ghost in the machine

[artpego]

i have never seen this before, i am really in a kind of shock. i get this box in today that a client said had "missing *.VXD files. i take the clients compter in and start it up there is not even the hint of a problem. the client says "that's impossible, it has given me that error for the past 4 months!!!". he leaves it with me and i run sisoft sandra just to put it through a few tests. nothing at all. i reboot the machine a few times and then the story gets really weird. i start working on a different clients computer and turn around and see that his box is displaying the run command (windows 98se).. i think it is kind of od; however, i just pass it off as something i did. i look back around 2 minutes later and the thing has brought up the crontrol panel and the mouse is in a different location. i still blow this off as chance... this part is the one that really got to me though... i look over and actually SEE the cursor moving and then it starts a program in windows i have never seen in my years (yes, maaaany years) of experience. it almost seems to be compiling something... the mchine power3ed down the monitor 5 times in a row (no power saving options enabled). evry time it powered down the monitor, the screan came back up within 5 seconds. i even disabled the onboard serial ports and installed a harware (ISA) serial port card and it does the same thing. the same mouse and keybord works perfect on my other boxes!!! this has me really freaked out, has anyone had this happen to them?!? (by the way, i have seen about 20 different programs run so far on this box without ANY user intervention) yes, i run a virus check and i check the ENTIRE registry for anything that could be out of whack... <img src="confused.gif" border="0">

[Major Kong]

Possessed Power Supply or Poltergeist!

[Danger]

I don't remember the site where I saw this, but Maybe someone else will. I was browsing the web once, and came across a web page that had 'practical jokes' that U can play on peoples computers. It had all kinds of downloads 4 programs that do different things, etc. Anyway, I recall seeing one that was supposed to spontaneousely 'launch' windows programs, close windows, execute windows commands, etc. It sounded exactly like what U described. I didn't ever use it or any other programs from that site, so I don't know how to get rid of it. anyway, I hope this helps.

[jay015]

You might find the prank at one of these sites! There are some good one's there. Have fun!
<a href="http://www.geocities.com/netsur24/gags.html" target="_blank">http://www.geocities.com/netsur24/gags.html</a>
<a href="http://www.computerpranks.com/" target="_blank">http://www.computerpranks.com/</a>
<a href="http://www.rjlsoftware.com/software/entertainment/default.shtml" target="_blank">http://www.rjlsoftware.com/software/entertainment/default.shtml</a>

[mahdi]

Is it on a network at all? Could be a Trojan. I've only heard of this stuff when a backdoor has been accessed. Otherwise...Format/Re-install

[Deity]

If the format and reinstall don't work, I might suggest a priest and some holy water.