Strange virus, thing

[Badog Vi Britania]

so for a while now a random radio will play through my speakers, and when i check my sound manager it says that this raid is name unavailable, but the worse part is whenever this radio plays is slows my internet tremendously.

it also will randomly restart my computer

any idea on what this might be? and how to fix it.

[Indigo]

The first step should be...

www.malwarebytes.org/

Download this. Awesome free anti-virus program. Just run a fast (or is it quick?) scan, and after 10-20 minutes it should finish, and will most likely find the problem and quarantine. Then just restart your computer and you should be good to go.

If the problem persists, just post here again... I've got your back. Virus busting time!

[Badog Vi Britania]

i actually already have that, still didnt help,

HOWEVER. everytime i scan with with malwarebytes it says i have 2 Trojans

and I mean EVERY time i scan it would always say 2 Trojans

so this might be a nice little clue or something

[Indigo]

Have you tried scanning and quarantining in Safe Mode? That typically works best. I believe you just press F8 while the computer is starting up to go into Safe Mode...

Again, if that fails, then it's really time to get into this.

[Badog Vi Britania]

Ive tried that as well, still 2 trojans

this is a very odd virus... seeing as ive found no information on the interwebz

[Indigo]

It is strange... Do you typically use a radio to stream local stations?

The only next step I can think of is something in the registry... Try cleaning it up with:
www.piriform.com/ccleaner

And maybe even this, never tried it but it's more geared for registry anti-malware rather than just cleaning:
support.kaspersky.com/faq/?qid=208280684

Of course, you should run both with Safe Mode.

And on a side note, a completely different solution... Do you have restore points? If you remember around when the problem started happening, you could just try to restore the computer back to before it happened.

More edit: I would actually try this over the second link I just sent.
download.cnet.com/MV-RegClean/3000-2096_4-10712714.html

[Badog Vi Britania]

the strangest thing is, i never EVER used a radio.

[Indigo]

I found something on Google... Someone had a similar problem, and they fixed it with AVG Antivirus:
free.avg.com/us-en/homepage

It was four years ago, though... Still, I'm not sure what's going on, but let me know if anything works out for you. I'd also suggest to let Malwarebytes do a full scan, though. It may take a few hours, but it'll search the entire system, so it might find another trojan that keeps replacing the others.

EDIT: Check this... Same exact problem.
www.sevenforums.com/sound-audio/93651-help-music-playing-background-but-no-music-program-open.html

The guy got it fixed with Malwarebytes, though... So you should definitely try a full scan. But, you should also check what was said about the speaker interference and the Firefox add-on thing (which I highly doubt)

[Badog Vi Britania]

k full scanned with malwarebytes, and avg and ccleaner.

no success

[Indigo]

The radio stuff doesn't happen when you start up with Safe Mode, right?

Have you pressed ctrl+alt+delete and checked task manager? There's quite a lot to check, but you really should check the Applications, Processes, and Services tabs, to try and find if there are any programs that may seem related to the issue.

Actually, for services, you might want to go to Start > Run > *type in services.msc*, and check through the list there, as they have full names and descriptions there.

See if you can find any odd program or process (programs you've never heard of, processes with suspicious names, I know tons of them look suspicious if you're not familiar, but still, you should search up the ones you find suspicious) and try disabling some services that may have to do with internet radio, or file-sharing (just be careful, you should look a service up on Google first, since you don't want to break any legit services).

Yeah, going more manual this time, since automatic programs aren't cutting it... I'm starting to think it's a program/process/service that's passing off as a safe program.

EDIT: This post is kinda lolzy. Maybe I'm the only one who'll notice, but I was writing a government essay just before posting here, so this post has a sort of serious essay tone, rather than my typical post... Welp, back to essay.

[Badog Vi Britania]

it doesnt happen when safe mode is on

[Indigo]

Definitely sounds like a third party program then... Go on with what I mentioned in my last post. Also, in Processes, pay closest attention to the processes with the highest Memory usage. Since it's slowing down the computer, it's bound to be something with really high memory usage.

And here's the last program I'll recommend for now, one of my favorites that I use all the time. Not exactly an anti-virus or anything, but it's basically like a task manager that picks up more applications, and closes them better/faster. It should list just about every program running, unlike task manager.

www.docsdownloads.com/enditall-1.htm

It does look a bit old, but it's really effective (even just for games, when sometimes they freeze up and even task manager won't close them). You can try killing off any programs on the list that you think might have anything to do with the strange radio playing.

EDIT: Found another related issue. This was their solution:
"A service called "FLEXnet Licensing Manager for Adobe Products" when disabled, removed the "name not available" volume mixer entry and stopped the unwanted internet radio stream."

So try disabling or shutting off any program relating to Adobe products... You'll most likely find it where I mentioned earlier, the Start > Run > services.msc list, if that's your problem.

EDIT mor: Also check for a 'CaptureDeviceService,' apparently related to this 'Intervideo' program.

EDIT mors: Try disabling anything you find relating to webcams.

[Badog Vi Britania]

I see nothing haveing to do with webcams, and the only adobe thing is flash player,

*sigh* this... whatever it is is really demoralizing me. im half tempted to restart my comp just to be done with it.

EDIT: i also see nothing on FLEXnet

EDIT: i forgot to mention my hypothesis on how this nasty thing got into my comp, it started shortly after i installed the windows malware removal tool (which showed up randomly) so im assuming that that "windows" update was actually this
"thing"

[Indigo]

Oh, that... That happened to me once. The end issue was something different, but it started when some 'official' windows anti-virus thing wanted to install, and it installed even after I clicked no, then my computer got all slow with constant ads and stuff...

Well, crap, I'm not sure what else to do now... Without being directly there it's harder to find the problem, and you've scanned/searched everything I know of where the problem could be...

Only thing is, I see people recommending this a lot:
www.superantispyware.com/

Lots of people recommended full scanning with Malwarebytes, and then with that ^. If this doesn't fix the problem, you might have to go to a tech forum... Which is usually a painful process of running scans and copying huge texts and stuff, but a real techie will be able to find and fix the problem for sure.

If you don't have much to lose, you could just backup all of your files and just reformat your computer...

[Badog Vi Britania]

*sigh* i give up

malwarebytes failed

AVG failed

super antispyware failed

and every other "rememdy" has failed.

[Indigo]

Well that's just ridiculous... Everywhere I've seen the problem was fixed with Malwarebytes... I'm not sure what else is left. Maybe go to Device > Manager > Sound, video, and game controllers, and check the speakers properties. Or Control Panel > Programs (Uninstall a Program), and check and uninstall any program you don't know of.

Besides that... I'm really at a loss here now, sorry if it doesn't work out. Though you can go to a computer forum now and list the few dozens of things you've tried to no avail so they (hopefully) won't make you go through a bunch of tedious stuff.

[Badog Vi Britania]

I actually had a tech guy try to figure this out once. It stumped him.

anyway i have a bit more info

> whenever it restarts my comp it says that it was by bluescreen.

> the "radio" thing dissapears an reappears randomly which meens i have to re mute it

> it plays older broadcasts, i believe it mentioned tom cruise's couch incident (?) once if that helps in any way

> the 2 trojans that malwarebytes finds are called svchost.exe, one is found in a file and the other is found in the memory process (keep in mind that this one was off the top of my head so it may not be accurate)

> the "radio" is not consistent, it changes often


if these help any way let me know

[Death Eye]

Nov 15, 2012 3:37:37 GMT Badog Vi Britania said:

> whenever it restarts my comp it says that it was by bluescreen.

Sounds like you're running out of RAM. Presumably because this "radio" is consuming all of it. Increasing the amount of hard drive space reserved for virtual memory should at least delay the blue screens, but it'll run a lot slower when it starts using the virtual memory, apparently.

> the 2 trojans that malwarebytes finds are called svchost.exe, one is found in a file and the other is found in the memory process (keep in mind that this one was off the top of my head so it may not be accurate)

Svchost.exe? You've got a problem. That's an important system file, and by the sound of it there's something wrong with it on your computer, since last I checked important system files aren't normally viruses. If you have the install disk for whichever Windows you're using, you should be able to start in Safe Mode, access the correct svchost.exe on the disk, and replace the one that's currently on your computer, and I'm willing to bet that'll solve the issue.
...I really have no idea, but if that file's the only problem it would make sense for that to be all you need to do.

[Indigo]

From here: www.bleepingcomputer.com/forums/topic458379.html

Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!
Be sure to download TDSSKiller.exe (v2.4.0.0) from Kaspersky's website and not TDSSKiller.zip which appears to be an older version 2.3.2.2 of the tool.

Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.
If TDSSKiller does not run, try renaming it.
To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.
Click the Start Scan button.
Do not use the computer during the scan
If the scan completes with nothing found, click Close to exit.
If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).
Copy and paste the contents of that file in your next reply.

This should work... The guy had basically the same issue with svchost trojans, and after running TDSSKiller the problem fixed. Then run Malwarebytes again for good measure.

[Badog Vi Britania]

okay because this slows my internet, my friend theorized that this radio is actually an internet stream from the trojan, which would make sense because it slows my internet so bad. anything on this?