Suspicious behavior from interface, but no malicious software dete

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I've been running Vista for about three months now, and lately I've noticed
some erratic behavior from the system that makes me quite suspicious about
possible keylogging or other malicious software that may have embedded itself
in my system. I'm currently running Windows Vista with Symantec Corporate
Anti-virus 10.2 Build #276 and this was the first software installed on my
computer before it ever connected to a network. I've always been very good
about protecting my system from viruses, and have only had one infection in
the last 15 years. I never open stupid emails or click attachments, I'm not
fooled by filename extension gimmicks and other stupid tricks. I don't fall
into phishing scams and I have javascript enabled per a whitelist which I use
on completely legitimate websites. All that said, it's hard to imagine that
I've fallen victim to a virus, but my system is not behaving as I would
expect it to.

It might even sound stupid, but here's the problem. If I open the start menu
or rename a file, often after only a few seconds the operation will close
itself. I click All Programs then Open Office for example, the menu will
close before I can click Writer. I click a file and press F2 to rename it, it
will quit the rename before I finish typing.

It's really quite an odd behavior, but also I've noticed my computer has
frozen completely once last week. My computer has never frozen. Lastly, I've
noticed an occasional black frame rendered. You'd probably never notice it
unless you were focused on the screen, and I don't know if this is part of
Aero or something, but it's a blink of a single black frame being rendered,
which I think could possibly be a screen capture.

Hopefully, I'm just paranoid, and there's some minor bugs in Vista being
worked out, I've ran the windows malicious software removal tool, and root
kit revealer to no results. I don't know what to do next, is there anyone
with some advice?
 
David said:
another option--restore to a time when u didnt have this issue

Yeah, I thought of this, unfortunately, Windows Restore sets automatically
restore points left and right, and will throw out manual restore points to
make room for them. That's quite the annoying feature. Manual Restore points
should take precedence over automatic restore points for disk use.

I just noticed my last service entry is named:
XQRPEUSVDXXA and is installed at: Z:\Local\Temp\XQRPEUSVDXXA.exe

Which seems completely suspicious to me. Unfortunately I couldn't find a
google result on the filename, it appears completely random. Does anyone have
an idea what it could be?
 
Depending upon only one antivirus program or one anti spyware program is
insufficient in these days. No one program will detect everything.
Conversely, some things are detected by almost all of these type programs.

Use some or all of these on-line scans:

http://www.microsoft.com/security/malwareremove/default.mspx

http://www.pandasecurity.com/homeusers/solutions/activescan/?

http://www.spywareinfo.com/xscan.php

http://www.kaspersky.com/kos/english/kavwebscan.html

http://www.spywareguide.com/onlinescan.php

http://housecall.trendmicro.com/

http://www.bitdefender.com/scan8/ie.htmlhttp://support.f-secure.com/enu/home/ols.shtml

http://www.kaspersky.com/virusscanner

http://ca.com/us/securityadvisor/virusinfo/scan.aspx

http://onlinescan.avast.com/

You may have to boot up into safe mode to totally remove many infections.

After you have removed everything, protect your computer with additional
software.
Install good anti virus protection and anti malware protection.

--


Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)
 
Back
Top