This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Need Help Desperately!

18 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

oh and i also don't have a mouse that i can switch to at the moment….sorry i forgot to include that in my last post, and about the mouse moving when i'm not touching it, usually it moves around when i'm just using it normally, like scrolling through a site or clicking on links and that sort of thing, and when it starts to go crazy i just let go of the mouse and wait til it's finished moving around.
danielle1314 – I'm back again.

One obvious step is to make sure your Logitech mouse driver is the latest.

Here's the link I found on Logitech's website:

You can find the latest version of Logitech MouseWare for your operating system here.  Please note:  If your device is not pictured, please select, 'Other'.


When you go there, and pick whichever mouse is yours, it would help me to know the specific product name associated with the picture you click on.

On the download page, be sure to select your operating system.

I'm reading through Logitech's support forum to see if anyone else has reported a similar problem.

Thanks
daveai
Hey Daveai, sorry it took so long to reply to the post, but i went to the website and updated my mouse driver. My mouse's name is a Logitech First Mouse Plus model# 1428, my mouse wasn't pictured on the download page so i selected other mice.
Hey Danielle 1314 – Thanks for the reply.

I found two more suggestions (via google and some reading) that are specific to your system. And, a general article on "possessed mice" with several suggestions related to software (malware and non-malware). I'll put the long article in the next post.


Okay, the drivers are uptodate.

I'd appreciate it if you'll do three more things for us:

1 – Confirm to me that your Win-ME is fully uptodate on critical patches. Just start Internet Explorer and select Tools > Windows Update, and follow the online instructions from there to check this out.

2 – Turn off Logitech SmartMove

From Computer Cops StartupList (the DB we use to id malware in your autostart-at-boot applications):

"EM_EXEC.EXE
Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled"


It can be disabled via "Control Panel > Mouse"

If you are using the Logitech Mouse, disable Smartmove in the Mouse Properties dialog box, as follows:

  1. Click the Start button, point to Settings, and then click Control Panel.
  2. Double-click Mouse.
  3. Choose the Settings tab in the Mouse Properties dialog box, and click the Advanced button.
  4. Clear the Smartmove check box.
  5. Close the Mouse Control Panel and restart Windows.


3 – Send me another HJT log.


And, please allow me to suggest some prevention steps to keep your computer clean and secure going forward. You may have already taken a few of the steps, but it never hurts to take a quick look :)

1 – Use an AntiVirus Software, and be sure you update it at least once a week. There are several very good free programs available. Grinler offers an outstanding overview at Virus, Spyware, and Malware Protection and Removal Resources

2 – To reduce re-infection potential for malware in the future, I strongly recommend installing three free programs: SpywareBlaster, SpywareGuard, and IE/Spyad.

3 – Use AdAware SE and Spybot S&D; to regularly to scan your system.

4 – It is very important to make sure that both Internet Explorer and XP are kept current with the latest critical security patches from Microsoft. To do this just start Internet Explorer and select Tools > Windows Update, and follow the online instructions from there.

5 – Consider using a Firewall. Just by using a Firewall in its default configuration can lower your risk greatly. Check out what Lawrence Abrams has to say at Understanding and Using Firewalls

An excellent overview is: So how did I get infected in the first place?. Be sure to visit the browser test link at the end of the article to really see how secure your system is!!

Thanks
daveai
I'm back :)

More on your "haunted mouse"…

This info should help guide your troubleshooting if the problem persists after turning off "SmartMove"

If it were me, I'd work the troubleshooting process in this order: check 10, check 8, check 4, do process of elimination in 7 (gives you 5 as well…but read the note there about "N's" and "U's" ), do defrag in 9.

Please let me know how it goes.

Thanks
daveai


From a long article found in this support thread www.experts-exchange.com.

I've underlined the relevant issues, and bolded my suggestions for you particular case.

Possessed Mouse
This week we had a tech support inquiry from a customer who was having problems with his mouse pointer. Sometimes it would get ‘stuck’, and other times it would seem to move of its own accord. Many of us have seen this at one time or another, and unfortunately there is no one single cause we can point to every time and say "this is it!" What we can do though is give you a list of 10 different causes, and one or another of these will be the culprit in about 98% of the cases.

1. Dirty Mouse –  (You took care of this already)

2. Virus Infection – (You took care of this already)

3. Driver Issues –  (You took care of this already)

4. Device Conflict – It is possible that a device that you just installed is causing some erratic conflict with your mouse. Try removing that last item you installed and see if the problem goes away. You can also check Control Panel/System/Device Manager and investigate any warnings or conflicts it shows.

5. Known Resident Programs – Be aware of how many resident programs and utilities are running in the background. There are start-up utilities that always load in your memory when you boot your system, and you add to that load when you start opening applications. If your system does not have enough available resources to manage all these apps running at the same time, it will surely affect your mouse movement. Another phenomenon that can occur is that you click away with nothing happening, and then while you are sitting back scratching your head, suddenly all the mouse clicks and keystrokes that you have made will execute in a second.  (These are your 'Running Processes' and O4 entries in HJT.  Look up the exe files at Computer Cops Startup List, and consider making all the "N's" "U's" non-autostart .  See suggestion 7 below)

6. Unknown Resident Programs – Viruses come under this category, and so do spyware and adware programs. Not only do these unwanted hitchhikers steal resources, they also steal information about your system and your web browsing habits that they send over the Internet to their evil masters. A few weeks ago we discussed how to detect and eliminate spyware and adware, and if you missed that tip you can find it on our website.  (You took care of this already)

7. Incompatibility Issues – There are a few utility programs that can affect mouse behaviour even when the system has enough resources. Examples are some anti-virus programs, firewall programs, and other utilities that get installed with particular pieces of hardware. Isolating the guilty program requires a process of elimination. You can use MSCONFIG (or sometimes the program itself) to prevent each program in turn from loading at Start-up. Once your mouse starts to move smoothly again, then you have found the bad boy. Go to that vendor’s website and search for patches or updates to fix the problem. (See the note in 5 above.  Do not disable auto-startt on any "Y's".)

8. Insufficient Memory – Many users have observed how much smoother everything runs after they have just added more RAM to their computer. As discussed in #5, memory gets used up as you open more applications. If you don’t have enough memory, your operating system starts to use more of your virtual (or scratch) memory on the hard drive. One clue that this is happening is that the LED indicator on the drive will be blinking furiously as the OS shuffles blocks of data in and out of RAM. This is called thrashing. Another indicator is that sometimes you’ll move the mouse and the mouse pointer won’t respond for a moment, or it will feel like it’s dragging its heels as you push it across the screen with effort. Memory is so inexpensive now, it’s not worth putting up with the aggravation of these little annoyances. My rule of thumb is: whatever Windows OS you are running, install 4X the amount of RAM that Microsoft says is the minimum requirement.  (I don't know how much memory your system has.)

9. Preventive Maintenance – There are a few routine actions to keep your system performing its best. One is to make sure you frequently monitor your start-up programs or run "MSCONFIG" to delete unnecessary programs at start-up. Defrag your hard drive at least quarterly. Monitor your system resources and see if you need to upgrade your computer. And please, be cautious in installing freeware or shareware that could also install hidden spyware.(Try the de-frag.)

10. Unstable OS – We had one system in our lab with very capable hardware (an AMD 2.6GHz Athlon with 726MB of DDR RAM) that performed very poorly with Windows 98SE. You could turn it on and leave for a coffee break, because it would take almost 5 minutes before that hourglass became a mouse pointer. Once up and running, the mouse would still freeze once in a while even if it was just using a simple email client program. Defragmenting the drive, closing all un-needed background programs, it seemed nothing would motivate this sluggish beast until we upgraded it to Windows XP Pro. The computer never had the mouse problem again and rebooting now takes less than 30 seconds to complete. Windows 2000 and XP have drastically improved their memory management system to better optimize your system resources when multiple apps are running. We grumble too at the cost and hassle of one upgrade after another, but sometimes newer really is better. (Please start Internet Explorer and select "Tools > Windows Update", and follow the online instructions from there.)

Ok, so i went and checked for critical updates on the windows site and it says there's none that i need, i also checked to see if the smart move was enabled, but it wasn't even turned on in the first place, here's my new HJT log as you requested

Logfile of HijackThis v1.98.2
Scan saved at 3:18:40 PM, on 8/31/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WIN98\SYSTEM\KERNEL32.DLL
C:\WIN98\SYSTEM\MSGSRV32.EXE
C:\WIN98\SYSTEM\mmtask.tsk
C:\WIN98\SYSTEM\MPREXE.EXE
C:\WIN98\SYSTEM\ZONELABS\VSMON.EXE
C:\WIN98\EXPLORER.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\WIN98\SYSTEM\MSTASK.EXE
C:\WIN98\SYSTEM\RESTORE\STMGR.EXE
C:\WIN98\TASKMON.EXE
C:\WIN98\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\WIN98\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\OSA.EXE
C:\PROGRAM FILES\SPYWAREGUARD\SGBHP.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\MOZILLA.ORG\MOZILLA\MOZILLA.EXE
C:\MY DOCUMENTS\DANIELLE'S STUFF\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\PROGRAM FILES\SPYWAREGUARD\DLPROTECT.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WIN98\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ScanRegistry] C:\WIN98\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WIN98\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [EPSON Stylus C84 Series] C:\WIN98\SYSTEM\E_S4I2D1.EXE /P23 "EPSON Stylus C84 Series" /O5 "LPT1:" /M "Stylus C84"
O4 - HKLM\..\Run: [EPSON Stylus C84 Seri (Copy 2)] C:\WIN98\SYSTEM\E_S4I2D1.EXE /P30 "EPSON Stylus C84 Seri (Copy 2)" /O5 "LPT1:" /M "Stylus C84"
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [*StateMgr] C:\WIN98\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [TrueVector] C:\WIN98\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\mozilla.org\Mozilla\Mozilla.exe" -turbo
O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O9 - Extra button: ICQ 4.1 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - http://www.stopzilla.com/_download/Auto_Installer/dwnldr.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab




I also started to do some of the troubleshooting you suggested, but for #10 does it mean that i should try to upgrade my system to windows XP if possible? like could thre reason for my mouse malfunction be because i'm running in windows ME?
Thanks for the log. I'll look through it this afternoon and get back to you. Thanks for the update on critical updates and "SmartMove." Two more candidates eliminated! With respect to #10…I'm skeptical that your problem is Windows ME per se. There must be a jillion people running ME, and every one of them uses a mouse of some kind or other. My guess is there may be some conflict or other among the various programs that run automaticlly on your system. It would be interesting to see if the problem persists if you swapped out your Logitech mouse for another generic one and used the vanilla Windows drivers. (If it works, this is a $5 fix instead of a $100+ for upgrading to XP.) I don't know if the Logitech mouse itself would work with bvanilla Windows drivers, but that might be an interesting angle too. But, I'm sure this whole thing is becoming "entirely too interesting" for you by now. :) I'll repost later after checking the log. daveai
I'm back.

Your logfile is free of any detectable spyware. And, most of your O4's (auto-starts) are required…more Y's than U's and N's.

Here is one obvious O4 to change:

Office Startup Asistant is an optional item that if checked, will eliminate a known resource hog. You will still be able to start Office components from the Start menu. This is the item to fix in HJT:
O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE


Please let me know how the trouble shooting goes. Next post, tell me how much memory you are running.

daveai
Ok….Hi, my computer is running with 256 memory and i fixed the Office startup in my hijack list….the mouse still seems to be acting up though….there has to be a program on my computer that's causing a conflict but i just can't seem to put my finger on what one it is… :scratch: i'm going to try changing out the mouse for an old one i just found to see if it stops the trouble at all…..i'll get back to you later on to tell you how it goes….thanks for the help so far!
Hey! since my last post, my mouse has still been going haywire, so i decided to perform a system restore to about 3 weeks ago, hoping that maybe it would help solve the problem, seems like it's still messing up, so i've decided that maybe i'm going to try to Update to windows XP and hopefully that will help solve my problem, i'll write back once i've finished the update and tell you how it went! Danielle1314
Glad we could be of assistance. This topic is now closed. If you wish it
reopened, please send us an email (Click here to email) with a link to your thread.


Donations in support of this Web Site are always appreciated

Do not bother contacting us if you are not the topic starter. A valid,
working link to the closed topic is required along with the user name used.
If the user name does not match the one in the thread linked, the email will be deleted.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI