Web page sounds?

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by ComputerGate, Sep 1, 2004.

  1. ComputerGate

    ComputerGate Specialist

    Somebody please help, I am about to jump through my skin! My computer has started making that stupid chat-room water drop sound when I first log into websites. What in the world is causing that?
     
  2. ComputerGate

    ComputerGate Specialist

    Oh, yeh. It's worth mentioning that it also happens in this website.
     
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    The first steps are to please follow all the steps in this Sticky thread < READ ME FIRST: Basic Spyware, Trojan And Virus Removal > If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs.

    NOTE: In order to resolve the issues you are having it is very important that you at least try to perform all the steps as outlined. If you have any difficulty please post back letting us know what steps you have completed, what you found while doing the scans if anything and details about any problems you have encountered in completing the steps. The more details you can provide the better.
     
  4. ComputerGate

    ComputerGate Specialist

    I realize that I should have mentioned more background here. Before posting, I updated and scanned the following: Norton anti-virus, PestPatrol, Spybot S&D 1.3 with tea timer running, Adaware, Bazooka, HSRemover, and CWShredder. I also have Zone alarm set for auto update. I don't use Windows XP restore function. Windows updates are current as of 2 weeks ago. I regularly scan (more than once a week) all of the above named programs. In this particular instance the only new bug I found was ISTbar, via PestPatrol. I removed that, then logged off, the rescanned with all of the above mentioned programs. Everything came up clean. I am running a dual MP2200 processor amd scsi motherboard with 512mb ddr ecc ram, a Seagate 10k and two Western Digital 10k drives. A very generic sound card with a CMI8738 chipset. I also have the windows sound schemes turned off in "Sounds and audio devices", that way I don't get all the log on and log off sounds blasting at me at music levels. My video card is a basic NVidea FX-5200 256mb. I also have a Winfast PVR card that has been running since my last Windows install. Other than picking up a bug from somewhere online, I can't think of a thing I have done new that could be causing the "plop" sound.
     
  5. ComputerGate

    ComputerGate Specialist

    Oh yeh, and here is the hijack this log:


    INCOMPLETE INLINE HJT LOG DELETED! DO NOT CUT OFF TOP INFORMATION. ALSO READ GUIDELINES.

    NOTE: You should read the tutorial in this Sticky thread < Hijack This Tutorial And How To Post Your Log File > Do not post a HijackThis log until we ask you to and when we do it must be text document attachment to your message.

    Update! Due to Hijack This logs destroying search engine and web site searches, we now ask you do not post your Hijack This log file unless requested by us. It is for advanced users, so if you do not understand how to use it, you do not need it....yet. Instead, please tell us in your post what symptoms you are experiencing so we can try and resolve it that way. When, and if, we ask you to post your log file, please attach it as a file. To do this save the log file and select manage attachments in a new thread to upload it. All running programs should be closed, including your web browser, e-mail, items in the tray, anything you can close... Close before running Hijack This!


    Do NOT run Hijack This from the Desktop, a temp folder or choose run from the download. Place it in its own folder, for example C:\Program Files\HJT
     
    Last edited by a moderator: Sep 1, 2004
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Did you try running all of your scans in safe mode as the link indicates? If not, do so.
    Did you try setting Ad-aware SE for Full System scan (also in safe mode)? If not, do so.
    Did you run CCleaner? If not, do so.
    Did you try the online scanners? If not, try these:
    http://housecall.trendmicro.com/housecall/start_corp.asp <--- Select Auto Clean
    http://www.ravantivirus.com/scan/ <--- Select Auto Clean and click Scan my PC
    http://www.bitdefender.com/scan/license.php

    After that if still have a problem, post a HijackThis log as a .txt file attachment. Make sure you have HJT version 1.98.2.
     
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    By the way the log I deleted looked clean. What version of HJT was that? What version of XP and IE?
    If you had not cut off the top few lines, I would not have to ask.
     
  8. ComputerGate

    ComputerGate Specialist

    I was trying to post just the essentials. The os is XP Pro, the i.e. is 6.0. I ran scans on all three posts you listed. All three came up clean. I have PestPatrol and Adaware set for scanning of all files. Is there anything else I can try?
     
  9. ComputerGate

    ComputerGate Specialist

    I was trying to post just the essentials. I have Windows XP Pro. I.E. 6.0. I have all my services set to Black Vipers "Safe" settings. I have all file extensions and folders set open. I haven't bothered to boot into safe mode because no program has shown that I have a problem file or program running. I don't want to run CCleaner because I have ran into problems in the past by trying to clean my hard drive. My installation is only a couple of months old and there isn't a heck of a lot on it that I don't use. I clean everything I can manually. Temporary internet files, cookies, auto complete is off, pre-fetch etc. I usually do that several times a week. I also have temporary internet files set to delete after I log off. Is there anything I might be missing?
     
  10. ComputerGate

    ComputerGate Specialist

    Oh yes, I got my hijack this from this website today, so whatever one is available today is the one I used.
     
  11. ComputerGate

    ComputerGate Specialist

    O.K., now this has gotten weird. All of those scans I ran, both online and from my own software, not one of them showed anything bad on my computer. But suddenly that "plop" sound has gone away. But now when I go to empty my prefetch folder, I notice that every single item in the folder has a little brown box icon in front of it. Any idea what that's all about?
     
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    The top lines of the HJT log are the essentials and what you gave just now still is not sufficient. The info in the HJT log shows versions, SP levels, and build information. That is what is essential.

    Are you running Ad-aware or Ad-aware SE?
    Is it version 1.03 with reference file SE1R6 30.08.2004?
    And what I asked was did you run Ad-aware SE in safe mode?
    And you still did not answer, did you run CCleaner?
     
  13. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Find out who has changed your file associations. Right click on any one of those files and select properties. Then look at Type of file (which should be PF File) and Opens with: . What does it open with?
     
  14. ComputerGate

    ComputerGate Specialist

    Actually I did mention that I didn't want to run CCLeaner. I have had trouble with cleaning my hard drive in the past with apps not running afterwards. Also, in the link you gave me for the list of things to do, it said to not worry about running the scans in safe mode unless you have an item that won't delete in normal mode. Well none of the scans showed as much as one single item. The Ad-aware I am using is in the actual program executable shows aaw6181.exe And in the program list , it shows up as Ad-aware 6. In the prefetch, I don't know why, but everything shows up as opening up with stuffit expander. I guess that is harmless?
     
  15. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay I missed the CCleaner comment. But it works just fine. Never had any problems with the cleaning files portion of it. Users who go crazy with the registry cleanup part can have problems like with any reg cleaner.

    As far as the onlines scans, I specifically requested that you run the scans to find things that your others may have missed.

    You are not running the Ad-aware SE program. If you followed the steps as per my first message, you would be running the correct version. In reality you are quite a bit out of date.

    So what else could you be out of date on?

    And you still never ran them in safe mode where sometimes more things are picked up and cleaned.

    Stuffit expander must use the .pf extension for something.
     
  16. ComputerGate

    ComputerGate Specialist

    I can understand your frustration, believe me. I have to at least once every month or so fix my buddy's computer after he has ignored every safe computing tip I give him, and it winds up taking 2-3 hours to fix, every time. And I mean EVERY time. It sucks being helpful sometimes. So I don't take anything lightly as far as instructions go. The run through on the spyware stuff absolutely says that running scans in safe mode is only necessary if you find items that won't delete in normal mode. And nothing showed up in any of the scans I did, not even the 3 online scans you had me do. I guarantee you that I have the very most up to date Norton anti virus, PestPatrol and Spybot S&D. I ran just like I said, the update function on every single program that I used. Not all of them of course have any updates available today. I even ran a program applet that I found on a Microsoft IT page, it's called KB873018-ENU-V1.exe that gets rid of some random problem microsoft has trouble with. As far as the Ad-aware that I am using it actually has some very in-depth settings that I have tweeked so that it is scanning all 3 of my hard drives in all files and folders.
     
  17. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You are still missing the point of the online scans. In hundreds of cases they pickup things that others do not. That was why I asked for them to be run. Yes, they may not pickup anything new but it never hurts to check.

    And you are still using an older version of Ad-aware. Ad-aware 6 does not even update anymore. Ad-aware SE is is much improved and has new features. Like scanning for ADS for one example. You need to get the new version.
     
    Last edited: Sep 1, 2004
  18. ComputerGate

    ComputerGate Specialist

    Although I think it is a moot point now since the sound thing has stopped happening when I visit websites, I downloaded the newer version of ad-aware. I did three separate scans. One in full system mode. One in scan volume for ADS. And one in custom scan with some extra functions turned on. I got zero objects in all aspects on all three scans. I am sure one of the online scans must have fixed something, even though it didn't tell me there was a problem found. The only remaining question to me is what the prefetch files should have been connected to, as far as what the default would be. It obviously wasn't Stuffit expander originally.
     
  19. ComputerGate

    ComputerGate Specialist

    P.S., I actually didn't have a problem with the online scans at all. I did them immediatly after seeing your link for them. It was only when you mentioned them again that I simply pointed out, again, that I actually had done them. I don't have a problem with doing scans at all. How many people keep as many spyware/adware programs running on their computer as I do? Not a lot I think. About the only place you would find those people would be maybe in here.
     
  20. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    The default application for .pf files is "unknown application". Meaning it does not have an association.
     
  21. ComputerGate

    ComputerGate Specialist

    I just want to say thanks for all the help. Everything is back to normal. I wish I knew which program scan it was that fixed that water drop sound. I looked very carefully at the results of each program I ran and none of them showed any problems. In fact the only thing that showed up at all was when I ran the new Ad-aware program (SE). It shows files that are "negligible risk". After digging into the ones that came up it turned out that they were the rmu files. Which I deleted per a Microsoft help site. I then noticed that the url list was wiped clean. Odd. Doesn't matter since I clean that all the time anyway. And my pf association is back to normal. I just had to go into stuffit expander and uncheck the file association. All is well that ends well eh?
     
  22. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome.

    It could possible have been removed by CCleaner or one of the virus scans may have found it. This are sometimes called virus hoaxes. You don't really have a virus. They just play an annoying prank to make you think there is a virus. The scanners sometimes find these and remove them.

    It's mru (Most Recently Used) and yes removing them will clear your URL lists. In most cases you do not need to fix mru's unless you are worried about clearing your tracks.
     
  23. ComputerGate

    ComputerGate Specialist

    Thanks for all the help. I wish I knew which program had fixed the sound. I looked very carefully at the results of all three online scans and none of them showed me anything, yet one of them must have fixed it. Oh well. Alls well that ends well. To change the pf association, I just went in and unclicked it in the settings for the Stuffit expander. Thanks again.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds