up vote 4 down vote favorite
share [g+] share [fb]

I'm having a virus currently with my computer that needs fixing.

I'm hearing a voice saying "Congratulations, you won!" at seemingly random intervals from my computer.

I'm saying at random because sometimes it can be 5 times an hour, then the next time it can be days before I hear it again.

Scanned my whole computer for viruses with AVG and Spybot, with no results.

Google sent me back results 4 years old, and that did things with the computer I wouldn't trust random strangers to inform me about.

link|improve this question
1  
> Google sent me back results 4 years old “Years”‽ On the very first page, there are three search results that are only three months old (some new virus), in which the issue was resolved. – Synetech Feb 22 at 2:48
1  
Seems that I failed at choosing some keywords. – Fredy31 Feb 22 at 3:08
7  
This isn’t a virus. You won. – Konrad Rudolph Feb 22 at 9:32
feedback

8 Answers

up vote 8 down vote accepted

It could be a webpage you are on having an ad , possibly a popunder - if you're using firefox or chrome get adblock plus. If you're running windows 7, keep the audio mixer open to see what process is creating the sound.

link|improve this answer
I'm already equipped with Adblock plus, and the sound already happened while no browsers had open windows. So I have to discard this option. – Fredy31 Feb 22 at 3:40
Well, after close inspection, it seems that it's coming on most of the time when I'm watching Youtube Videos... and the audio mixer sees the sound as coming from Flash Player. – Fredy31 Feb 23 at 2:36
which backs up part of my original hypothesis, that its a rogue ad. If its persistant between boots, i'd take a look at my startup list with autoruns to try to see what suspecious things are there – Journeyman Geek Feb 23 at 8:05
I'll confirm this tonight, but yesterday, I uninstalled Chrome (My main browser where I heard the sound) and reinstalled it. I continued watching YT videos without hearing the sound at all. Let's see if it did fix it. – Fredy31 Feb 23 at 15:19
Seems it fixed it. Thanks guys. So I just had to reinstall chorme (and thus, my flash player) and its gone. For the moment. If it just went sleeping to pop back up, I'll keep you updated. – Fredy31 Feb 24 at 21:41
show 1 more comment
feedback
up vote 1 down vote

Use Norton Power Eraser with root-kit option enabled. Its free & portable.

link|improve this answer
1  
Tried it, lets wait a couple of days if it fixed something (Because yes, it found something.) – Fredy31 Feb 22 at 3:09
Seems it didn't work, I just heard it again. Thanks anyway. – Fredy31 Feb 22 at 22:44
Then, its not virus problem.. – Sachin Shekhar Feb 23 at 6:21
Not all viruses can be detected (yet) =p Yay for evolution! – ekaj Feb 24 at 17:48
@ekaj Its a 4 year old problem (according to question).. So, its unlikely that it can't be detected by Norton Power Eraser.. – Sachin Shekhar Feb 24 at 19:13
show 1 more comment
feedback
up vote 1 down vote

Run the Task Manager, and check to see if there any iexplore.exe processes running in the background. Some adware will open iexplore without a window and you'll hear whatever sound the webpage is playing.

As for removing it, there are a variety of tools, but personally I use a combination of Autoruns and Process Explorer.

link|improve this answer
feedback
up vote 1 down vote

Run MSconfig and under the 'startup' tab see if there is anything unusual starting up when your computer is powered on. This would allow it to survive a reboot / other things.

link|improve this answer
feedback
up vote 1 down vote

This is coming from an ad served inside of Flash. At least, I get exactly the same thing and I know with certainty that it comes from my use of tinychat (to watch a friend's puppy during the day).

In my case, the ad is served as part of the tinychat flash app. I don't use adblock but I do use flashblock. Doesn't help here because I need to allow the specific tinychat flash app in order for tinychat to work, and it's that app that serves the ad, too.

I haven't seen the ad served outside of tinychat, but it's annoying enough that I close down my browser once tinychat serves it to me.

link|improve this answer
feedback
up vote 0 down vote

You may have an infected master book record. Try and download MBRCheck.exe and see if that helps. Use the following content in this URL as a guide: http://www.bleepingcomputer.com/forums/topic335287.html

link|improve this answer
2  
boot, not book, and that probably dosen't explain anything, unless the virus survived a nuke and pave reinstallation of the entire system – Journeyman Geek Feb 22 at 3:22
1  
If it comes back (I'm currently trying Sachin Shekhar solution) I'll make sure to run this and try post the info here. Any sensitive info in that log I should hide, to not open a door wide open to a hacker? – Fredy31 Feb 22 at 3:41
Here is the log, anybody sees what is wrong? pastebin.com/3xyS3ezU – Fredy31 Feb 23 at 1:35
A book record? If anything it's in his startup processes – ekaj Feb 24 at 17:49
feedback
up vote 0 down vote

go on the add ons of whatever internet browser you're using and disable any suspicious ones, did this this morning to mine and its now back to normal.

link|improve this answer
feedback
up vote 0 down vote

I would try spybot s&d immunisation_cleanup and one of avg avira comodo INSTALLED and UPDATED in SAFE MODE (it takes time but odds are that rootkit will be deactivated in safe mode, or spybot immunisation will diable it)

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.