Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Phantom Flash


  • Please log in to reply
4 replies to this topic

#1 Roderunner

Roderunner

  • Members
  • 107 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland UK
  • Local time:02:14 AM

Posted 10 May 2009 - 08:02 AM

For the last week or so I have been getting a white box of no particular shape with writing in it, flashing just above the taskbar.
It never appears for long enough to read any of it, or appear after doing a particular operation, it just appears at random. I have done full virus/malware scans and found nothing. Apart from that my PC is running well. Vista Home Premium. :huh:

George's PC Specs. / Laptop.  Desktop.


BC AdBot (Login to Remove)

 


#2 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:09:14 PM

Posted 10 May 2009 - 04:50 PM

Please download and run Process Explorer

http://technet.microsoft.com/en-us/sysinte...s/bb896653.aspx

Under file and save as, create a log and post here

copy and paste into a reply
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#3 Roderunner

Roderunner
  • Topic Starter

  • Members
  • 107 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland UK
  • Local time:02:14 AM

Posted 10 May 2009 - 06:28 PM

Hope its done correctly as I've never used this d/l before.
---------

Process PID CPU Description Company Name
System Idle Process 0 95.67
Interrupts n/a 1.54 Hardware Interrupts
DPCs n/a Deferred Procedure Calls
System 4
smss.exe 704
csrss.exe 772
wininit.exe 824
services.exe 872
svchost.exe 1092
unsecapp.exe 712 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation
WmiPrvSE.exe 2244
NMIndexStoreSvr.exe 1292 Nero Home Nero AG
mobsync.exe 5808 Microsoft Sync Center Microsoft Corporation
dllhost.exe 5592 COM Surrogate Microsoft Corporation
nvvsvc.exe 1152
rundll32.exe 1548
svchost.exe 1180
svchost.exe 1296
audiodg.exe 1460
svchost.exe 1372
dwm.exe 732 Desktop Window Manager Microsoft Corporation
WUDFHost.exe 3336
svchost.exe 1388
taskeng.exe 420 Task Scheduler Engine Microsoft Corporation
taskeng.exe 1084
taskeng.exe 3628
psi.exe 3680
svchost.exe 1480
SLsvc.exe 1496
svchost.exe 1556
spoolsv.exe 1836
sched.exe 1864
svchost.exe 1876
schedul2.exe 2692
acs.exe 2708
avguard.exe 2736
BOCore.exe 2756
svchost.exe 2780
svchost.exe 2836
svchost.exe 2916
TrueImageTryStartService.exe 3012
svchost.exe 3136
SearchIndexer.exe 3184
NMIndexingService.exe 3756
usnsvc.exe 1928
lsass.exe 888
lsm.exe 896
csrss.exe 832
winlogon.exe 920
explorer.exe 1100 Windows Explorer Microsoft Corporation
rundll32.exe 116 Windows host process (Rundll32) Microsoft Corporation
avgnt.exe 1920 Antivirus System Tray Tool Avira GmbH
jusched.exe 1636 Java™ Platform SE binary Sun Microsystems, Inc.
op_mon.exe 404
BOC427.EXE 1312 COMODO BOClean - Anti-Malware COMODO
winampa.exe 1452
TrueImageMonitor.exe 1660 Acronis True Image Monitor Acronis
TimounterMonitor.exe 2052 Monitor for Acronis True Image Backup Archive Explorer Acronis
schedhlp.exe 2060 Acronis Scheduler Helper Acronis
msnmsgr.exe 2084 Messenger Microsoft Corporation
NMBgMonitor.exe 2092 Nero Home Nero AG
mplayerc.exe 4584 1.54 Media Player Classic - Homecinema mpc-hc@Sourceforge
procexp.exe 5824 1.54 Sysinternals Process Explorer Sysinternals - www.sysinternals.com



George's PC Specs. / Laptop.  Desktop.


#4 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:09:14 PM

Posted 10 May 2009 - 08:06 PM

It appears that you might have two firewalls running:
op_mon.exe by Agnitum Ltd.
BOCore.exe is for Comodo Firewall or Spyware Terminator
If it's 2 firewalls, remove one

NMIndexStoreSvr.exe 1292 Nero Home Nero AG

nmindexstoresvr.exe is part of Nero Scout that comes with Nero CD/DVD Burning 7. Nero Scout is a database program that catalogs all of the media files on your computer and that makes this database available to other programs in the Nero 7 product package. This process can be removed to free up system resources.\r


Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#5 Roderunner

Roderunner
  • Topic Starter

  • Members
  • 107 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland UK
  • Local time:02:14 AM

Posted 11 May 2009 - 03:03 AM

All I have on my PC from Comodo is BOClean.
On closer inspection, the 'popup' seems to be coming from WL Messenger Version 8.1

George's PC Specs. / Laptop.  Desktop.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users