sound card 400 watt ps any help is greatly welcome and my old vid card is a hehe vodoo 3 2000 16 meg
 

A:Computer reboots at random

Hello and welcome to Techspot.

As for your suspected virii malware problem take a look HERE and follow the instructions carefully. I would recommend that you print them out if possible.

Once you have done that then look HERE and follow the instructions on how to post your Hijackthis log.

As to your rebooting issue if you are running either Windows xp or 2000 then right click on my computer and select properties then the advanced tab then under startup and recovery click settings and uncheck the box that says automatically restart click apply ok and reboot your computer.

Now instead of your system rebooting when there`s a problem you should receive an error message telling you what caused the problem.

Pay particular attention to any drivers identified in the stop message.

If you don`t understand the stop message then post the details here and someone will take a look at it for you.

Regards Howard :wave: :wave:
 

Read other 6 answers
RELEVANCY SCORE 77.2

Hi,

My computer has recently been rebooting for no apparent reason. When it happens the computer screen just turns black and the computer reboots back into windows. The interval between reboots is sporadic.

I had this problem before with my old setup and I figured it was an hardware issue, so I replaced the motherboard, cpu, psu, SSD HD, ram and switched to onboard graphics to no avail.

I know you guys are the experts so I hope you can help.

System specs:
===========
Custom built few months ago
Windows 7 64 bit Home Premium - OEM purchased
Core 2 duo 7500
2 GB RAM
Onboard graphics

Attached is Windows_NT6_BSOD_jcgriff2.zip.

A:Computer Random Reboots w/ Win 7

This will stop the reboots
Disable Windows 7 Auto Restart When System Crash - Windows, System, Settings, Advanced, This, Uncheck - Zhacks
If it happens again, post again, it will probably contain a BSOD dump report.

Read other 3 answers
RELEVANCY SCORE 77.2

Hello, for the past day or two my computer randomly reboots itself (usually a few seconds after I have booted up the computer to the desktop, or while im using the internet or playing games).

Firstly before the reboot the monitor cuts off and the message "no signal" appears, then aprrox 10 seconds later the computer will reboot and it turns into and endless cycle of reboots after the computer has loaded the desktop.

- I have tried using my system restore disk to restore to factory defaults, didn't work I'm still getting random reboots.

- Seeing as the monitor was cutting off, I uninstalled my current graphics drivers and installed the latest ones, didn't work.

- I ran virus scans and spyware scans, nothing found.

- I made sure everything was connected as it should which it was, (i havn't changed anything to the computer these reboots just started randomly happening about 2 days ago)

- The fans are working fine it's not overheating or anything like that.

HOWEVER, these reboots do not happen if i am in safe mode, hence why i am making this thread now.

My graphics card is an NVIDIA GeForce 6600 (cant remember the exact name)
Processor is AMD Athlon 64 3400+
Hard Drive is 300gb
RAM is 1024

I fear that this is a hardware related problem to either my graphics card or my motherboard, in which case i'll have to spend money to replace them which i really do not want to do, however seeing as im not really familiar with fixing computer stuff i'll ... Read more

A:Random Computer Reboots

EDIT: i restored all system files and boot files using the restore disk not everything to factory defaults.

Read other 14 answers
RELEVANCY SCORE 77.2

The title says it all. I recently cleaned out the dust from the hard drive case and fixed the broken circulatory fan by plugging the wires into another plug that was just hanging there, seemingly with no purpose. However, I notice that the inside the actual Pentium case (the little box inside of the hard drive?) gets very hot in a very short period of time! The SpeedFan readings always indicate the little "burning" symbol next to "AUX", and it is always above 210 degrees (Farenheit). Please help!
 

A:Random computer reboots..

Read other 6 answers
RELEVANCY SCORE 77.2

My computers seems to reboot itself at random. Sometimes this occurs when I open an application, other times when I save or close an application ... but always when an "event" is triggered.

I have a custom PC with an ASUS P3V4X motherboard, 256 PC-133 RAM and a Pentium III 7333MHz processor.

I ran a PC monitor to see if it could find a problem and it contiunually alerted of voltage spikes. Could I have a bad power source? Is it the motherboard?

Any help would be *much* appreciated! Thanks!
 

A:Computer reboots at random

It could be a bad power supply, or a loose connection. Check that first. Make sure all adapter cards and power and signal cables are fully seated. If that doesn't help then try the computer in a different location. Your outlet may be unstable. Do you have it on a surge supressor and if so is the supressor working?
If possible, try putting the computer on an UPS.
 

Read other 1 answers
RELEVANCY SCORE 76.4

Hello everyone,

I've had a recurring problem for the last couple of months with my computer locking up completely or it just locks up then restarts. This usually happens soon after i have turned on my computer and it doesn't seem to be related to anything in particular that I'm doing. Usually I am just checking my mail or surfing the web. The problem is quite infrequent, but it's really annoying when it happens. I'm no computer boffin, but i do know that i get an error message (from microsoft online crash analysis) which says the following :



Error caused by NVIDIA Graphics Driver: No specific solution found

Problem Description

An unknown error occurred in NVIDIA Graphics Driver, created by NVIDIA? Corporation.

Problem Resolution

NVIDIA? Corporation is currently not aware of a specific solution for the problem that you reported. Below is a list of recommendations to take that may help prevent the problem from recurring.


Download and install an updated NVIDIA Graphics Driver from one of the following locations:
Windows Update
NVIDIA? Corporation
If an updated driver is not available, check with your computer manufacturer.
If you are running the latest version of NVIDIA Graphics Driver, please contact NVIDIA? Corporation for your support options.


Additional Information


If this problem continues to occur with the latest product updates for NVIDIA Graphics Driver we highly recommend you obtain assistance and troubleshooting information... Read more

A:My Computer locks up or reboots at random

it could definitely be a driver issue, that version of videocard drivers you are using? what version are you using? list out your computer hardware specs and ill see what i can do to help you out alot more. what motherboard you have? graphics card? cpu?

Read other 6 answers
RELEVANCY SCORE 76.4

Hi everyone,

I come to you with a rather strange problem. I come to you because I have no idea where to begin diagnosing such a problem. I just ordered parts for a brand new computer, built it, and am now running it very happily. However, within the past few days (the computer was finished being built about a week ago), it's started randomly rebooting while undertaking routine tasks in Windows. There seems to be no logical software-related pattern to the reboots so I have no idea what's causing it. It happens thus: audio skips for a few seconds, I hear a click inside the computer, and then it just restarts.

The parts in the computer are as follows:

Case: Cooler Master Mystique
Power Supply: RAIDMAX RX-630a 630W
Motherboard: ASUS P5NSLI
Processor: Intel Core 2 Duo E6400
Memory: Mushkin 2 GB (2 x 1 GB) DDR2 667 (PC2 5300)
Video: XFX NVIDIA GeForce 7600GT 256 MB
Sound: Onboard for now
Firewire: Koutech PCI to 1394a Card

As I said, there seems to be no software pattern to the reboots... The only recent hardware change is that I've put in the Firewire card (it came in later than the rest of the computer, so I ran a few days without it). I almost want to suspect the Firewire card is causing such a problem -- is that reasonable?

In addition to that, I have an external USB hard drive that's failing... it's connected via the Firewire, and one of the restarts happened when I turned off the drive. Assuming that means it's one of those two, could it be ... Read more

A:New custom computer - random reboots?

Read other 13 answers
RELEVANCY SCORE 76.4

Yesterday my computer randomly rebooted and today it did the same thing. I checked the Event Viewer and it said that the process lsass.exe failed, but I'm not sure how to fix it. I ran a hijackthis scan just in case it was related...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:49:25 AM, on 4/12/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\WTablet\Pen_TabletUser.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Stardock\CursorFX\CursorFX.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Program Files\MSN\MSNCoreFiles\msn.exe
C:\Program Files\MSN\MSNIA\CC\MSNCC\logonmgr.exe
C:\Program Files\MSN\MSNIA\CC\MSNCC\msncc.exe
C:\Program Files\MSN\MSNIA\CC\MSNCC\WA\MSNAccel.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R... Read more

A:Unstable computer, random reboots

Welcome to the TSF.

Sorry for the delayed response. If you have not received help elsewhere and still need help please follow the instructions in IMPORTANT - Read This Before Posting A Log and post the two text files, main.txt and extra.txt produced by the Deckard's System Scanner (formerly Comboscan), as it has been a while since you posted.

Read other 1 answers
RELEVANCY SCORE 75.2

About a month ago, after restarting my laptop, I heard random ads playing without any windows being opened. Doing research, combined with lack of being home, I've tried different ways to fix it including anti-malware softwares, anti-virus checks, etc. However, the ads persist for about 15 minutes without being able to close them out. AVG popped up once and told me that a file similar to rpcss.dll in Windows/System32 was infected, but a scan showed it was actually in a windows/winsxs/x86 folder instead. It's still happening and I don't know how to fix it. I would appreciate help as soon as you guys can, please. Thanks in advance.
 
Here's the DDS Log:
 
DDS (Ver_2012-11-20.01) - NTFS_x86 
Internet Explorer: 7.0.6001.18639  BrowserJavaVersion: 10.25.2
Run by Mitchell at 15:30:28 on 2014-02-03
Microsoft® Windows Vista™ Home Basic   6.0.6001.1.1252.1.1033.18.1978.522 [GMT -5:00]
.
AV: AVG AntiVirus Free Edition 2013 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: AVG AntiVirus Free Edition 2013 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
FW: AVG Internet Security 2013 *Disabled* {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
.
============== Running Processes ================
.
C:\PROGRA~1\AVG\AVG2013\avgrsx.exe
C:\Program Files\AVG\AVG2013\avgcsrvx.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\SLsvc.exe
C... Read more

A:Windows Vista plays random ads in background upon reset -- rpcss.dll file

Hello areshkaboo I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the sam... Read more

Read other 8 answers
RELEVANCY SCORE 74.8

Greetings fellas.

I have recently bought the computer Asus U36SD with i5 2410 sandy bridge, 500 gigs hdd, 4 gigs of ram and Nvidia GT520.

Got tired of the harddisk and wanted to try something new by installing OCZ Vertex 3 120GB SSD on it. It seemed to work well until I got random reboots, and the system freezes for like 1-2 minutes pretty often. When you see it freezes, you see the HDD indicator isn't flashing, it's just a light like it's working its ass off. This happens when the computer is running on battery and not when it's charging (strange though).

I have as well, tried to reinstall the system with an other Windows 7 system, without any luck. I also changed the SSD by an other brand new SSD from the store where I bought it, but it didn't solve the problem either.

After some looking in the logs, I found that it was en "Event ID 41"-error code that causes the random reboots, if it's related to the random freezes aswell, I have no idea.

Google suggested that I should update the BIOS, done but with no luck. They also suggested that I should update my drivers and so on, I did that too, but I still got the same problem.

Event ID 41 also seem to be a very known problem, but I didn't find any fix for it. And yes, these problems only appeared when I installed the SSD, so I think the SSD is the main problem, but I know the computer supports SSD, since it also can be bought with SSD.

I have Windows 7 x64 Ultimate

So, is there any of you that cou... Read more

A:Event ID 41 error from random reboots & freezes on my computer

Bumping the thread.

Read other 3 answers
RELEVANCY SCORE 74.8

Hi all
I recently reformatted my PC and it was running great (which is a rare occurance!). However, within weeks I managed to get myself a Rootkit virus. At the time, I accessed a website (I can't remember which), a cmd.exe prompt appeared and then my google searches started redirecting to random websites - I knew something wasn't right.

I think I managed to get rid of it, I looked around on the internet for a solution, followed the steps, and then no more searches getting redirected.

However, my computer has since randomly began to reboot without prior notice. I've had this issue before, so I have no idea if it's related, but when I said my PC was running great after a recent reformat, it wasn't doing this until after I managed to get the rootkit.

Anyway, I've done a bit of searching again and I think I could be infected with either GamesThief or KoobFace. The reason I think this is because PEV.exe was present in my C:\Windows folder. I have since deleted PEV.exe.

So really, I'm asking if someone could talk me through scanning my PC to see if it's clean as this BSOD reboot is really annoying. I have installed 'NirSoft BlueScreenView' so I can see the contents of the blue screen before my PC reboots. The pattern with all my blue screen crashes is that ntoskrnl.exe always seems to be present - I don't know if this is relevant at all.

Any help is much appreciated.
Thanks.

A:Possible RootKit Virus? Random Computer BSOD reboots.

Hello and welcome! Let's start with these and review the logs.What is the Operating system ?Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware (v1.46) and save it to your desktop.Before you save it rename it to say zztoy.exe alternate download link 1alternate download link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button... Read more

Read other 4 answers
RELEVANCY SCORE 74.8

All this has started happening since I installed Kaspersky Anti-Virus 6. (Before Kaspersky I had the free edition of AVG)When I double click on the IE 7 desktop icon I get an error message in the status bar that says "res://IEFRAME.dll/dnserrordiagoff.htm". Now, when I refresh this error disappears and goes straight to my home page.My other problem is that my PC reboots itself when ever I go on MSN Messenger. I have tried reinstalling MSN and Kaspersky, but no luck! Here is my HijackThis log:Logfile of HijackThis v1.99.1Scan saved at 16:44:00, on 30/04/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16414)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\keyhook.exeC:\WINDOWS\Mixer.exeC:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exeC:\WINDOWS\system32\Rundll32.exeC:\WINDOWS\system32\LVCOMSX.EXEC:\Program Files\Logitech\Vide... Read more

A:Error: Res://ieframe.dll/dnserrordiagoff.htm & Random Computer Reboots

Hello batazerWelcome to Bleeping Computer! Sorry about the delay. We're all volunteers here, and it's been very busy. If you still need help, please post a new HijackThis log to make sure nothing has changed. Before posting the log, please make sure you follow all the steps found in this topic: Preparation Guide For Use Before Posting A Hijackthis Log <--link And I'll be happy to look at it for you.I also need to see a different type of log from Hijackthis: Run Hijackthis.Click on "Open the Misc Tools section".Next click on "Open uninstall manager".Press the button 'save list'. It will open a Notepad file.Place the content of that file here in your next reply.Thanks, for your patience. Stelios

Read other 1 answers
RELEVANCY SCORE 74.8

Hello all.

I have a Surface Pro 3 with 8.1. When i leave the device unattended overnight it reboots. There are numerous references in the event log about unexpected shutdowns. There is also this:
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000009f

I've attached the SFdebugFiles. ​Thanks in advance.

A:Computer random reboots at night with Bugcheck errors.

bump...

Read other 3 answers
RELEVANCY SCORE 74.8

My computer either reboots, freezes, or just gives me a black screen every 10-20 minutes when I'm online and offline. Also sometimes it freezes when it's counting memory at the start, and other unusual places. I am running a dual boot, Windows XP beta and Windows 95b. Same problem occurs in both operating systems. I even physically moved the computer in place of my old one, where I know for sure all the outlets work, and I still had the same problem. I tried running in safe mode, same problem occurs. I unplugged everything except the monitor, keyboard, mouse, and still same thing. I barely installed Norton Systemworks, and then when it begun checking for problems it froze. I think it might be a hardware problem, I am just asking you all what could be the problem in my computer.

My computer is 650 mhz Athlon.

Thank you in advance.
 

A:Computer reboots/freezes at random time and place.

Read other 6 answers