I'm online right now and the thing is that I hear clicking!!! I recently cleaned out my computer of adware and spyware, and my computer has been running great. However, about 10 minutes ago I was typing a document when all of a sudden I started to hear clicking on my computer, and I was not clicking on anything. Is my computer hacked or do I still have hidden spy/adware?

Thanks!!!!

Where is the sound coming from.. your speakers ? and when ? do you in fact have audio sound set even when you do click ? and what is your OS ?

Yes, the sound was coming from my speakers this morning and I do have audio sound set even when I click. And my operating system is Microsoft Windows Millenium Edition.


Thanks for your help! :thumb:

Well if you think it is associated with adware or spyware do these step and then post your hijack log ..

Pinned: Guidelines for Posting in This Forum
READ THIS FIRST PLEASE

http://forum.gladiator-antivirus.com/index...showtopic=10517

Are you getting then the same audio sound you have setup as if you did actually click ?

Do you only get this when you are tpying a document in word..or do you get it when ever you type any place...like in this post ?

Did it go away ?

I have just cleaned up my comp of spyware and adware. The clicking stopped a bit before I ran Adaware.



yes.


I get it at any time. If I"m just surfing the web, typing a document, or just doing anything. At one time I got up from my desk and even while I wasn't on the computer, the clicking was still going on.

And the clicking stopped about 10 minutes ago.


here is my hijack log:

Logfile of HijackThis v1.97.7
Scan saved at 12:18:10 PM, on 6/16/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\ACS\ACSD.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSRTE.EXE
C:\PROGRAM FILES\MESSENGER PLUS! 2\MSGPLUS.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\HPSYSDRV.EXE
C:\PROGRAM FILES\ADAPTEC\DIRECTCD\DIRECTCD.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHLD.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSESCN.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\AMERICA ONLINE 9.0\AOLTRAY.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMUSBKB2.EXE
C:\PROGRAM FILES\YAHOO!\MESSENGER\YMSGR_TRAY.EXE
C:\PROGRAM FILES\AMERICA ONLINE 9.0\WAOL.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\AMERICA ONLINE 9.0\AOLWBSPD.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSFTSN.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\EVNTSVC.EXE
C:\PROGRAM FILES\AIM\AIM.EXE
C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://hp.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hp.my.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://hp.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp.my.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://hp.yahoo.com
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run
O4 - HKLM\..\Run: [Keyboard Manager] C:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [HPScanPatch] C:\WINDOWS\SYSTEM\HPScanFix.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [Delay] C:\WINDOWS\delayrun.exe
O4 - HKLM\..\Run: [Adaptec DirectCD] C:\PROGRA~1\ADAPTEC\DIRECTCD\DIRECTCD.EXE
O4 - HKLM\..\Run: [Ad-aware] "C:\PROGRAM FILES\LAVASOFT\AD-AWARE 6\AD-AWARE.EXE" +c
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\MCAFEE.COM\VSO\MCMNHDLR.EXE" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "C:\PROGRA~1\MCAFEE.COM\VSO\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\MCAFEE.COM\AGENT\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\MCAFEE.COM\AGENT\MCUPDATE.EXE
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [AolAcsDaemon1] "C:\PROGRAM FILES\COMMON FILES\AOL\ACS\ACSD.EXE"
O4 - HKLM\..\RunServices: [McVsRte] C:\PROGRA~1\MCAFEE.COM\VSO\mcvsrte.exe /embedding
O4 - HKLM\..\RunServices: [MessengerPlus2] "C:\Program Files\Messenger Plus! 2\MsgPlus.exe"
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRA~1\YAHOO!\MESSEN~1\ypager.exe -quiet
O4 - Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Yahoo! Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O14 - IERESET.INF: START_PAGE_URL=http://hp.my.yahoo.com
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.av.aol.com/molbin/shared/m...77/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.av.aol.com/molbin/shared/m...,18/mcgdmgr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwa...ash/swflash.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = aoldsl.net

Some one will look at your log soon..but are you on dial up and/or have you downloaded any programs lately that would notify you of a call or problems on your PC..I am not going to assume that this noise is not coming from your hard drive but rather audio generated out of your speakers.

example...

http://www.computing.net/hardware/wwwboard/forum/24760.html

example...I use dial-up, and my phone is connected to my computer, even if I'm not online, my phone would give off beeps like those heard when I'm online.

see this link

http://amazingtechs.com/index.php?showtopi...=0&#entry104140


Also there as some system overtemp type programs that PC manufactures some time install to warn you that a problem exists


Can you give me more clues ?? :)

Do you have notifying sounds set up when messages come into your PC ?

Do you have weather bug installed on that PC Wave.gif

Wierd sounds while pc is idle


..Weatherbug Alert is chirping..Thanks Again

http://www.computing.net/security/wwwboard/forum/11507.html

Did not I just read recently that AOL 9 and that AIM installs noe the weather bug ?

http://www.bigblueball.com/forums/topic.asp?TOPIC_ID=10894

is it making this noise ??

The sound is the exact sound the comp makes when I click on something. It's not a beep or a rattle or buzz sounds. And I don't have weatherbug installed.



yeah, but they're just the sounds made my AIM, MSN messenger or Yahoo.



I'm on dial up, but I haven't downloaded any new programs lately.


The weird thing is that while the clicking is going on nothing happens. No files or documents are opened, but it does sound as if files are being indeed opened. For a minute I thought a hacker had entered my computer, since I haven't re-installed my firewall after recently reformatting my computer.

actually, I have the first version of AIM 9 and an older version of AIM so I don't have Weather Bug installed.


Another thing is that while the clicking was going on, my computer suddenly slowed down. :unsure:

Another thing is that while the clicking was going on, my computer suddenly slowed down.

I dont like that part.. :( when was last time you did a full defrag on the PC..is this a laptop ??

no, it's not a laptop. It's a desktop.

And I haven't done a defrag since I reformatted my computer which was about a month ago.

Have you gone into your control panel > sounds and see if there are any funny ones set up or not there ?

I just checked. Everything seems to be in order. :)

What model PC do you have..is there any possibility it has something like..

Temperature and Voltage Monitoring
Your system includes temperature and voltage probes to sense when the system becomes overheated or the power supply voltage is out of range. In either case, a message appears on the screen when Dell OpenManage IT Assistant is running or at the next system start-up notifying you of the problem.


I think some also give audio alerts ..weird stuff you have there if it is in fact an audio file some place on your PC that some program or malware is telling the file to give sound..maybe also your audio drivers got corrupted along the way.

Did you ever use this free program..?

Belarc Advisor - Free Personal PC Audit (version 6.1)

http://www.belarc.com/free_download.html

Give it a try and lets see what it will display..and then copy and past the information it in your next post.

And if you still think it is exactly the same sound you have set up for when you do a mouse click..you could try having no sound on mouse click and see if it is still happening at those random times you metioned.

I just turned it off. Let's see if it still clicks.


and here is the scan results:

Computer Profile Summary
Computer Name: (in HEWLETTPACKARD)
Profile Date: Wednesday, June 16, 2004 2:03:46 PM
Advisor Version: 6.1
Windows Logon: *********


Operating System
Windows Millennium Edition (build 4.90.3000)

System Model
00101890 8756C 15297600000447 20
System Serial Number: ***********

Processor
850 megahertz Intel Pentium III
32 kilobyte primary memory cache
256 kilobyte secondary memory cache

Main Circuit Board b
Board: Asus HAWK 1.08
BIOS: Phoenix Technologies LTD 2.04 08/15/00

Drives
40.01 Gigabytes Usable Hard Drive Capacity
36.15 Gigabytes Hard Drive Free Space

LG CD-ROM CRD-8483B
MITSUMI CR-4804TE [CD-ROM drive]
Generic floppy disk drive (3.5")

Generic IDE hard disk drive (40.01 GB) -- drive 0, No SMART Driver

Memory Modules c,d
128 Megabytes Installed Memory

Local Drive Volumes
c: (on drive 0) 40.01 GB 36.15 GB free

Users
***********

Printers
QuickLink III on FAX:

Controllers
Standard Floppy Disk Controller
Intel 82801AA Bus Master IDE Controller
Primary IDE controller (dual fifo)
Secondary IDE controller (dual fifo)

Display
Intel® 82810E Graphics Controller [Display adapter]
SONY HMD-A200 [Monitor] (16.1"vis, s/n 5530395, September 2000)

Bus Adapters
Intel® 82801AA USB Universal Host Controller

Multimedia
Crystal WDM Audio Codec
Gameport Joystick (no joystick connected)
MPU-401 Compatible MIDI Device

Communications
Lucent Win Modem
HP EN1207D-TX PCI 10/100 Fast Ethernet Adapter
Microsoft Virtual Private Networking Adapter
Network Card MAC Address: 00:10:B5:7E:22:C6

Other Devices
Standard 101/102-Key or Microsoft Natural Keyboard
USB Root Hub
WDM Communication Device

Virus Protection
McAfee VirusScan Version 8.0.26
Scan Engine Version 4.3.20
Last Disk Scan on Tuesday, May 18, 2004 7:46:21 PM
Realtime File Scanning On


Installed Microsoft Hotfixes
No hotfixes are installed

Software Licenses

Microsoft - Interactive Training 16800-OEM-0000007-00000
Microsoft - Internet Explorer 52782-OEM-0009147-00557
Microsoft - MediaPlayer 52782-OEM-0009147-00557
Microsoft - MediaPlayer 69808-838-9892752-04064
Microsoft - Windows Millennium Edition 52782-OEM-0009147-00557
Microsoft - Works 2000 23100-OEM-0000007-00000

Software Versions
Adaptec - CD Jewel Version 1.02 (256) *
Adaptec - DirectCD Version 3.01c (166S2) *
Adaptec - Easy CD Creator Version 4.02 (285) *
Adaptec - Easy CD Creator Version 4.02S (287) *
Adaptec - Web-CheckUp Version 1.01 (265) *
Adobe Acrobat Version 4.0.000 *
AdpBrowser Application Version 1, 0, 0, 21 *
America Online Version 9.00.000 *
America Online, Inc. - AOL Connectivity Service Version 1,0,24,9 *
America Online, Inc. - AOL Instant Messenger Version 5.2.3292 *
AOL Canada 5.0 *
AT&T WorldNet Service *
Belarc, Inc. - BelManage Client Version 6.1 *
blindman.exe *
Cinematronics - 3D Pinball Version 4.90.3000.1 *
CompuServe 2000 *
Connects you to America Online if you have an Internet Connection. *
Delay *
Eastman Software, Inc., A Kodak Business - Imaging for Windows® Version 1.01.1312 *
FreeTicket *
GTek Technologies Ltd. - GTCoach Version 3, 0, 0, 1 *
GTek Technologies Ltd. - TrainerCabLauncher Application Version 1, 0, 0, 1 *
Hewlett-Packard - HP Application Recovery (CD required) Version 2.0.0.0 *
Hewlett-Packard Company - HPScanFix Application Version 1, 0, 0, 1 *
Hewlett-Packard Company - hpsysdrv Version 1, 7, 0, 0 *
HP - DllApp Version 3.00 *
Intuit - Quicken 2000 for Windows Version 009.000.000.000 *
Jordan Russell - If you want to undo changes made by Spybot-S&D, use the Recovery instead! *
Lavasoft Ad-aware Plus Version 6.0.0.0 *
Microsoft ® PCHealth Version 4.90.0.2525 *
Microsoft ® Windows Script Host Version 5.1.0.4615 *
Microsoft Clip Gallery Version 5.1.00.1221 * Microsoft Corporation - DirectShow Version 6.4.07.1112 *
Microsoft Corporation - Internet Explorer Version 5.50.4134.100 *
Microsoft Corporation - Messenger Version 6.1 *
Microsoft Corporation - MSN Gaming Zone Version 1.00.523.4 *
Microsoft Corporation - Spider Version 2, 0, 0, 1 *
Microsoft Corporation - Windows Installer Version 2.0.2600.1 *
Microsoft Corporation - Windows Movie Maker Version 1.0.1376.0 *
Microsoft Corporation - Windows® NetMeeting® Version 3.01 *
Microsoft Interactive Training Version 3, 4, 1, 95 *
Microsoft Money Version 8.00.0731 *
Microsoft® Windows Media Player Version 9.00.00.2980 *
Microsoft® Plus! for Windows® 95 Version 4.40.500 *
Microsoft® Works 2000 Version 5.00.2002.0 *
MusicMatch Installer Version 2, 0, 0, 1 *
MusicMatch Jukebox Version 5.10.0144 *
Netropa Corp. - Multimedia Keyboard Properties Version 1, 0, 0, 0 *
Netropa Corp. - One-touch Multimedia Keyboard Version 3.2.0.9 *
Networks Associates Technology, Inc - McAfee SecurityCenter Version 4, 3, 0, 0 *
Networks Associates Technology, Inc - McAfee VirusScan Version 8, 0, 0, 0 *
Patchou - Messenger Plus! 2 Version 2, 21, 0, 57 *
PepiMK Software - SpyBot-S&D Version 1.2 *
Prodigy Internet *
Prodigy Internet - Espanol *
RealNetworks, Inc. - RealOne Player (32-bit) Version 0.1.0.880 *
RealNetworks, Inc. - RealOne Player (32-bit) Version 6.0.10.505 *
RealNetworks, Inc. - RealOne Player (32-bit) Version 7.0.0.559 *
Smith Micro Software, Inc. - QuickLink III Version 3.3.0 *
Space Invaders *
Trellix - TlxRegister2 Version 2.06.2254 *
Trellix Web™ 2.6 Version 2.6.0.2116 *
Yahoo! Messenger Version 5, 5, 0, 1254 *

Thanks..I edited out all your keys and personal info :thumb:

Well, I have checked your log and there is no malware running on that PC :)

I also have AOL 9.0 In advanced mail setting I have checkmarked the *Play sound when new mail is delivered* and that is a clicking sound. It took me a while to figure out what the clicking was going on when I was doing other things but finally figured out that was it because each time I heard one I would look at my email and, sure enough, had new email :) Try checking to see if that is it.

I also wonder if there is a sound setting for when popups are blocked. I do not have mine enabled as I don't need it but that is another thing you can check.

I will be back later...BTW what is this FreeTicket * ..just curious...if you do not know what it is..you can click on it in that belarc advisor and it will take you to the folder.


I see you do have a few users on that PC..wonder if any others installed things.

Thanks! :kwl:


And Jane, I just checked my mail, and there are no new ones.



I don't have a pop up blocker, since i never get them.



It's an offer from internet service that came along with the PC.


Thanks for the help guys. :thumb: The clicking has stopped and has not come back for a while. Let's hope it stays that way.
:thx: Wave.gif

I would hazard as guess that it is a sound associated with a computer program, most likely AOL or a pop up blocker.

Check your sound control panel. Find the sound you are hearing (it may take a few tries to locate it), then look for all other programs which use that sound. That will show the actions that result in the sound being played.

Also, does this only happen when you browser is open? If so, then a popup blocker is the most likely source.

I am sure it is not your hard drive. Clicking from a hard drive is usually fatal and you would not be posting.

I have it from a good source if it happens again only when you come to the Gladiator Security Forum it could be the Toad cleaning the bee sharp out of his valves. In that case it is a minor problem.


banana banana

Heya

I must admit my suggestion may sound little bit too simple, but...

Please check your sound settings for Windows:

START --> SETTINGS --> CONTROL PANEL --> SOUND --> WINDOWS SOUND EVENTS

You will find a list with all Windows events which is associated with a sound file.
If there's a file called START.WAV listed, find out which Windows event is associated with this file. Set this event to none and listen again.

Reason for my suggestion:
I've re-installed a notebook with WinME yesterday evening and I was wondering why hearing a clikc each time when pressing down the left mouse tab.

Greetz
B. Udo

PS: Same can be noticed when using WinXP or Win HE....

@Hunter
Valves valves ???
What do you know about valves?
:ph34r:

TECH Support Wave.gif


Is there extraneous noise coming from your instrument, the computer or the room you're in?

If extraneous noise is entering the microphone in addition to your playing, Autoscore will undoubtedly be confused at which sounds it is supposed to analyze. Extraneous noise can include unusually loud saxophone valves, excessive string noise of a guitar, your computer fan or loud accompaniment music. If you can guarantee that unintentional sounds are not leaking into your microphone, try your best to play cleanly and limit the amount of time unintentional notes resonate.

http://www.wildcat.com/Site/TechSupport/DecentLevels.htm


©1999 Wildcat Canyon Software, All Rights Reserved.

http://www.wildcat.com/Site/Homepage.htm