Unknown case: virus, worm or probably a windows bug

[Gilberto]

Ok, I will try to explain the situation as much as I can.

Computer with windows xp sp2 all windows update package installed.

symtoms:

1. I cannot click on the first 50 x 50 pixels of the screen directly with
the mouse, so I cannot click the icon there or any application that have a
button on that place, but with the keyboard it works without troubles. also
if I am using a multiple selection with the mouse, then I can select items on
that area (square selection)
It seems not to be an image, since it react "normally" to keyboard commands.

2. always when I restart the computer, the Windows update service is disabled.

3. It open 2 pop ups when the computer is not in use (just after 2/3 hours,
every 2/3 hours when the computer is not in use only.

4. I already try with the trials and online check of antivirus with norton,
mcafee, adware, Panda, and none of them detect anything.

5. the only unknown service running is a service called "Window Net Dns"
not any other service or application acording to msconfig.

6. When I am playing a video with windows media player or media player
clasic, all words on the screen from windows explorer becomes transparent.
(names of icons and so on)

This computer does not have any aplication installed on 2008 acording to the
add/remove programs (just windows updates) and it is running like that since
3 weeks ago.

Please let me know what is happening. I assume it should be a spyware or a
worm, however no spyware or antivirus software detect it.

If somebody need more info, please let me know.

 

[smlunatick]

Ok, I will try to explain the situation as much as I can.

Computer with windows xp sp2 all windows update package installed.

symtoms:

1. I cannot click on the first 50 x 50 pixels of the screen directly with
the mouse, so I cannot click the icon there or any application that have a
button on that place, but with the keyboard it works without troubles. also
if I am using a multiple selection with the mouse, then I can select itemson
that area (square selection)
It seems not to be an image, since it react "normally" to keyboard commands.

2. always when I restart the computer, the Windows update service is disabled.

3. It open 2 pop ups when the computer is not in use (just after 2/3 hours,
every 2/3 hours when the computer is not in use only.

4. I already try with the trials and online check of antivirus with norton,
mcafee, adware, Panda, and none of them detect anything.

5. the only unknown service running is a service called "Window Net Dns"
not any other service or application acording to msconfig.

6. When I am playing a video with windows media player or media player
clasic, all words on the screen from windows explorer becomes transparent.
(names of icons and so on)

This computer does not have any aplication installed on 2008 acording to the
add/remove programs (just windows updates) and it is running like that since
3 weeks ago.

Please let me know what is happening. I assume it should be a spyware or a
worm, however no spyware or antivirus software detect it.

If somebody need more info, please let me know.

Are you runing a legit version of Windows XP?

A quick search on the Web seems to indicate that this "infestation" is
part of a "keygen" application. (http://www.msfn.org/board/
lofiversion/index.php/t114283.html)

And there is no automatic repair for this, just a manual one:
http://www.threatexpert.com/report.aspx?uid=a2620c89-3d80-4765-9aeb-7fed27a95a4d

 

[solidsnake204]

Did you receive an Reload or Restore disk with you computer?
If yes, then use the disk to re-install Windows.

 

[JohnB]

Try creating another profile on that PC and login with that username. Does
it do the same thing?

 

[Gilberto]

different user do the same thing.

Try creating another profile on that PC and login with that username. Does
it do the same thing?

 

[JohnB]

Other than then the popups, the problems seem to be "display" related. Have
you ruled out the video card and the monitor, by trying the monitor on
another computer or, a different monitor on that computer?

 

[nass]

Ok, I will try to explain the situation as much as I can.

Computer with windows xp sp2 all windows update package installed.

symtoms:

1. I cannot click on the first 50 x 50 pixels of the screen directly with
the mouse, so I cannot click the icon there or any application that have a
button on that place, but with the keyboard it works without troubles. also
if I am using a multiple selection with the mouse, then I can select items on
that area (square selection)
It seems not to be an image, since it react "normally" to keyboard commands.

2. always when I restart the computer, the Windows update service is disabled.

3. It open 2 pop ups when the computer is not in use (just after 2/3 hours,
every 2/3 hours when the computer is not in use only.

4. I already try with the trials and online check of antivirus with norton,
mcafee, adware, Panda, and none of them detect anything.

5. the only unknown service running is a service called "Window Net Dns"
not any other service or application acording to msconfig.

6. When I am playing a video with windows media player or media player
clasic, all words on the screen from windows explorer becomes transparent.
(names of icons and so on)

This computer does not have any aplication installed on 2008 acording to the
add/remove programs (just windows updates) and it is running like that since
3 weeks ago.

Please let me know what is happening. I assume it should be a spyware or a
worm, however no spyware or antivirus software detect it.

If somebody need more info, please let me know.

Does this behaviour exist if you booted into Safe Mode?.
Your Video card may gone flaky or the Power supply going bad.
Does the system overheated or get overheated and what the Pop-up message is
about?.

Have a look in the Event Viewer and send us the error messages you will see
there in your next post:
Open a Notepad, customize or minimize to the taskbar as you will need it
later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or Yellow
exclamation mark /!\ , double click each one to get more info about the
causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the Notepad
you opened earlier and right click on the first line and select Paste from
the list, this will paste the error message on a Notepad.
Please don't duplicate the error message one of each kind will be sufficient.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

Please we need just the error messages with Red (X) and don't repeat the
error, just one of each kind and post them back in your next post.

How to perform a clean boot in Windows XP
http://support.microsoft.com/?id=310353
A description of the Safe Mode Boot options in Windows XP
http://support.microsoft.com/kb/315222/en-us
HTH.
nass