[rookie321]

Help, my mum's PC has come to life. It moves icons, open pop up menus eg right click on desk top as if trying to change settings.

I've tryed to run a scan for virus etc but it will not let me it just continues opening and moving things, during this time the monitor for CPU usage fluctuates between approx 80% to 100%.

Any ideas?

I'm desperate.

Oh yeh

Her PC is running on Win XP Home edition, has MS beta version of Adware detection/removal (sorry I cannot remember name), Norton anti virus etc

Edited by rookie321, 01 June 2005 - 03:23 AM.

[Advertisements]

The FIRST THING I WOULD DO, is pull the ethernet plug. Run a virus scan while it isn't connected to the internet or network. Sounds like you have a server for a remote connection running on your machine. Someone is tampering with your desktop. Some common forms of this type of attack comes from programs like Netbus (very old one, picked up by virtually all virus scanners) or maybe a friend playing tricks on you and installing VNC or something like it? Has anyone else had access to your computer recent to this happening? Have you installed any new programs?

Edited by Greazy, 01 June 2005 - 03:22 AM.

[Greazy]

The FIRST THING I WOULD DO, is pull the ethernet plug. Run a virus scan while it isn't connected to the internet or network. Sounds like you have a server for a remote connection running on your machine. Someone is tampering with your desktop. Some common forms of this type of attack comes from programs like Netbus (very old one, picked up by virtually all virus scanners) or maybe a friend playing tricks on you and installing VNC or something like it? Has anyone else had access to your computer recent to this happening? Have you installed any new programs?

Edited by Greazy, 01 June 2005 - 03:22 AM.

[kool808]

yeah I definitely agree with you, somebody or by mistakenly had installed a host program enabling an attacker from a remote area to have total access with your desktop. Greazy is correct, you should immediately disconnect from the internet, pull off any connection you had. Then run a trojan scanner.

download TDS from another PC then install it in your system then run a scan.

uninstall something related:
* VNC
* RAdmin
* Netbus
* BackOrifice

Edited by kool808, 01 June 2005 - 04:21 AM.