Computer Controlling Itself

By TimRogers
in Microsoft (Windows)

 Share

Recommended Posts

Grand Master

TimRogers

Posted
Posted

My computer randomly every so often is controlling itself! The mouse starts doing things, opening the start menu, and all sorts of annoyinh things. It keeps doing it for around 30 seconds and then goes completely back to normal

Virus and spyware scans are not showing up, but in the Startup section of S:S+D it is showing up the Doomjuice.B virus, using the name regedit.exe, which I will stop, does anyone know what virus (or is it Doomjuice?) that is causing my computer to do this?

Nothing is showing remember, here are the products I am using:

McAfee Online

AVG 7.0

Microsoft AntiSpyware

S:S+D

Link to comment
https://www.neowin.net/forum/topic/310096-computer-controlling-itself/
Share on other sites
Grand Master

chmsant

Posted
Posted

The computer operates the start menu on its own? At first reaction, i was thinking maybe you have a logitech optical mouse (as they are known to move on their own), but opening the start menu, thats just odd. I would if nothing else, reformat and install windows again. That way you can be sure of a clean slate and if it continues to happen, you can isolate from there.

Apprentice

bigbadboy

Posted
Posted
  TimRogers said:
I'm gonna try a mouse i have in the draw - I haven't used it yet!

How would I go about disabling Remote Desktop, just to be safe?

btw, the information in Spybot mentions RPC, what would that mean?

585792797[/snapback]

Problems with a mouse would provoque a random movement/click... nothing like opening specific programs/menus...

You probably have a remote control software... something like Remote Administrator, Remote Anything, etc...

Remote Desktop Connection would send you into the logon page while the other person was connected... you wouldn't see anything happen....

Do you have your firewall activated??? if so, do you have anything in the exceptions list? Is you pc up-to-date?

Veteran

k22

Posted
Posted

http://www.microsoft.com/downloads/details...&displaylang=en

Microsoft? Windows? Malicious Software Removal Tool (KB890830)

run that and also run a scan here

http://housecall.trendmicro.com/

you could also try

start, run, sfc /scannow (assuming you have your original XP CD-ROM or one with SP2 slipstreamed if you're running SP2)

Community Regular

NateB

Posted
Posted

Disconnect from the network/internet if you are gonna work on it, that way if it is someone else controlling it they will lose connection. An RPC is a remote procedure call, which is another computer requesting your computer to perform some command. Programs that use such a protocal are VNC, sub7, netbus, remote assistance and remote desktop, all of which open your comp up completely to the user I would backup and format, im always paranoid that i did not get rid of it completely. I used to have issues similiar at my work when they used mcafee, but now that we are solely Nod32 we have no such occurences anymore.

Grand Master

Panacik

Posted
Posted
  ljames28 said:
You dont have to format your disk you know, i dont see why everyone has fascinations with doing this, you just need to reinstall windows!

585792787[/snapback]

Urm, no, this would keep any virus etc on the machine.

  Loppdawg69 said:
Disconnect from the network/internet if you are gonna work on it, that way if it is someone else controlling it they will lose connection.  An RPC is a remote procedure call, which is another computer requesting your computer to perform some command.  Programs that use such a protocal are VNC, sub7, netbus, remote assistance and remote desktop, all of which open your comp up completely to the user  I would backup and format, im always paranoid that i did not get rid of it completely.  I used to have issues similiar at my work when they used mcafee, but now that we are solely Nod32 we have no such occurences anymore.

585792865[/snapback]

Nearly correct. RPC (Remote Procedure Call) is also used by Windows internal components as far as i was aware, to call other system resources. If the RPC is terminated during a Windows session the machine would close down. Windows relies on RPC in order to perform a lot of functions.

Unfortunatly the RPC does cause a lot of viruses.

Enthusiast

thetoaster3

Posted
Posted
  TimRogers said:
There is something weird - when I download the Malicious Software Remover it never comes up, just downloaded and installs.

I'll disconnect from the net and do a full virus scan, how can I get a slipstreamed SP2?

585796067[/snapback]

The Software removal tool just checks for dodgy programs and then removes itself. If there were dodgy programs on your pc that it picked up, they will have gone now

Veteran

PermaSt0ne

Posted
Posted (edited)
  Rich said:
Urm, no, this would keep any virus etc on the machine.

Nearly correct. RPC (Remote Procedure Call) is also used by Windows internal components as far as i was aware, to call other system resources. If the RPC is terminated during a Windows session the machine would close down. Windows relies on RPC in order to perform a lot of functions.

Unfortunatly the RPC does cause a lot of viruses.

585796119[/snapback]

yah but spybot doesn't pick those up and display those as threats....

but yah you have 2 choices:

1) format and re-install

or

2) have fun with it. stuff like this i like cause it challenges me to figure out what the problem is. just download eval versions of NOD32 and Kaspersky anti-virus programs. disconnect the computer from the internet and run them. if nothing pops up, try out http://www.pandasoftware.com/activescan/ and http://housecall.trendmicro.com/

although to me, it sounds more like a trojan horse than a virus or worm. unfortunately i don't know many trojan removers. although i do remember Trojan Hunter mentioned http://www.misec.net/trojanhunter/ on neowin a whlie ago, so try that too.

and when you finally find out what it is, research it. find out how it works so you can prevent it from happening again

Edited by PermaSt0ne
Grand Master

Panacik

Posted
Posted
  PermaSt0ne said:
yah but spybot doesn't pick those up and display those as threats....

but yah you have 2 choices:

1) format and re-install

I never said it did. I also suggested formating and reinstalling and not simply reinstalling over the top :huh:

I honestly dont think this is any kind of virus though as my machine at work has the same issue.

I ahve installed a fresh copy of 2003 and not had the machine connected to the network, then the mouse just goes mental.

Not sure if it is the mouse or the port it is connected to.

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • The Synology DS923+ is down to $610 just for today on Newegg

      By Ryster · Posted

      "all the way down" by 33 whole dollars. Amazing. You shouldn't have.
    • Here's your first look at Raycast for Windows, now in beta

      By datacenter · Posted

      If they make a portable version, I might give it a try, but I will always prefer hotkeys to that approach
    • The Synology DS923+ is down to $610 just for today on Newegg

      By Steven P. · Posted

      The Synology DS923+ is down to $610 just for today on Newegg by Steven Parker Right now on Newegg, and only for today (June 26) you can find the Synology DS923+ discounted all the way down to $609.99 when using a coupon during checkout, down from it's normal $642.99 price. Although we haven't reviewed the DS923+ on Neowin, we have seen Synology before and rated it quite highly. Besides, the DS1522 even has the same AMD R1600 CPU. Some people would consider Synology homelab NAS equipment the "gold standard", and as such, competitors strive to do as good, at least in regard to the Operating System, DSM, which ticks all the boxes for amateurs, professionals and small business users for its inclusion of mobile apps for core app services such as Surveillance Station, and more. Here are the most important specifications: Synology DS923+ CPU AMD Ryzen R1600 2-core 2.6 (base) / 3.1 (turbo) GHz Graphics No Memory 4 GB DDR4 SODIMM, maximum 32 GB (16 GB x 2) Disk Capacity 72 TB (18TB x 4) RAID Level RAID 0, 1, 5, 6, 10, and JBOD + SHR (Synology Hybrid RAID) Network 2 x RJ-45 1 GbE Internal storage 2 x M.2 2280 NVMe Slot USB Ports 1 x USB 3.2 (5 Gbps) HDMI 1 x Expansion 1 x eSATA 1 x Gen3 x2 network upgrade slot Size (H/W/D) 166 mm x 199 mm x 223 mm Weight 2.24 kg Power 35.51 W (Access) 11.52 W (HDD Hibernation) What's in the box? Main Unit X 1 Accessory Pack X 1 AC Power Adapter X 1 AC Power Cord X 1 RJ-45 LAN Cable X 2 Quick Installation Guide X 1 You may notice that the DS923+ does not have integrated graphics, which is a step down from earlier Intel-based models that did include an iGPU. However, even this year's model (the DS925+) does not include an iGPU with its slightly newer AMD Ryzen Embedded V1500B CPU, but also unhelpfully locks down what you can use in it. All 2025 models require hardware from Synology's own compatibility list, this currently does not affect the DS923+. In addition you are only getting dual 1 GB Ethernet with the DS923+, so you may need to factor in the cost of adding the 10 GbE PCIe network card, which sells for $110.99 on Newegg. Ultimately, deciding on a NAS device comes to down to your individual requirements. For example, more bays is not always better, especially once you factor in the price of hard drives. Those with more modest storage requirements may be better off with a 2-bay device. From my personal experience, DSM 7.2 is great, it's so great that I have installed it on my TerraMaster F4-424 Max. Finally, and perhaps more importantly many tinkerers would prefer building their own server which is definitely a cheaper option, but without the polish of a dedicated NAS. If you have no need to transcode video on the fly and want a four bay NAS device, then the DS923+ is a great solution for every other use case and I can highly recommend it. Synology DS923+ for $609.99 on Newegg (was $642.99) Enter coupon code SACET2369 for above price during checkout
    • Chrome extension blocks social media until you scream "I'm a loser"

      By Nick H. · Posted

      I don't think it's childish, but I do think it would be ineffective. If I was addicted to social media I would just disable the extension when I wanted to visit the certain sites.
    • Computer Gloves

      By +Warwagon · Posted

      Did you copy SuperHands's post and just reword it 🤣

  • Recent Achievements

    • Conversation Starter
      Kavin25 earned a badge
      Conversation Starter
    • One Month Later
      Leonard grant earned a badge
      One Month Later
    • Week One Done
      pcdoctorsnet earned a badge
      Week One Done
    • Rising Star
      Phillip0web went up a rank
      Rising Star
    • One Month Later
      Epaminombas earned a badge
      One Month Later

  • Popular Contributors

    1. 1
      +primortal
      529
    2. 2
      ATLien_0
      207
    3. 3
      +FloatingFatMan
      168
    4. 4
      Michael Scrip
      150
    5. 5
      snowy owl
      126
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!