Computer Controlling Itself


Recommended Posts

My computer randomly every so often is controlling itself! The mouse starts doing things, opening the start menu, and all sorts of annoyinh things. It keeps doing it for around 30 seconds and then goes completely back to normal

Virus and spyware scans are not showing up, but in the Startup section of S:S+D it is showing up the Doomjuice.B virus, using the name regedit.exe, which I will stop, does anyone know what virus (or is it Doomjuice?) that is causing my computer to do this?

Nothing is showing remember, here are the products I am using:

McAfee Online

AVG 7.0

Microsoft AntiSpyware

S:S+D

Link to comment
https://www.neowin.net/forum/topic/310096-computer-controlling-itself/
Share on other sites

The computer operates the start menu on its own? At first reaction, i was thinking maybe you have a logitech optical mouse (as they are known to move on their own), but opening the start menu, thats just odd. I would if nothing else, reformat and install windows again. That way you can be sure of a clean slate and if it continues to happen, you can isolate from there.

  TimRogers said:
I'm gonna try a mouse i have in the draw - I haven't used it yet!

How would I go about disabling Remote Desktop, just to be safe?

btw, the information in Spybot mentions RPC, what would that mean?

585792797[/snapback]

Problems with a mouse would provoque a random movement/click... nothing like opening specific programs/menus...

You probably have a remote control software... something like Remote Administrator, Remote Anything, etc...

Remote Desktop Connection would send you into the logon page while the other person was connected... you wouldn't see anything happen....

Do you have your firewall activated??? if so, do you have anything in the exceptions list? Is you pc up-to-date?

http://www.microsoft.com/downloads/details...&displaylang=en

Microsoft? Windows? Malicious Software Removal Tool (KB890830)

run that and also run a scan here

http://housecall.trendmicro.com/

you could also try

start, run, sfc /scannow (assuming you have your original XP CD-ROM or one with SP2 slipstreamed if you're running SP2)

Disconnect from the network/internet if you are gonna work on it, that way if it is someone else controlling it they will lose connection. An RPC is a remote procedure call, which is another computer requesting your computer to perform some command. Programs that use such a protocal are VNC, sub7, netbus, remote assistance and remote desktop, all of which open your comp up completely to the user I would backup and format, im always paranoid that i did not get rid of it completely. I used to have issues similiar at my work when they used mcafee, but now that we are solely Nod32 we have no such occurences anymore.

  ljames28 said:
You dont have to format your disk you know, i dont see why everyone has fascinations with doing this, you just need to reinstall windows!

585792787[/snapback]

Urm, no, this would keep any virus etc on the machine.

  Loppdawg69 said:
Disconnect from the network/internet if you are gonna work on it, that way if it is someone else controlling it they will lose connection.  An RPC is a remote procedure call, which is another computer requesting your computer to perform some command.  Programs that use such a protocal are VNC, sub7, netbus, remote assistance and remote desktop, all of which open your comp up completely to the user  I would backup and format, im always paranoid that i did not get rid of it completely.  I used to have issues similiar at my work when they used mcafee, but now that we are solely Nod32 we have no such occurences anymore.

585792865[/snapback]

Nearly correct. RPC (Remote Procedure Call) is also used by Windows internal components as far as i was aware, to call other system resources. If the RPC is terminated during a Windows session the machine would close down. Windows relies on RPC in order to perform a lot of functions.

Unfortunatly the RPC does cause a lot of viruses.

  TimRogers said:
There is something weird - when I download the Malicious Software Remover it never comes up, just downloaded and installs.

I'll disconnect from the net and do a full virus scan, how can I get a slipstreamed SP2?

585796067[/snapback]

The Software removal tool just checks for dodgy programs and then removes itself. If there were dodgy programs on your pc that it picked up, they will have gone now

  Rich said:
Urm, no, this would keep any virus etc on the machine.

Nearly correct. RPC (Remote Procedure Call) is also used by Windows internal components as far as i was aware, to call other system resources. If the RPC is terminated during a Windows session the machine would close down. Windows relies on RPC in order to perform a lot of functions.

Unfortunatly the RPC does cause a lot of viruses.

585796119[/snapback]

yah but spybot doesn't pick those up and display those as threats....

but yah you have 2 choices:

1) format and re-install

or

2) have fun with it. stuff like this i like cause it challenges me to figure out what the problem is. just download eval versions of NOD32 and Kaspersky anti-virus programs. disconnect the computer from the internet and run them. if nothing pops up, try out http://www.pandasoftware.com/activescan/ and http://housecall.trendmicro.com/

although to me, it sounds more like a trojan horse than a virus or worm. unfortunately i don't know many trojan removers. although i do remember Trojan Hunter mentioned http://www.misec.net/trojanhunter/ on neowin a whlie ago, so try that too.

and when you finally find out what it is, research it. find out how it works so you can prevent it from happening again

Edited by PermaSt0ne
  PermaSt0ne said:
yah but spybot doesn't pick those up and display those as threats....

but yah you have 2 choices:

1) format and re-install

I never said it did. I also suggested formating and reinstalling and not simply reinstalling over the top :huh:

I honestly dont think this is any kind of virus though as my machine at work has the same issue.

I ahve installed a fresh copy of 2003 and not had the machine connected to the network, then the mouse just goes mental.

Not sure if it is the mouse or the port it is connected to.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • CapCut 6.5.0 (offline installer) by Razvan Serea CapCut is a versatile video editing app that offers a range of features such as multi-layer editing, keyframe animations, special effects, and more, to create professional-quality videos. With CapCut, users can edit and enhance their videos with a variety of tools such as filters, transitions, effects, and text overlays. CapCut's extensive library of pre-designed templates and visual effects also allows users to create unique and eye-catching videos in just a few clicks. Users can also adjust video speed, crop, and merge multiple clips, among other features. CapCut is available for both mobile devices and Windows, making it accessible for everyone. CapCut key features: User-friendly interface for easy video editing A wide range of editing tools, including trim, split, cut, and merge Music library with a wide range of tracks to choose from Customizable text and fonts to add captions and titles Multi-layer timeline for seamless editing and layering Filters and effects to enhance video quality and style A variety of transitions to choose from Multiple aspect ratio options for different platforms Green screen/chroma key for adding custom backgrounds Overlays and stickers to add to your videos Easy exporting to different video formats and resolutions Large library of pre-designed templates and visual effects Customizable video thumbnails for branding Keyframe animation to add movement to your video Speed adjustment for slow motion or time-lapse effects Customizable transitions between clips Reverse video playback for creative effects Voiceover recording and editing for narrating your video Color grading tools and much more... Download: CapCut 6.5.0 | 701.0 MB (Freeware) Links: CapCut Website | CapCut Screenshot | CapCut Online Editor Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Total Commander 11.55 by Razvan Serea Total Commander is a great two-pane file manager replacement for Windows, a program like Windows Explorer to copy, move, or delete files. It includes extra integrated applications like a built-in FTP client with FXP, a renaming tool, a disk space analyzer, a file synchronizer, can pack and unpack files, compare files by content, a quick view panel with bitmap display, HTTP proxy support and more. Total Commander 11 is compatible with Windows 95/98/ME/NT/2000/XP/Vista/7/8/8.1/10/11. Total Commander is distributed as shareware with a trial period of 30 days, but will continue to function, with a subscription reminder, after that. Total Commander features include: Two file windows side by side Multiple language and Unicode support Enhanced search function Compare files (now with editor) / synchronize directories Quick View panel with bitmap display ZIP, ARJ, LZH, RAR, UC2, TAR, GZ, CAB, ACE archive handling + plugins Built-in FTP client with FXP (server to server) and HTTP proxy support Parallel port link, multi-rename tool Tabbed interface, regular expressions, history+favorites buttons Thumbnails view, custom columns, enhanced search Compare editor, cursor in lister, separate trees, logging, enhanced overwrite dialog etc. Unicode names almost everywhere, long names (>259 characters), password manager for ftp and plugins, synchronize empty dirs, 64 bit context menu, quick file filter (Ctrl+S) USB port connection via special direct transfer cable, partial branch view (Ctrl+Shift+B), and many improvements to ftp, synchronizing and other functions And many more! Total Commander 11.55 release notes: This version mainly fixes bugs. Complete list of changes. New functions in Total Commander 11.55: Copying When "Copy to all selected folders/links..." is enabled, the "Keep relative paths" option is also respected Supports copying directories anywhere in subdirectories. For example, if "Only files of this type:" is set to "test\", the "test" folder will be found anywhere in the selected folders An overlay icon is displayed in the system tray when an overwrite confirmation dialog is open while Total Commander is not in the foreground When copying sparse files, only the parts containing non-zero data are copied. This option needs to be enabled via wincmd.ini [Configuration] CopySparseFiles=1 General Multi-rename tool: New placeholder [v] for inserting milliseconds, e.g. [hms].[v] Create/Verify Checksums: Use multiple threads for Blake3 checksums (64-bit only, on Windows 7 and newer) Use tc7z.dll as a fallback for unrar.dll if unrar.dll fails to load Rename directories in 7z archives when using the internal 7z packer New parameter for the internal MULTIRENAME command opens the tool and offers the user to undo the last operation Use external DLL tcsha64.dll to create/verify SHA3 checksums faster Download: Total Commander 11.55 | 10.6 MB (Shareware) View: Total Commander Website | Android | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • It should be the default browser behavior (apart from sending recorded audio to an external device)
    • "So if you are interested in this extension, for God's sake, do not try it in an office. Your coworkers will probably think you have finally lost it and are performing some bizarre humiliation ritual at your desk." If you install the plugin and start screaming at your system...you left being lost in the rear view.
    • Mullvad Browser 14.5.4 by Razvan Serea The Mullvad Browser is a privacy-focused web browser developed in a collaboration between Mullvad VPN and the Tor Project. It’s designed to minimize tracking and fingerprinting. You could say it’s a Tor Browser to use without the Tor Network. Instead, you can use it with a trustworthy VPN. The idea is to provide one more alternative – beside the Tor Network – to browse the internet with more privacy. To get as many people as possible to fight the big data gathering of today. To free the internet from mass surveillance. The Mullvad browser is free of charge, open source, and can be used without Mullvad VPN (although the combination is recommended). It is supported across platforms (Windows, MacOS, Linux). Privacy quality of the Tor Browser. To use with a VPN - Using a VPN is not enough to achieve perfect privacy online. There’s simply too much data being extracted through most browsers. The Mullvad Browser is a web browser with the privacy quality of the Tor Browser, to be used with a trustworthy VPN. Strong anti-fingerprinting from the Tor Project - The Tor Project has a proven track record of building a privacy-focused browser. The Mullvad Browser has the same fingerprinting protection as the Tor Browser – it just connects to the internet with (or without) a VPN instead of the Tor Network. No telemetry - Telemetry refers to unique data collected by the browser to enhance its performance. Mullvad does not support the collection of user data. Therefore, with the Mullvad Browser, all telemetry has been removed. Privacy first - Mullvad VPN has a proven record of putting privacy first. With no strange business models or short-term venture capitalist owners. The Tor Project is a non-profit organization fighting for human rights. Mullvad Browser 14.5.4 changelog: All Platforms Updated Firefox to 128.12.0esr Updated NoScript to 13.0.8 Bug 450: Rebase Mullvad Browser stable onto 128.12.0esr [mullvad-browser] Bug 43782: Add new UX flow for changing security level (Desktop) [tor-browser] Bug 43783: Tighten up the SecurityLevel module to enforce new UX flow [tor-browser] Bug 43784: Get confirmation from NoScript that settings are applied [tor-browser] Bug 43911: Backport security fixes from Firefox 140 [tor-browser] Build System / All Platforms Bug 41477: Update keyring/boklm.gpg for new subkeys (2025) [tor-browser-build] Bug 41498: Update keyring/morgan.gpg with updated public key [tor-browser-build] Download: Mullvad Browser 14.5 | 90.6 MB (Open Source) View: Mullvad Browser Homepage | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
  • Recent Achievements

    • First Post
      solidox earned a badge
      First Post
    • First Post
      BA the Curmudgeon earned a badge
      First Post
    • One Year In
      blissa jayden earned a badge
      One Year In
    • One Month Later
      blissa jayden earned a badge
      One Month Later
    • Week One Done
      blissa jayden earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      562
    2. 2
      ATLien_0
      213
    3. 3
      +FloatingFatMan
      171
    4. 4
      Michael Scrip
      152
    5. 5
      Som
      151
  • Tell a friend

    Love Neowin? Tell a friend!