Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Bizarre Intermittent Problem - Possible Trojan Infection


  • This topic is locked This topic is locked
2 replies to this topic

#1 headsh0t

headsh0t

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:01:16 AM

Posted 08 October 2010 - 01:52 PM

Hi, I have a Windows 7 PC and up until recently I havent had any problems.

I have 3 profiles on it, one being mine, one being my girlfriends and one being her daughters.

She uses Internet Explorer 8 for web browsing but I have never liked Internet Explorer and prefer to use Firefox.

She first noticed an issue a couple of weeks ago on her profile, when she would tell me the PC has 'frozen' and nothing is responding, to which her resolution is to just hit the reset button.

Ok that does work but its not the right way to restart the PC. She said it has been a reoccurring issue which started about 2 weeks ago. She said it would be fine and she would be using it without issue and then she would go away from the keyboard to do something and when she returns, the PC has 'frozen'.

She said when it had frozen, it would have multiple Outlook Windows on the screen and multiple instances of the calculator. She claimed they had opened by themselves and I know for a fact neither of us use Outlook.

One evening when I was home and not at work, she left the PC on her profile, idling with a couple of Internet Explorer windows open when she had been browsing previously. We were both watching TV for an hour or so and when she went back to the PC, it had an Outlook window open on it and an instance of the calculator.

She said its 'frozen' again. I said just because you cant click on anything doesnt mean its frozen to the point where it needs to be restarted. I had a look and pressed alt + tab to cycle through the open applications. I was able to do this and choose which application to view, which to me meant it had not 'frozen'.

I have ran numerous malware and antispyware applications through the pc and even though some items are found and deleted, the problem remains. My Hijackthis log is also clean.

I have noticed this is not isolated to her profile as it occurs on my profile when I use Firefox, although its not quite the same. Occasionally and intermittently, I will be unable to click taskbar items or fields on webpages. The mouse will move but clicking has no effect on certain parts of a webpage or the open taskbar icons.

A quick resolve for when I cant click on, for example, the google search field, which I find weird, is simply to minimize the window and then maximize it again, which then allows me to click the google search field and type in it. This has happened a lot and seems to work every time.

Also on my partners profile the other night, I noticed 3 instances of iexplore.exe in the processes in Task Manager. This set alarm bells ringing as Im sure there isnt meant to be anymore than one instance of iexplore.exe listed in processes. Although I found out the other day, that it is normal for IE8 to use 2 instances of iexplore.exe.

There seems to be no set pattern to the problem and it can occur at anytime. Its almost like taskbar icons and fields on web browsers 'goto sleep'.

Ive never come across anything like it but I am well and truly baffled.

Can anyone offer some advice on what to do to resolve this please?

BC AdBot (Login to Remove)

 


#2 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,779 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:02:16 AM

Posted 17 October 2010 - 05:06 AM

Hello and welcome to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

Please include a clear description of the problems you're having, along with any steps you may have performed so far.

Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.

Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.
We need to create an OTL Report
  1. Please download OTL from one of the following mirrors:
  2. Save it to your desktop.
  3. Double click on the icon on your desktop.
  4. Click the "Scan All Users" checkbox.
  5. In the custom scan box paste the following:
    CODE
    msconfig
    safebootminimal
    activex
    drivers32
    netsvcs
    %SYSTEMDRIVE%\*.exe
    /md5start
    explorer.exe
    winlogon.exe
    hlp.dat
    /md5stop
    %systemroot%\*. /mp /s
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job /lockedfiles
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\System32\config\*.sav
    %systemroot%\system32\drivers\*.sys /90
  6. Push the button.
  7. Two reports will open, copy and paste them in a reply here:
    • OTL.txt <-- Will be opened
    • Extra.txt<--Will be minimized

In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. I suggest you do this and select Immediate E-Mail notification and click on Proceed. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine.

After 5 days if a topic is not replied to we assume it has been abandoned and it is closed.

regards myrti

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+


#3 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,779 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:02:16 AM

Posted 27 October 2010 - 06:32 AM

Due to lack of feedback, this topic is now Closed

If you need this topic reopened, please send me a PM.
Please include the address of this thread in your request.
This applies only to the original topic starter.

Everyone else please start a new topic.

With Regards,
myrti

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users