Avast WEBforum

Other => Viruses and worms => Topic started by: native1 on August 29, 2003, 11:38:38 AM

Title: virus identity???
Post by: native1 on August 29, 2003, 11:38:38 AM
Hi, I am one of the uninitiated on viruses and new at this, I downloaded the free software and since then have contacted a virus or worm and cannot find the type or name. :-[ I experience loss of mouse functions, keyboard loss, cannot write letters and numerals etc., programs will open and close. It will affect the computer whether I am on the internet or not. When on the internet it will close the URL that I am logged onto, open and close IE and Outlook Express and when the mouse does work it will jump all over the screen opening windows programs which are on the destop, as well as try to change the desktop features, such as screensaver properties, windows styles etc. ???
I experience this as soon as I log on and cannot run the avast scanner on occasion, but if I can get it open and checking, it detects nothing as a virus or worm, and no corrupted files. :-\ Any help on this or if someone has experienced it will be very much appreciated.
Some things that I have done was to run a virus removal tool for the nimda viruses, both type A and E and their varients but that too came up negative. Please help, I miss my computer and want to get up and running again. :( Thank you, Native1
 
Title: Re:virus identity???
Post by: raman on August 29, 2003, 11:52:53 AM
What windowsversion do you use? Scan your computer with avast in safe mode, that should be possible.

If you want you can post the files which will load at windowsstartup, by using this Programm:  http://www.tomcoyote.org/hjt/startuplist.zip

Or try a second (Online)scanner:  http://www.rokop-security.de/main/onlinescan.php
Title: Re:virus identity???
Post by: native1 on August 29, 2003, 12:21:42 PM
Thank you for the quick reply, I will try those two suggestions tomorrow and get back to you all with the results if any. I appreciate the input, it is a good beginning. Native1
Title: Re:virus identity???
Post by: native1 on August 30, 2003, 01:30:23 AM
Hello again, I copied the startup files and will send them with this message. I booted up in safe mode and the computer still displayed the same characteristics, lack of mouse control, i.e. jumping all over the screen and opening and closing programs, not able to access internet, IE kept closing, so was unable to try the online scanner, and then lack of input via the keyboard, and finally the computer locking up. Any way here is the files that will be attached, hope this adds some light on the matter. Native1
Title: Re:virus identity???
Post by: native1 on August 30, 2003, 01:34:18 AM
OOPPS!! :o I forgot, the operating system is a windows ME, I utilize a satellite connection to the internet.
Title: Re:virus identity???
Post by: whocares on August 30, 2003, 01:45:17 AM
Hi,

a) try AV-Boot-Disks, e.g.  from www.fprot.org/fr_boot.htm or similar f-secure/F-prot pages

b) if an AV-Bootscan doesn't reveal viruses, this sounds more like hardware error..
could be RAM; harddisk, motherboard, graphics-card, powerunit etc..
Try googleing for RAM-tests and
Harddisk diagnosis tools from your harddisk vendor


Please describe your hardware as detailed as possible for further analysis
  ;)
Title: Re:virus identity???
Post by: whocares on August 30, 2003, 01:55:34 AM
P.S.: What are all these GILAT-things in your startup ?

google for your startup entries/filenames, to check whether they are really necessary.. or even malicious ...

looks a bit overloaded

Title: Re:virus identity???
Post by: native1 on August 30, 2003, 08:55:05 AM
hello, some specifics...Gilat is the software drivers for the satellite connection, which is Starband. The system is a 900 mhz, Intel motherboard 7ZX series,  with an AMD Athlon CPU, 40GB HD, 128 MB Ram, DVD, CDRW, 3.5 Floppy, Planar LCD Monitor. The operating system is a Millenium Edition version of Windows. As stated earlier, I am new at this part of the internet, dealing with viruses, so you will have to explain what might be a simple process. I don't have the faintest idea what it is to Google, and what is an AV-Bootscan and how is this accomplished. I really will probably need to be walked through some of these procedures in order to accomplish all of the checks to resolve my problems, so please bear with me and show patience, I will work diligently to do my part. :) Thanks Native1
Title: Re:virus identity???
Post by: raman on August 30, 2003, 09:23:31 AM
Did you ever clean your mouse? Or do you have the possibility to test a other mouse?

Like "who", i do not think of malware or Joke Programm, more that it could be a hardware failure.
Title: Re:virus identity???
Post by: native1 on August 30, 2003, 09:40:10 AM
Hi, yes, I did clean the mouse, and it will jump to different parts of the desktop and open and close programs, the keyboard will cease functioning also, unable to write in text in any entry on the browser, so unable to go to specific sites. When I log onto a site I will be suddenly booted from the internet, IE will close and I will be disconnected from the site. Eventually the cursor will not move and the monitor will freeze up, I will be unable to even use CTRL - ALT - DEL to reboot or turn off the computer, I will have to do it manually by shutting down all power.
Title: Re:virus identity???
Post by: raman on August 30, 2003, 10:23:27 AM
What happens if you start with the mouse withdrown?
Title: Re:virus identity???
Post by: native1 on August 30, 2003, 11:14:49 AM
Tried to log on without the mouse connected, no luck... :( I am now unable to log on at all, the mouse and keyboard are non functional upon bootup, so I cannot even open any of the programs on my desktop, including the virus checker, or close the msn messenger. The keyboard doesn't function to even let me enter in safe mode, the ctrl key doesn't register upon boot up and therefore I cannot enter safe mode. Was there anything in the startup files that could give a hint to the problem
Title: Re:virus identity???
Post by: raman on August 30, 2003, 11:21:59 AM
Sound  definitly for a hardwarefailure to me and i do not really see any special on your Startuplist.

Title: Re:virus identity???
Post by: native1 on August 30, 2003, 11:33:45 AM
would a hardware problem get progressively worse, starting with the mouse locking up, then the opening of different programs and even the desktop features, and finally on to the keyboard??? and finally to the point of not even logging onto my computer???
Title: Re:virus identity???
Post by: raman on August 30, 2003, 11:49:16 AM
Yes, i had the same problem with a  damaged Motherboard. I chanced everything the Keyboard, the memory,  the mouse, the graphikcard and the strange thing was that it seemed to work after made some changes. But one week later  the computer not even wants to start.
Title: Re:virus identity???
Post by: native1 on August 30, 2003, 11:13:58 PM
Hello, well, it doesn't sound good to hear it might be hardware.  :( Is there anyone else out there that can confirm with similar symptoms or that might have the same thing happening to their computer. I want to hold out hope that something can be done with just software changes, deletions, modifications. :-\ I will keep checking back for other ideas. If it is hardware, I would like to have some opinions as to what hardware might be affected, and how the hardware problem can affect the software functioning. Keep the ideas coming, please
Title: Re:virus identity???
Post by: native1 on August 31, 2003, 08:53:22 AM
Hello, I managed to get the computer logged on in safe mode and was able to restore to an earlier date, 2 weeks ago and now everything is working fine, but it begs the question, what virus could have caused all the havoc in the first place, it doesn't appear to be hardware, more a glitch in the software, operating system, IE, or Outlook Express. let me know what you think of the latest developments. Thanks
Title: Re:virus identity???
Post by: raman on August 31, 2003, 08:58:55 AM
First of all, good that your PC is working again.
I was wrong with the hardwareerror suggestion, but i still do not think it was Malware related, more Windows related! ;)
Title: Re:virus identity???
Post by: native1 on September 01, 2003, 09:50:20 AM
Okay, now where do I go ??? I have downloaded all the upgrades that windows required, and still seem to have the problem, I had the mouse and keyboard lock up and was unable to exit from the web browser or reboot when that happened, it seems to be starting again. Appreciate all the time and ideas coming from you and who, hope that there might be others logged on that may have experienced this, later, keep the ideas coming.
Title: Re:virus identity???
Post by: raman on September 01, 2003, 10:05:45 AM
Maybe i was not wrong with my Hardware suggestion!  :D

Sorry to say that, but it is difficult to say, because we didnĀ“t sit infront your PC and all we can do is guessing...
Title: Re:virus identity???
Post by: whocares on September 01, 2003, 12:01:55 PM
Hi,

some advice:

- make a backup of your important data as soon as possible !!!!!!


- if the errors keep occurring:
-> try RAM-Test-Tools and Harddrive-TestTools, those errors are imho easiest to find for the layman. you might also remove some RAM-Modules, if you have more than one, or shift them around on your board (do this in pairs, if you have older/paired memory modules..)

replace parts (RAM, Grafixcard, harddisk etc..) if you have some spare/older parts (those should be verified to be working on some other PC, of course..)

-monitor the temperature of CPU/System and the fan speed(s); check that the fans are running smoothly

without some diagnosis on your part,  I can't advise you more..

-maybe also try a complete fresh reinstall of WIN (of course, backup first!!):
this includes deleting all partitions (e.g. with fdisk) and making new ones:
better split  harddisk in
C: System  &
D: Daten

 ;) ;)
Title: Re:virus identity???
Post by: whocares on September 01, 2003, 12:08:47 PM
what happens if you only run the PC in SafeMode (F8-Boot) for a  short or long period of time ?
similar/any errors then, too ?

what does scandisk after booting from a Bootdisk say ?