Posted 20 January 2009 - 11:25 AM
After a few more days of testing I have finally discovered where this sound is coming from. I am posting my solution for others who might encounter this...
The sound was coming from: Scheduled Tasks - After a recent bout with Virtumonde variant (and friends), and after a slew of removal tools... there were a few bits left around. Every hour, the following tasks would try to run:
Showed up at hourly scheduled Tasks -
While the dlls had been identified and removed by the anti-malware, the scheduled tasks had not. These were set to run every hour on the hour. Even without the .dlls being there, RUNDLL.EXE is still there and runs, but cannot find the DLLs to run - and this is where the critical stop sound comes from!
So, just deleting the Scheduled Tasks solved the mysterious Critical Stop Sound. Yay!!!!
I have to credit my wife with cluing me into this solution, as she said "Hey, that seems to be happening on the hour..." And, then of course a light bulb went on in my head and I thought.... Hmm, there must be something in Scheduled Tasks!
Well, hope this is useful to someone else who gets driven nuts by this... The behavior makes you think you have an infection... when you in actually do not, just a non-functioning remant.
All the best.