Author | Message |
zoom3+1=4 Volunteer tester
Send message Joined: 30 Nov 03 Posts: 65709 Credit: 55,293,173 RAC: 49
|
Ok I'm getting a ding sound every little bit, I'd had the Startnow toolbar installed without Me knowing it, that's been uninstalled and deleted by HJT 2.0.4, I got rid of the toolbar(which never worked and was never seen in Firefox, weird), but the sound still exists and I'm stumped.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:20:08 PM, on 7/29/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16447)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Users\actual\Downloads\Keyboard Locker\KeyboardLocker.exe
C:\Program Files (x86)\NetworkIndicator\NetworkIndicator.exe
C:\Users\actual\Documents\RealTemp\RealTemp.exe
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [boincmgr] "C:\Program Files\BOINC\boincmgr.exe" /a /s
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [NetworkIndicator] C:\Program Files (x86)\NetworkIndicator\NetworkIndicator.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-199856412-1982369922-1882940647-1017\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-199856412-1982369922-1882940647-1017\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: KeyboardLocker.exe.lnk = actual\Downloads\Keyboard Locker\KeyboardLocker.exe
O4 - Startup: Network Indicator.lnk = C:\Program Files (x86)\NetworkIndicator\NetworkIndicator.exe
O4 - Startup: RealTemp.exe.lnk = actual\Documents\RealTemp\RealTemp.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) The T1 Trust, PRR T1 Class 4-4-4-4 #5550, 1 of America's First HST's
ID: 1265617 · |
|
Jord Volunteer tester
Send message Joined: 9 Jun 99 Posts: 15184 Credit: 4,362,181 RAC: 3
|
Overheating alarm from your CPU, perhaps?
That's what these weird things usually boil down to, the alarm being played through the PC's internal speaker.
ID: 1265620 · |
|
zoom3+1=4 Volunteer tester
Send message Joined: 30 Nov 03 Posts: 65709 Credit: 55,293,173 RAC: 49
|
ID: 1265621 · |
|
Wembley Volunteer tester
Send message Joined: 16 Sep 09 Posts: 429 Credit: 1,844,293 RAC: 0
|
I would recommend you post that in the HijackThis forums. They have more knowledgeable people there. I notice quite a few "(file missing)" notices in your log though. Some of those files might be needed. Is your system running OK aside from the 'ding's ?
[edit] I just went looking for the forums and it seems Trend Micro took over HJT. I'm not sure where the forums are anymore to post your logs.
ID: 1265625 · |
|
zoom3+1=4 Volunteer tester
Send message Joined: 30 Nov 03 Posts: 65709 Credit: 55,293,173 RAC: 49
|
I would recommend you post that in the HijackThis forums. They have more knowledgeable people there. I notice quite a few "(file missing)" notices in your log though. Some of those files might be needed. Is your system running OK aside from the 'ding's ?
[edit] I just went looking for the forums and it seems Trend Micro took over HJT. I'm not sure where the forums are anymore to post your logs.
Me neither and I looked, yeah the system is ok, it's just annoying... The T1 Trust, PRR T1 Class 4-4-4-4 #5550, 1 of America's First HST's
ID: 1265627 · |
|
juan BFP Volunteer tester
Send message Joined: 16 Mar 07 Posts: 9786 Credit: 572,710,851 RAC: 3,799
|
Did you rememeber to look, when the boincmgr client can´t connect to the boinc it ding a sound and show a error msg? Maybe this is the ding you hear.
ID: 1265628 · |
|
zoom3+1=4 Volunteer tester
Send message Joined: 30 Nov 03 Posts: 65709 Credit: 55,293,173 RAC: 49
|
Did you rememeber to look, when the boincmgr client can´t connect to the boinc it ding a sound and show a error msg? Maybe this is the ding you hear.
Boinc is working fine.
I've been in scheduled tasks and I got rid of a couple that might have been setting the sound off, I'll know by 2:15pm or 2:30pm or so if the sound stops or not. The T1 Trust, PRR T1 Class 4-4-4-4 #5550, 1 of America's First HST's
ID: 1265630 · |
|
Wembley Volunteer tester
Send message Joined: 16 Sep 09 Posts: 429 Credit: 1,844,293 RAC: 0
|
Also check your system's event logs to see if something is happening there.
ID: 1265631 · |
|
zoom3+1=4 Volunteer tester
Send message Joined: 30 Nov 03 Posts: 65709 Credit: 55,293,173 RAC: 49
|
Also check your system's event logs to see if something is happening there.
I looked in the event viewer in Win 7, nothing worth mentioning, so far so good, the scheduled task must have been the source as the ding sound hasn't come back, yet, I'll wait until 3pm before declaring Victory...
The sound came back at 2:34pm, then 2:36 and 2:42... The T1 Trust, PRR T1 Class 4-4-4-4 #5550, 1 of America's First HST's
ID: 1265635 · |
|
AndyJ
Send message Joined: 17 Aug 02 Posts: 248 Credit: 27,380,797 RAC: 0
|
It sounds like it maybe the windows default ding.wav.
Control panel, sound, sounds- scroll down to default ding.wav. In the drop down menu, set to none, OK etc. That might shut it up, but it is only a fix for the sake of your sanity! It won't fix the cause of the error.
Best Regards,
Andy
ID: 1265658 · |
|
Ex: "Socialist" Volunteer tester
Send message Joined: 12 Mar 12 Posts: 3433 Credit: 2,616,158 RAC: 2
|
ID: 1265661 · |
|
zoom3+1=4 Volunteer tester
Send message Joined: 30 Nov 03 Posts: 65709 Credit: 55,293,173 RAC: 49
|
It sounds like it maybe the windows default ding.wav.
Control panel, sound, sounds- scroll down to default ding.wav. In the drop down menu, set to none, OK etc. That might shut it up, but it is only a fix for the sake of your sanity! It won't fix the cause of the error.
Best Regards,
Andy
I just called it Ding as I don't know what the sound is called and it's close, so far it's a multimedia event, but I have no idea on how to shut that off.
Never mind the multimedia service, found it and disabled it. The T1 Trust, PRR T1 Class 4-4-4-4 #5550, 1 of America's First HST's
ID: 1265665 · |
|
AndyJ
Send message Joined: 17 Aug 02 Posts: 248 Credit: 27,380,797 RAC: 0
|
It sounds like it maybe the windows default ding.wav.
Control panel, sound, sounds- scroll down to default ding.wav. In the drop down menu, set to none, OK etc. That might shut it up, but it is only a fix for the sake of your sanity! It won't fix the cause of the error.
Best Regards,
Andy
I just called it Ding as I don't know what the sound is called and it's close, so far it's a multimedia event, but I have no idea on how to shut that off.
Never mind the multimedia service, found it and disabled it.
You could have something running at startup causing this, so try start, type msconfig in the box, then enter. Under the startup tab, have a look for any programmes you do not need to run at startup. Uncheck them, OK, etc then restart. Antivirus and other similar programmes should be left alone.
Good luck!
Andy
ID: 1265667 · |
|
juan BFP Volunteer tester
Send message Joined: 16 Mar 07 Posts: 9786 Credit: 572,710,851 RAC: 3,799
|
There are few things you could do to try to find the origin... list some of them...
- If you stop Boinc the ding continues?
- Do you know how to use CCleaner or Msconfig?
If yes try to look if any different program shows at start up.
- Look with taskmrg if any hidden program/service is running, specialy at the expected time when the ding happends.
- Go to the control panel and stop all scheduled task.
If any one stop the ding you have your path to follow...
ID: 1265672 · |
|
zoom3+1=4 Volunteer tester
Send message Joined: 30 Nov 03 Posts: 65709 Credit: 55,293,173 RAC: 49
|
It sounds like it maybe the windows default ding.wav.
Control panel, sound, sounds- scroll down to default ding.wav. In the drop down menu, set to none, OK etc. That might shut it up, but it is only a fix for the sake of your sanity! It won't fix the cause of the error.
Best Regards,
Andy
I just called it Ding as I don't know what the sound is called and it's close, so far it's a multimedia event, but I have no idea on how to shut that off.
Never mind the multimedia service, found it and disabled it.
You could have something running at startup causing this, so try start, type msconfig in the box, then enter. Under the startup tab, have a look for any programmes you do not need to run at startup. Uncheck them, OK, etc then restart. Antivirus and other similar programmes should be left alone.
Good luck!
Andy
Nothing out of the ordinary seen there. Multimedia Class Scheduler is disabled at 3:43pm, it's 4:18pm. Disabling that didn't hurt any sound output on games or self started programs, just whatever was on automatic. The T1 Trust, PRR T1 Class 4-4-4-4 #5550, 1 of America's First HST's
ID: 1265678 · |
|
zoom3+1=4 Volunteer tester
Send message Joined: 30 Nov 03 Posts: 65709 Credit: 55,293,173 RAC: 49
|
There are few things you could do to try to find the origin... list some of them...
- If you stop Boinc the ding continues?[did that, yes]
- Do you know how to use CCleaner or Msconfig?
If yes try to look if any different program shows at start up.[did that]
- Look with taskmng if any hidden program/service is running, specialy at the expected time when the ding happens.[did that, nothing weird]
- Go to the control panel and stop all scheduled task.[did that, that seems to be the one, I think]
If any one stop the ding you have your path to follow...
The T1 Trust, PRR T1 Class 4-4-4-4 #5550, 1 of America's First HST's
ID: 1265680 · |
|
juan BFP Volunteer tester
Send message Joined: 16 Mar 07 Posts: 9786 Credit: 572,710,851 RAC: 3,799
|
- Go to the control panel and stop all scheduled task.[did that, that seems to be the one, I think]
Stop all and look if the ding stop. Dont worry stop just for the test.
Then return one at a time until you finaly find the source, then the analize the task.
ID: 1265683 · |
|
zoom3+1=4 Volunteer tester
Send message Joined: 30 Nov 03 Posts: 65709 Credit: 55,293,173 RAC: 49
|
- Go to the control panel and stop all scheduled task.[did that, that seems to be the one, I think]
Stop all and look if the ding stop. Dont worry stop just for the test.
Then return one at a time until you finaly find the source, then the analize the task.
I already did that, it is 4:33pm, so far no sound like before 3:43pm... The T1 Trust, PRR T1 Class 4-4-4-4 #5550, 1 of America's First HST's
ID: 1265686 · |
|
juan BFP Volunteer tester
Send message Joined: 16 Mar 07 Posts: 9786 Credit: 572,710,851 RAC: 3,799
|
- Go to the control panel and stop all scheduled task.[did that, that seems to be the one, I think]
Stop all and look if the ding stop. Dont worry stop just for the test.
Then return one at a time until you finaly find the source, then the analize the task.
I already did that, it is 4:33pm, so far no sound like before 3:43pm...
After you check the ding realy stop, return one program at a time until you find the origin and if you can please post the name of the program.
ID: 1265687 · |
|
zoom3+1=4 Volunteer tester
Send message Joined: 30 Nov 03 Posts: 65709 Credit: 55,293,173 RAC: 49
|
- Go to the control panel and stop all scheduled task.[did that, that seems to be the one, I think]
Stop all and look if the ding stop. Dont worry stop just for the test.
Then return one at a time until you finaly find the source, then the analize the task.
I already did that, it is 4:33pm, so far no sound like before 3:43pm...
After you check the ding realy stop, return one program at a time until you find the origin and if you can please post the name of the program.
Multimedia Class Scheduler is as far as I could go, what is activating that? I have no idea, it's now 4:43pm, no unauthorized sound from the pc. The T1 Trust, PRR T1 Class 4-4-4-4 #5550, 1 of America's First HST's
ID: 1265690 · |
|