suspicious computer activity...

Talk about PC parts, builds, upgrades, and hardware troubleshooting.
Post Reply
TheZ05
Registered User
Posts: 4
Joined: September 6th, 2005, 2:14 pm

suspicious computer activity...

Post by TheZ05 »

Hello, My computer is acting very strange. Last night it locked the number keys in caps lock somehow, and wouldnt let me stop it. For example, if I typed 5, it would type %. This kept me from logging into my account because I couldn't type in my password. Then, this morning, it stopped doing that. When I logged in though, there was an off-position balloon, at the top left corner of the screen for windows updates...My computer is also acting extremely slow and delayed. I'm not sure if that means there's a virus in it. Here's my hijack this log: http://hjt.iamnotageek.com/parse.php?log=95172 Thanks in advance for any help. Just a note: My Norton Antivirus finds random problems each time I scan, but sometimes I can't delete what it finds:-/
User avatar
ccb056
Site Administrator
Posts: 981
Joined: January 14th, 2004, 11:36 pm
Location: Texas
Contact:

Post by ccb056 »

Maybe you had sticky keys enabled, press the shift button a couple of times and there should be dialog box that appears relative to sticky keys.
TheZ05
Registered User
Posts: 4
Joined: September 6th, 2005, 2:14 pm

Post by TheZ05 »

i dont think that that was it. I am pretty sure at least. I'll post some logs if needed? Threat alert log http://dhost.info/hogshead/norton.txt Quarantined/Backed up Items http://dhost.info/hogshead/norton_quarantine.txt Thanks again... :)
mitchb13
Registered User
Posts: 15
Joined: September 3rd, 2005, 2:24 am

Updater

Post by mitchb13 »

You have C:\updater.exe running. This is a worm and is probably the cause of your issues.
Mitch<BR> <a href="http://www.technipages.com">Technipages</a>
TheZ05
Registered User
Posts: 4
Joined: September 6th, 2005, 2:14 pm

Post by TheZ05 »

Ah, there are two different updater.exe's. One has to do with iRiver software, are you sure they aren't the same thing?
mitchb13
Registered User
Posts: 15
Joined: September 3rd, 2005, 2:24 am

iRiver

Post by mitchb13 »

Either way I'd do away with it. No program like that should be running from the root of C.
Mitch<BR> <a href="http://www.technipages.com">Technipages</a>
TheZ05
Registered User
Posts: 4
Joined: September 6th, 2005, 2:14 pm

Post by TheZ05 »

i took your advice, but rather than removing it, i took it off of the startup. My computer seems to be going much faster now :lol: thanks!
Post Reply