PC Pals Forum

Technical Help & Discussion => General Tech Discussion, News & Q&A => Topic started by: KRO on November 09, 2009, 01:40

Title: silence of the lambs
Post by: KRO on November 09, 2009, 01:40
ok dont laugh, i have only very recently been getting the sound of bleeting lamb on my pc, does anyone have any idea's, a friend seems to think it might be a virus..(i do hope not) but i just seem to get this random...baa  ????
i am running vista home edition, and AOL are my broadband provider..and i'm currently running AVG free edition..thanks for any help..
Title: Re: silence of the lambs
Post by: sam on November 09, 2009, 01:55
it does seem like some application might be running in the background... but a virus making noises like that, hmmm...
Title: Re: silence of the lambs
Post by: Sandra on November 09, 2009, 03:05
I had a trojan a few months back that started a program that sounded like a radio broadcast every so often for what appeared to be no reason or particular pattern.
If you open your task manager up when the noise appears, look in the processes part and see if theres something running thats just a letter then .exe
I had various ones coming up from a.exe to g.exe.
If you highlight it and click on End Process the sound should go.
If it t day, look in C/Temp folder and on mine I had all those a.exe and b.exe files in there. I deleted them all and after scanning with a trojan remover, malwarebytes, AVG and every other clean up program that I had it got rid of everything.
Title: Re: silence of the lambs
Post by: GillE on November 09, 2009, 03:12
You had that too, Sandra?  My antivirus picked it up before it could do any damage, but I had to use the Sophos anti-rootkit to finally clear it.
Title: Re: silence of the lambs
Post by: Sandra on November 09, 2009, 03:26
Well it was my fault really Gill, I had downloaded something and scanned it and it said it was clean.
When I installed it and ran the keygen AVG, flagged it up as a trojan.
I assumed it was a false positive, as so often happens, and told it to continue.
Shortly afterwards all the problems started  :o:
Title: Re: silence of the lambs
Post by: sam on November 09, 2009, 05:15
You had that too, Sandra?  My antivirus picked it up before it could do any damage, but I had to use the Sophos anti-rootkit to finally clear it.

Oh the fun of using windows.
Title: Re: silence of the lambs
Post by: Rik on November 09, 2009, 09:20
Of course, it's always possible a lamb crept in to keep warm and now can't get out again.  ;D
Title: Re: silence of the lambs
Post by: Simon on November 09, 2009, 09:45
This is not a joke question, but you haven't got a little cartoon sheep running round your desktop have you, KRO?

http://www.slinkycity.com/windows-desktop-sheep.html

If that's it, you should be able to remove it via Add / Remove programs.  If not, then sorry, I don't know.  :dunno:
Title: Re: silence of the lambs
Post by: KRO on November 09, 2009, 11:09
hi simon, no sheep just the sound, it's actually sounded off once so far this morning....
Title: Re: silence of the lambs
Post by: Simon on November 09, 2009, 12:18
Anything odd in Task Manager, or in Add / Remove programs?  You could try running SuperAntiSpyware or MalwareBytes, in case it's spyware.
Title: Re: silence of the lambs
Post by: davy51 on November 09, 2009, 14:20
Download and run A-Squared it will find it and allow yyou to  follow it to the folder its in then you can delete it

Itg sounds like a trojan
A squares is slow but will find what others miss


http://www.emsisoft.com/en/software/free/
Title: Re: silence of the lambs
Post by: KRO on November 11, 2009, 22:59
hi,
    i'm still getting this sound periodically, i downloaded A-squared and ran a deep scan, which came up with 32 low risk cookies...should i delete all these ?.......thanks
Title: Re: silence of the lambs
Post by: Clive on November 11, 2009, 23:04
No harm in doing so but no harm in leaving them either.  Could it be your fan making a noise?  :dunno:
Title: Re: silence of the lambs
Post by: sam on November 11, 2009, 23:07
hi,
    i'm still getting this sound periodically, i downloaded A-squared and ran a deep scan, which came up with 32 low risk cookies...should i delete all these ?.......thanks

was there any evidence in the task manager at all?
Title: Re: silence of the lambs
Post by: KRO on November 11, 2009, 23:12
hi sam,
          no it all seemed fairly normal in the task manager (but hey, i wouldn't have a clue what i was looking at really) at least there was nothing like sandra suggested there might be, ie: a single letter then .exe   ??? ???
Title: Re: silence of the lambs
Post by: sam on November 11, 2009, 23:18
hmmm.

does seem odd - you dont have any programs like msn running do you - or anything that gives you audio notifications? just wondering if you did and some how the sound got changed to a sheep, long shot but worth thinking about before hunting for bugs etc.

Did you say you did a full scan with AVG?
Title: Re: silence of the lambs
Post by: Clive on November 11, 2009, 23:28
Take a look at this list to see if you can spot anything that should not be there. 
http://www.tasklist.org/
Title: Re: silence of the lambs
Post by: Simon on November 11, 2009, 23:28
Are you actually sure it's coming from the PC speakers, and not from inside the case?  As Clive said, it could be a squeaking fan.
Title: Re: silence of the lambs
Post by: KRO on November 11, 2009, 23:53
it is definately coming through the pc speakers, it's just done it again !!!
Title: Re: silence of the lambs
Post by: sam on November 11, 2009, 23:54
does it happen at regular intervals (or when you are running something?), or sort-of randomly?
Title: Re: silence of the lambs
Post by: Simon on November 12, 2009, 00:07
Go to Control Panel > Sounds and Audio Devices > Sounds (tab), and see if there's anything in the list that might be suspicious.
Title: Re: silence of the lambs
Post by: sam on November 12, 2009, 00:55
yeah I remember a friend with win98 has some weird desktop setup and had some very odd noises.
Title: Re: silence of the lambs
Post by: Rik on November 12, 2009, 09:46
Certainly it's worth checking the the Windows 'sounds' to see that nothing has crept in there.
Title: Re: silence of the lambs
Post by: KRO on November 12, 2009, 13:30
it's still happening randomly,i've now done two full scans with both A-squared and AVG and nothing has come up... ??? :dunno:
Title: Re: silence of the lambs
Post by: Simon on November 12, 2009, 13:40
Have you looked in Sounds as has been suggested?
Title: Re: silence of the lambs
Post by: Clive on November 12, 2009, 14:27
Does it only happen when you are connected to the Internet?  What about in Safe Mode?   :)
Title: Re: silence of the lambs
Post by: davy51 on November 12, 2009, 15:07
You wouldn't happen to be running incredimail or any of the like would you

It sounds like you have downloaded a program and it has included either a desktop program or incredimail

These programs sometimes are included with screen savers or desktop backgrounds

And even after uninstall can leave enough traces in the registry to do as your computer is doing

Title: Re: silence of the lambs
Post by: KRO on November 13, 2009, 01:17
hi,
    i can find nothing in sounds, and i've not downloaded any other programmes etc. like i said it still seems to be occuring at random.... :dunno:
Title: Re: silence of the lambs
Post by: Simon on November 13, 2009, 08:05
Can you do a screenshot of all the running processes in Task Manager, and post it?  You can use the attachment facility by clicking the Reply button, instead of using the Quick Reply box on here.  :)
Title: Re: silence of the lambs
Post by: Baz on November 13, 2009, 17:34
what about these programs like windows live messenger or AIM is it?   they have all sorts of noises when someone signs in. Do you have any of those running
Title: Re: silence of the lambs
Post by: Simon on November 13, 2009, 17:52
Good thinking, Baz.  It has to be a running program of some sort - unless he does actually have a sheep hiding in his PC!  ;D
Title: Re: silence of the lambs
Post by: Baz on November 13, 2009, 17:53
just looking through the windows sounds on my system, there is one 'Windows XP Hardware Fail'   have a listen and see if that sounds remotely like a sheep

mine are in c>windows>media
Title: Re: silence of the lambs
Post by: Baz on November 13, 2009, 17:54
might be crying to get out Simon :)
Title: Re: silence of the lambs
Post by: Simon on November 13, 2009, 18:29
just looking through the windows sounds on my system, there is one 'Windows XP Hardware Fail'   have a listen and see if that sounds remotely like a sheep

mine are in c>windows>media

Mine sounds nothing like a sheep!  ;D
Title: Re: silence of the lambs
Post by: Baz on November 13, 2009, 19:57
 ;D ;D ;D   yeah thats the same sound as mine but , you know, could sound different to someone else :dunno:

might be a getting a bit panic stricken now, been in system so long
Title: Re: silence of the lambs
Post by: KRO on November 15, 2009, 13:12
Can you do a screenshot of all the running processes in Task Manager, and post it?  You can use the attachment facility by clicking the Reply button, instead of using the Quick Reply box on here.  :)

sorry about the pics, but hope they help  :dunno:

(https://www.pc-pals.com/smf/proxy.php?request=http%3A%2F%2Fi33.tinypic.com%2F2z5nhah.jpg&hash=eb02ca56a7f9b14f9b939da016a0cddad781d655)

(https://www.pc-pals.com/smf/proxy.php?request=http%3A%2F%2Fi33.tinypic.com%2F2ufayi9.jpg&hash=8ac9cfdb18649c7cf5149044e42a5e33165af089)

cheers keith...
Title: Re: silence of the lambs
Post by: Rik on November 15, 2009, 13:18
Check where csrss.exe is:

Quote
This is the user-mode portion of the Win32 subsystem; Win32.sys is the kernel-mode portion. Csrss stands for Client/Server Run-Time Subsystem, and is an essential subsystem that must be running at all times. Csrss is responsible for console windows, creating and/or deleting threads, and implementing some portions of the 16-bit virtual MS-DOS environment.

Note: The csrss.exe file is located in the folder C:\Windows\System32. In other cases, csrss.exe is a virus, spyware, trojan or worm! Check this with Security Task Manager.

Virus with same name: Nimda.E
Title: Re: silence of the lambs
Post by: Simon on November 15, 2009, 13:29
Hi Keith,

I think we referred to a couple of other spyware sweepers earlier on in the thread, namely, SuperAntiSpyware (http://www.superantispyware.com/download.html), and MalwareBytes (http://www.malwarebytes.org/mbam.php)  Did you try either of them?  Also, it might be worth running HijackThis (http://free.antivirus.com/hijackthis/).  You can post the results here, but I believe you can also send them for immediate analysis.
Title: Re: silence of the lambs
Post by: KRO on November 16, 2009, 00:56
Hi Keith,

I think we referred to a couple of other spyware sweepers earlier on in the thread, namely, SuperAntiSpyware (http://www.superantispyware.com/download.html), and MalwareBytes (http://www.malwarebytes.org/mbam.php)  Did you try either of them?  Also, it might be worth running HijackThis (http://free.antivirus.com/hijackthis/).  You can post the results here, but I believe you can also send them for immediate analysis.

hi simon,
             no i've not run any of these you mention, i've only run full scans with AVG and A- squared so far, i will try the others you have recommended....

thanks
Title: Re: silence of the lambs
Post by: Simon on November 16, 2009, 01:06
Let us know the results.  :)
Title: Re: silence of the lambs
Post by: KRO on November 16, 2009, 20:33
right well after downloading all the suggested prorammes and running full scans, the only thing that has come up each time is low risk tracking cookies..... :dunno: :dunno:
Title: Re: silence of the lambs
Post by: Simon on November 16, 2009, 22:35
Well, I have to say, this has beaten me.  Is there anything in C:\WINDOWS\Media that could be it?  Do you have the 'Jungle' sounds, and could it be one of those?  :dunno:
Title: Re: silence of the lambs
Post by: Serenity on November 16, 2009, 22:39
Well, I have to say, this has beaten me.  Is there anything in C:\WINDOWS\Media that could be it?  Do you have the 'Jungle' sounds, and could it be one of those?  :dunno:

Maybe we should ask Tony Hopkins    :o:
Title: Re: silence of the lambs
Post by: Simon on November 16, 2009, 23:02
Who's Tony Hopkins?   :laugh:
Title: Re: silence of the lambs
Post by: Serenity on November 16, 2009, 23:04
Who's Tony Hopkins?   :laugh:


He is wharracall round the corner in Port Talbot   :P
Title: Re: silence of the lambs
Post by: Simon on November 16, 2009, 23:13
What you on, woman?!   :)x
Title: Re: silence of the lambs
Post by: davy51 on November 17, 2009, 03:43
Only things left to check is hardware interference

Could be a drive or other mechanical part causing interference in the speakers

Power supply leaking
Hard drive acting up
Disc drive making sounds
Title: Re: silence of the lambs
Post by: sam on November 18, 2009, 02:43
right well after downloading all the suggested prorammes and running full scans, the only thing that has come up each time is low risk tracking cookies..... :dunno: :dunno:

this is just plain odd. I'm not at all convinced its a virus more than something else... some app - no kids toys in the room?  :dunno:
Title: Re: silence of the lambs
Post by: davy51 on November 18, 2009, 03:20
Its possible its a trojan that the software cant see because it is hiding itself

About everything has been checked
Hang in there someone may think of something
Title: Re: silence of the lambs
Post by: sam on November 18, 2009, 03:24
I guess it could be some kind of trojan - I wonder if the computer is in safe mode if you get the same issue.
Title: Re: silence of the lambs
Post by: Clive on November 18, 2009, 09:04
Who's Tony Hopkins?   :laugh:

The thread is titled Silence of the Lambs the star of which was ...... ;D
Title: Re: silence of the lambs
Post by: Simon on November 18, 2009, 09:54
 :doh: :duh:
Title: Re: silence of the lambs
Post by: KRO on December 07, 2009, 17:36
it's still happening peeps..... :bawl:
Title: Re: silence of the lambs
Post by: Rik on December 07, 2009, 18:04
Have you tried safe mode.
Title: Re: silence of the lambs
Post by: Clive on December 07, 2009, 23:29
Oi! 

Does it only happen when you are connected to the Internet?  What about in Safe Mode?   :)
Title: Re: silence of the lambs
Post by: Simon on December 07, 2009, 23:47
He never answered the first time.  :)
Title: Re: silence of the lambs
Post by: sam on December 07, 2009, 23:51
Oi! 


Clive no one can take you serious with this... you know technical question about sheep noises and all...  ;)
Title: Re: silence of the lambs
Post by: Clive on December 08, 2009, 09:48
 :blush:
Title: Re: silence of the lambs
Post by: KRO on December 08, 2009, 11:48
He never answered the first time.  :)


sorry guy's, that's only because i don't know what safe mode is...... :blush:
ps. in the time it's taken me to write this reply, the sheep has bleeted twice... :crazy:
Title: Re: silence of the lambs
Post by: Simon on December 08, 2009, 12:03
Reboot, and as soon as you see the first boot screen, keep tapping F8 and you should get the option to go into safe mode.  The only trouble is, if the noise in intermittent and random, it may not do it anyway. 
Title: Re: silence of the lambs
Post by: Lona on December 08, 2009, 22:18
Why don't you do a system restore and take it back to before the sheep arrived.  If it was a trojan it might disappear.
Title: Re: silence of the lambs
Post by: Simon on December 08, 2009, 22:43
I don't think System Restore goes back that far, Lona.  ;D
Title: Re: silence of the lambs
Post by: KRO on December 20, 2009, 14:18
the sheep are still with me !!!!!!!!!!!!  ???  :crazy:
Title: Re: silence of the lambs
Post by: Simon on December 20, 2009, 18:03
I think we've exhausted all the possibilities here.  Unless anyone else can come up with any ideas, if you've tried all that's been suggested, then the only other thing I can suggest is a Windows reinstall.  :dunno:
Title: Re: silence of the lambs
Post by: Rik on December 20, 2009, 18:09
I have to agree.