Computer(s) keep trying to crash on me.

It seemed to start about 6 months after I bought a new computer from
infotech. It is running XP pro, has an MSI motherboard and cable modem. I was
running Defender antivirus and firewall, but someone was able to disable the
firewall and antivirus (from a remote location) without me noticing. I
usually turn the computer off at night, or if I won't be using it for a
while, but evidently the computer doesn't need to be on to access it
remotely. Anyway, I turned it on one morning and noticed the display was
different, the mouse and keyboard both had their drivers removed and all my
email was gone. Shortly after that you could hear the harddrive running like
crazy. I assumed it was a virus, so i tried going into msconfig to turn most
of the stuff off. I noticed windows explorer was running, along with remote
desktop and a few other web-publishing programs most of which I have never
used. When I attempted to restart the computer, all I got was a "no operating
system found" error. I have lots more info, but no time right now to go into
detail. If anyone has had a similar problem or has any suggestions, I would
appreciate it. Thanks!!!!

Frank
Thu Jul 06 18:49:02 CDT 2006

"Timmythetooth" <Timmythetooth@discussions.microsoft.com> wrote in message
news:7F2C7E3E-CF29-49E2-BCFC-30549F0AD898@microsoft.com...
> It seemed to start about 6 months after I bought a new computer from
> infotech. It is running XP pro, has an MSI motherboard and cable modem. I
> was
> running Defender antivirus and firewall, but someone was able to disable
> the
> firewall and antivirus (from a remote location) without me noticing. I
> usually turn the computer off at night, or if I won't be using it for a
> while, but evidently the computer doesn't need to be on to access it
> remotely. Anyway, I turned it on one morning and noticed the display was
> different, the mouse and keyboard both had their drivers removed and all
> my
> email was gone. Shortly after that you could hear the harddrive running
> like
> crazy. I assumed it was a virus, so i tried going into msconfig to turn
> most
> of the stuff off. I noticed windows explorer was running, along with
> remote
> desktop and a few other web-publishing programs most of which I have never
> used. When I attempted to restart the computer, all I got was a "no
> operating
> system found" error. I have lots more info, but no time right now to go
> into
> detail. If anyone has had a similar problem or has any suggestions, I
> would
> appreciate it. Thanks!!!!

On the one hand, Windows Defender is not an anti-virus, it's anti-spyware.
On the other hand, Windows Defender is a beta (unfinished) program and does
not provide the protection of some more established programs.
On the gripping hand, you caught a virus. So How Did I Get Infected Anyway?
http://www.wilderssecurity.com/showthread.php?t=27971

I'm afraid that in your case it's time to format and start over, loading the
operating system and then the programs you want. It would probably be a
good idea to pay an expert to do this, Big Store USA does not qualify as an
expert.

--
Frank Saunders, MS-MVP OE/WM
Reply in newsgroup
"They who would give up an essential liberty for temporary security, deserve
neither liberty or security"

Ted
Thu Jul 06 18:49:59 CDT 2006

Ask your computer company how to restore your computer to the way it was
when it was delivered to you. This is accomplished with recovery CDs or
a recovery partition on the hard drive.

Doing this will erase everything on your hard drive, so be sure to
backup all folders and files that you want to keep.

Don't let this happen again. Start here:

"How to Protect Your PC With Security Essentials"
http://www.microsoft.com/athome/security/protect/windowsxpsp2/Default.mspx
---
Ted Zieglar
"Backup is a computer user's best friend."

Timmythetooth wrote:
> It seemed to start about 6 months after I bought a new computer from
> infotech. It is running XP pro, has an MSI motherboard and cable modem. I was
> running Defender antivirus and firewall, but someone was able to disable the
> firewall and antivirus (from a remote location) without me noticing. I
> usually turn the computer off at night, or if I won't be using it for a
> while, but evidently the computer doesn't need to be on to access it
> remotely. Anyway, I turned it on one morning and noticed the display was
> different, the mouse and keyboard both had their drivers removed and all my
> email was gone. Shortly after that you could hear the harddrive running like
> crazy. I assumed it was a virus, so i tried going into msconfig to turn most
> of the stuff off. I noticed windows explorer was running, along with remote
> desktop and a few other web-publishing programs most of which I have never
> used. When I attempted to restart the computer, all I got was a "no operating
> system found" error. I have lots more info, but no time right now to go into
> detail. If anyone has had a similar problem or has any suggestions, I would
> appreciate it. Thanks!!!!

Phillip
Fri Jul 07 09:14:24 CDT 2006

"Timmythetooth" <Timmythetooth@discussions.microsoft.com> wrote in message
news:7F2C7E3E-CF29-49E2-BCFC-30549F0AD898@microsoft.com...
> It seemed to start about 6 months after I bought a new computer from
> infotech. It is running XP pro, has an MSI motherboard and cable modem. I
> was
> running Defender antivirus and firewall, but someone was able to disable
> the
> firewall and antivirus (from a remote location)

Not likely.

without me noticing. I
> usually turn the computer off at night, or if I won't be using it for a
> while, but evidently the computer doesn't need to be on to access it
> remotely.

Not possible. It has to be on.

> Anyway, I turned it on one morning and noticed the display was
> different, the mouse and keyboard both had their drivers removed and all
> my
> email was gone.

Sounds like this is a fake post to me. These are not the type of things
Viruses & Spyware do or even target, and even if some did, just one wouldn't
do all that. You would have to have several, and not only that, you would
need to get just the exact several that did these particular things,...and
I've heard of none that target those things.

> Shortly after that you could hear the harddrive running like
> crazy. I assumed it was a virus, so i tried going into msconfig to turn
> most
> of the stuff off. I noticed windows explorer was running, along with
> remote
> desktop and a few other web-publishing programs most of which I have never
> used.

So you never used Windows Explorer? This sounds more like a fake post as I
go along.


--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

levinson_k
Mon Jul 10 15:08:03 CDT 2006


"Frank Saunders, MS-MVP OE" wrote:

> "Timmythetooth" <Timmythetooth@discussions.microsoft.com> wrote:
> > remotely. Anyway, I turned it on one morning and noticed the display was
> > different, the mouse and keyboard both had their drivers removed and all
> > my
> > email was gone. Shortly after that you could hear the harddrive running
> > like
> > crazy.

> I'm afraid that in your case it's time to format and start over, loading the
> operating system and then the programs you want.

This sounds to me like it could be a physically failing hard drive, rather
than a virus. Re-installing Windows will help if the hard drive is
physically sound. I would want to use a Windows 98 boot floppy disk or USB
drive from www.bootdisk.com to boot the computer and run a full SCANDISK,
testing the hard drive surface for bad sectors. If the SCANDISK fails to
complete, the hard drive probably needs replacing. If the system is less
than 3 years old, it could be under some kind of manufacturer's warranty.

-------------------------
Microsoft Security FAQ:
http://www.securityadmin.info

Timmythetooth
Tue Jul 11 11:24:02 CDT 2006


True story!!! If It were a fake post I would have been more creative. Yes
I've used Explorer, but not the web publishing programs. I think you are
probably unimformed of the capabilities of computers. They do NOT need to be
turned on to be accessed from a remote location, only some sort of power
source. I have had 4 computers crash within the last month, all of which
worked fine before. Something or someone is installing the programs
(remotely) that basically set the computer to slowly "self destruct" after
all information and original programs are removed. Trust me, Microsoft is not
disclosing all the facts!!!!!

with "Phillip Windell" wrote:

> "Timmythetooth" <Timmythetooth@discussions.microsoft.com> wrote in message
> news:7F2C7E3E-CF29-49E2-BCFC-30549F0AD898@microsoft.com...
> > It seemed to start about 6 months after I bought a new computer from
> > infotech. It is running XP pro, has an MSI motherboard and cable modem. I
> > was
> > running Defender antivirus and firewall, but someone was able to disable
> > the
> > firewall and antivirus (from a remote location)
>
> Not likely.
>
> without me noticing. I
> > usually turn the computer off at night, or if I won't be using it for a
> > while, but evidently the computer doesn't need to be on to access it
> > remotely.
>
> Not possible. It has to be on.
>
> > Anyway, I turned it on one morning and noticed the display was
> > different, the mouse and keyboard both had their drivers removed and all
> > my
> > email was gone.
>
> Sounds like this is a fake post to me. These are not the type of things
> Viruses & Spyware do or even target, and even if some did, just one wouldn't
> do all that. You would have to have several, and not only that, you would
> need to get just the exact several that did these particular things,...and
> I've heard of none that target those things.
>
> > Shortly after that you could hear the harddrive running like
> > crazy. I assumed it was a virus, so i tried going into msconfig to turn
> > most
> > of the stuff off. I noticed windows explorer was running, along with
> > remote
> > desktop and a few other web-publishing programs most of which I have never
> > used.
>
> So you never used Windows Explorer? This sounds more like a fake post as I
> go along.
>
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>
>

B
Tue Jul 11 12:28:41 CDT 2006

On Tue, 11 Jul 2006 09:24:02 -0700, Timmythetooth
<Timmythetooth@discussions.microsoft.com> wrote:

>
>True story!!! If It were a fake post I would have been more creative. Yes
>I've used Explorer, but not the web publishing programs. I think you are
>probably unimformed of the capabilities of computers. They do NOT need to be
>turned on to be accessed from a remote location, only some sort of power
>source.

Wake-on-LAN ?

>I have had 4 computers crash within the last month, all of which
>worked fine before. Something or someone is installing the programs
>(remotely) that basically set the computer to slowly "self destruct" after
>all information and original programs are removed.

Like others have said, it's time to start from scratch (do a full
recovery). Then make sure you have the firewall turned on (I don't
recall if you mentioned what version of XP you were running, but I
assume it has a firewall). Then go to windows update and get all
updates.

Then, unless you unstall something suspecious or otherwise behave
irresponsible, it would not be likely that someone would gain access
from outside.

Make sure also that you are the only one using it.

>Trust me, Microsoft is not disclosing all the facts!!!!!

Don't get paranoid ;-)

>
>with "Phillip Windell" wrote:
>
>> "Timmythetooth" <Timmythetooth@discussions.microsoft.com> wrote in message
>> news:7F2C7E3E-CF29-49E2-BCFC-30549F0AD898@microsoft.com...
>> > It seemed to start about 6 months after I bought a new computer from
>> > infotech. It is running XP pro, has an MSI motherboard and cable modem. I
>> > was
>> > running Defender antivirus and firewall, but someone was able to disable
>> > the
>> > firewall and antivirus (from a remote location)
>>
>> Not likely.
>>
>> without me noticing. I
>> > usually turn the computer off at night, or if I won't be using it for a
>> > while, but evidently the computer doesn't need to be on to access it
>> > remotely.
>>
>> Not possible. It has to be on.
>>
>> > Anyway, I turned it on one morning and noticed the display was
>> > different, the mouse and keyboard both had their drivers removed and all
>> > my
>> > email was gone.
>>
>> Sounds like this is a fake post to me. These are not the type of things
>> Viruses & Spyware do or even target, and even if some did, just one wouldn't
>> do all that. You would have to have several, and not only that, you would
>> need to get just the exact several that did these particular things,...and
>> I've heard of none that target those things.
>>
>> > Shortly after that you could hear the harddrive running like
>> > crazy. I assumed it was a virus, so i tried going into msconfig to turn
>> > most
>> > of the stuff off. I noticed windows explorer was running, along with
>> > remote
>> > desktop and a few other web-publishing programs most of which I have never
>> > used.
>>
>> So you never used Windows Explorer? This sounds more like a fake post as I
>> go along.
>>
>>
>> --
>> Phillip Windell [MCP, MVP, CCNA]
>> www.wandtv.com
>>
>>
>>

Phillip
Thu Jul 20 17:41:41 CDT 2006

"B. Nice" <b__nice@hotmail.com> wrote in message
news:m6n7b21l391reodk3vgdt7gs7m1r7ennlk@4ax.com...
>>I've used Explorer, but not the web publishing programs. I think you are
>>probably unimformed of the capabilities of computers.

Oh,...I suppose that is true I guess,....
https://mvp.support.microsoft.com/profile=79898b73-983c-4c1e-a94c-83e0e3d4069a

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

Phillip
Thu Jul 20 17:39:11 CDT 2006

"B. Nice" <b__nice@hotmail.com> wrote in message
news:m6n7b21l391reodk3vgdt7gs7m1r7ennlk@4ax.com...
>>True story!!! If It were a fake post I would have been more creative. Yes
>>I've used Explorer, but not the web publishing programs. I think you are
>>probably unimformed of the capabilities of computers. They do NOT need to
>>be
>>turned on to be accessed from a remote location, only some sort of power
>>source.
>
> Wake-on-LAN ?

But then it would now be "on" and no longer "off" and he would come home and
find it running.

I'm still not convinced that this isn't someone just screwing with us for
"kicks".

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

Timmythetooth
Thu Aug 03 16:43:01 CDT 2006

Phillip, are you familiar with broadcast capabilities? The reason i ask is
because I do recall seeing "Broadcast" and local tv station type information
on some of the logs that were saved on the computer before it crashed. i may
even have something saved on disk that refers to broadcasting. I believe the
possibililty of broadcast signals accessing computers (that have the
necessary drivers and programs installed). Do you have any info to add?
thanks, Tim

"Phillip Windell" wrote:

> "B. Nice" <b__nice@hotmail.com> wrote in message
> news:m6n7b21l391reodk3vgdt7gs7m1r7ennlk@4ax.com...
> >>I've used Explorer, but not the web publishing programs. I think you are
> >>probably unimformed of the capabilities of computers.
>
> Oh,...I suppose that is true I guess,....
> https://mvp.support.microsoft.com/profile=79898b73-983c-4c1e-a94c-83e0e3d4069a
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>
>