BleepingComputer.com: Beeping computer tied to infection?

In the middle of the night, approx 12:57am, my computer shoots out a series of 8 short beeps, every single night. My previous computer which I'd had for 5 years, started doing this about a month ago, followed by a HORRIBLE series of infections that basically shut the poor thing down.

Last week, I purchased a brand new computer. And suddenly, a few days ago, it started doing the same thing. I'm not super computer savvy, but I'm wondering if this beeping is somehow tied to some sort of infection?

Any thoughts or suggestions would be greatly appreciated!
Thank you!
-Sheena

Hello and to BleepingComputer.

Let's see if we can dig something up.

Please download RKill by Grinler from one of the 4 links below and save it to your desktop.

Link 1
Link 2
Link 3
Link 4

• Before we begin, you should disable any anti-malware software you have installed so it does not interfere with RKill running. This is because some anti-malware software mistakenly detects RKill as malicious. Please refer to this page if you are not sure how to disable your security software.
  
• Double-click on Rkill on your desktop to run it. (If you are using Windows Vista, please right-click on it and select Run As Administrator)
  
• A black screen will appear and then disappear. Please do not worry, that is normal. This means that the tool has been successfully executed.
  
• If nothing happens or if the tool does not run, please let me know in your next reply

***************************************************

Please download Malwarebytes Anti-Malware and save it to your desktop.
alternate download link 1
alternate download link 2

IMPORTANT!!! - when you save the file, rename it to something random, such as bubbles.exe This must be done before beginning the download!

MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.

• Make sure you are connected to the Internet.
  
• Double-click on mbam-setup.exe to install the application.
  
• When the installation begins, follow the prompts and do not make any changes to default settings.
  
• When installation has finished, make sure you leave both of these checked:
  • Update Malwarebytes' Anti-Malware
    
  • Launch Malwarebytes' Anti-Malware
  
  
• Then click Finish.

MBAM will automatically start and you will be asked to update the program before performing a scan.

• If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
  
• If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.

On the Scanner tab:

• Make sure the "Perform Quick Scan" option is selected.
  
• Then click on the Scan button.
  
• If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  
• The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  
• When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  
• Click OK to close the message box and continue with the removal process.

Back at the main Scanner screen:

• Click on the Show Results button to see a list of any malware that was found.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When removal is completed, a log report will open in Notepad.
  
• The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  
• Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
  
• Exit MBAM when done.

Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.

~Blade


In your next reply, please include the following:
Malwarebytes Log

Hi Blade!

Thank you! I'm sorry for the delay, I posted across a few forums and overlooked this one after I posted. Please find the blog below:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 5127

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

11/16/2010 7:01:36 AM
mbam-log-2010-11-16 (07-01-36).txt

Scan type: Quick scan
Objects scanned: 157008
Time elapsed: 2 minute(s), 46 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\$Recycle.Bin\S-1-5-21-3290396616-4159819428-2656926344-1001\$RLBMCX9\Office 2007 KeyGen.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.


In addition, the way I got around the beeping previously, was to turn off the external beeping in the computer. This non-solution did help, but a short time ago, I noticed the beeping returned. Now, about an hour earlier.... ~mysterious~

IMPORTANT NOTE: Your scan log results indicate you are using keygens/crack tools.

The practice of using cracking tools, keygens, warez or any pirated software is not only considered illegal activity but it is a serious security risk.

Quote

trendmicro.com/vinfo

Quote

Keygen and Crack Sites Distribute VIRUX and FakeAV

Quote

University of Washington spyware study

Quote

Bad Web Sites: Malware

When you use these kind of programs, be forewarned that some of the worst types of malware infections can be contracted and spread by visiting crack, keygen, warez and other pirated software sites. In many cases, those sites are infested with a smörgåsbord of malware and an increasing source of system infection. Those who attempt to get software for free can end up with a computer system so badly damaged that recovery is not possible and it cannot be repaired. When that happens there is nothing you can do besides reformatting and reinstalling the OS.

Using these types of programs or the websites you visited to get them is almost a guaranteed way to get yourself infected!!

quietman7, I'm really not sure what any of that means, but it sounds serious. My son is much more computer savvy than myself so perhaps I'll get him to help me proceed. Thank you for your help!

This file Office 2007 KeyGen.exe is used to illegally install Microsoft Office 2007. The keygenerator will generate a key which is not a genuine volume license product key for Microsoft Office 2007.

Some of the worst types of malware infections can be contracted and spread by visiting crack, keygen, warez and other pirated software sites to download such files.