Re: Unusual virus or trojan - cannot figure out
From: Sarah (anonymous_at_discussions.microsoft.com)
Date: 12/25/03
- Next message: Cal: "Re: lsass.exe brings machine to its knees....."
- Previous message: Sarah: "Re: wupdater won't close"
- In reply to: General Braca: "Unusual virus or trojan - cannot figure out"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 25 Dec 2003 05:35:05 -0800
General Braca:
>-----Original Message-----
>My in-laws have a WinXP machine. The computer is
behaving strangely:
>At random times during the day (not constantly, maybe a 4
times a day
>it seems) the computer will play a random sound file
vaguely seasonal.
> For example, a voice saying "Happy Turkey Day" around
Thanksgiving,
>something Halloween-related (although I don't remember
exactly what)
>and recently "Dreidel, Dreidel, Dreidel". Occassionally
it just plays
>a laughter sound file. Nothing else goes along with
this, just the
>sounds.
>
>Looking at the process list, I don't see anything out of
the ordinary.
> I've tried running Ad-Aware, Spybot Search and Destroy,
and Tauscan.
>Their machine also has Norton AV, and is running
ZoneAlarm. I've
>tried searching for .wav files that have these sounds in
them, but
>haven't found any (I have not played every .wav file on
their machine,
>though - there's too many).
>
>Worse, I've been googling for the symptoms it's been
exhibiting, and
>can't find anyone who is discussing anything similar.
>
>Any ideas? What should my next step be? Is there any
windows
>debugging program I could run that would tell me when the
sound card
>gets called and by which executable?
>.
Hi. I like puzzles, can you tell? I wanted to mention
a couple of possibilities that belatedly occurred to me:
1) There is malware that would produce similar behaviors
to those you describe, at:
http://www.thefreesite.com/Seasonal_Freebies/April_Fools/
(Program WAV/launcher)
Be aware that that site does not appear to be white hat
2) If it isn't malicious, it could be a function of a
screensaver. If so, changing screensavers might help. If I
had to bet though, I'd go with it being a relative of the
type of program listed above, i.e. somewhat malicious.
- Next message: Cal: "Re: lsass.exe brings machine to its knees....."
- Previous message: Sarah: "Re: wupdater won't close"
- In reply to: General Braca: "Unusual virus or trojan - cannot figure out"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
