Strange Rap Song That Comes From My Speakers

[Whitman82]

I've been hearing the weirdest thing coming from my computer lately. It sounds like a part from a rap song. Not liking rap myself, I couldn't tell you what song it is. It seems to be a virus or spyware, something like that. But i ran my virus software and my spyware remover and I still hear this gay sound all the time. I'll be sitting at my desk doing homework and it just blasts from my speakers at random. Anyone else having this problem?

[HangFire]

Make sure you scan with the latest versions of your virus scanner and spyware remover, unless they already were up to date when you scanned.

Then, assuming your on a windows box, open up the task manager and look for anything that shouldn't be there.

Check what boots up with Windows using msconfig (start -> run -> msconfig). Check both the services and the startup tabs, and take off whatever looks bad. Note that most things in the "services" tab are essential for XP to run, despite their suspicious names.

[Pierre-Marie Baty]

man that is a funny way to do ads

Click on the start button then "run" and type in "regedit". Browse to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run and tell us what you see there.
Do the same for HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run

Most spywares hide here.

[von Ryan]

That is not new, I've hear of a virus that says "You're ugly", "I'm eating your data", "PLEASE, STEP AWAY FROM THE COMPUTER!", among other things... I think that there is one that allows hackers to see your webcam (!!)...

[Whitman82]

In HKEY_CURRENT_USER i've got default), AIM, ctfmon.exe, Jet Detection, MSMSGS, MyWebSearch Email Plugin, Steam, and Tsa2.
In HKEY_LOCAL_MACHINE i've got: (defualt), the next one has a dash and 2 squares for a name and it's exe is called pylvdfbg.exe, next is iTunesHelper, logitech utility, mcagentexe, mcupdateexe, mywebsearch, nerofiltercheck, nvcpldaemon, nvmediacener, nwereboot, nwiz, quicktime task, updreg, viruscan online, vsochecktask, and windows cotrol ad.

Any of those look suspicious?

[dub]

I think Tsa2.exe is a trojan/virus try deleting it from the registry & then do a search for the file and delete all occurrences on disk.
Hope this helps to fix the problem
Dubb

[Whitman82]

I you sure tsa2 is nothing important?

[Pierre-Marie Baty]

What is Jet Detection ?
What is MyWebSearch ?
What is TSA2 ?
What is that pylvdfbg.exe ?
What is Windows Control ad ?

All these look suspicious to me. Do a search for all the .exe files they point to, and check several things:
1. the size (most spywares/worms are below 100kbytes, to be downloaded easily). If it's around 60-80kb, it's suspicious.
2. the editor (right-click, properties, "version" tab). If it has none, it's suspicious.
3. the contents; hex edit it and look for character strings. If you find either an URL, an email address or a reference of explicit function calls to the network API, it's VERY suspicious.

*edit*
or if you don't want to bother, download this:
http://www.safer-networking.org/en/download/index.html
it'll get rid of a good bit already.

[sfx1999]

Also, you can try Ad-Aware, and Trend Micro's free online virus scanner, along with Microsoft's new spyware catching tool.


Ad-Aware
Trend Micro's Housecall

[Whitman82]

Doesn't windows xp have its own spyare and virus scan now? If so, how do i use them?