Computing.Net > Forums > Security and Virus > ghost? cd-rom open and closes

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

ghost? cd-rom open and closes

Reply to Message Icon

Original Message
Name: carlos2527
Date: February 22, 2004 at 16:41:30 Pacific
Subject: ghost? cd-rom open and closes
OS: xp pro
CPU/Ram: 2400/512
Comment:

my cd-rw open and closes randomly...its not a virus a trojan...i run everything that i know... norton system works 2004, ad-ware, S&D, trojan removars( all that i could get the hands on)and finaly i literaly sit down and wait until the fenomena began. i run the task manager and the file of the problem was the imapi.exe...lol okay i know wath the file does.. so i can delet it...i begining to rule out the trojan because even offline (im almost crasy, i evem disconeted the fone line) and it stil append. so i could be some kind of virus/joke ... its carnival anyway :) and it only append to my cd-rw drive f , the dvd drive e ... nothing ...i it was a virus/jokes should it traget the first drive, the drive e ?could be a bug ? i recent instaled a wireless keybord/mouse...
literaly in going crasy ... but i would like to know what is the problem ... so dont waste line telling me to format and instal over again ... lol what is the fun of that?
i dont belive in ghost ... but it sure seem like it :)))


Report Offensive Message For Removal


Response Number 1
Name: wawadave
Date: February 22, 2004 at 23:39:15 Pacific
Reply: (edit)

hello
you running a fire wall? if not remote hacker could be haveing fun with you.
it could be a joke program.
try online scan at panda or housecall anti virus.

••• Resistance is invigorating! •••


Report Offensive Follow Up For Removal

Response Number 2
Name: efabes
Date: February 23, 2004 at 12:59:38 Pacific
Reply: (edit)

Someone here reported that Spy Wiper causes this. An updated Adaware and Spybot should fix it, if that is the cause of YOUR pc's problem.


Report Offensive Follow Up For Removal

Response Number 3
Name: JackG
Date: February 23, 2004 at 15:14:23 Pacific
Reply: (edit)

Then it could be a failing CD-Rom drive or IDE cable problems. Cross talk on the cables (old 40 wire instead of 80 wire cables), bad IDE cables or one of the drives messing up the IDE bus could cause errors in commands that result in the drawer opening. Have seen weak power supplies cause noise that result in the CD drawer opening and closing.

Have also seen a number of drives with this problem when they start having read problems and do not recognize the format of the CD. They just suddenly open.


Report Offensive Follow Up For Removal

Response Number 4
Name: carlos2527
Date: February 24, 2004 at 05:08:31 Pacific
Reply: (edit)

hello guys thx for the help :)

to dave :
even i use the norton system works 2004, i stil try a few online scan, and the panda detected a virus in one of my rar archives.the w32/hybris, as far as i detected this is a old 95/98/nt virus and do not afect xp, but still i kick the b---tard ass eheheheh :) anyway i begining to think that the nav isnt so good ....

to efabes:

im using outpost firewall pro 2. bla , 238 i gess. BUT .. i check the allowed connection and somethig strange appends ....
everytime i connected to a site i see in the outpost log that i send nd recieve info of a site : the www.spywareinfo.com, but my adware and S&D dont detec anything. i check the site and it is a spyware removal site ?!?!?!?!? here a sample of the log os the outpost :

12:45:52 naviscope.exe TCP www.spywareinfo.com 1189 Localhost Connection
12:45:52 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:45:52 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:43 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:43 naviscope.exe TCP www.spywareinfo.com 1187 Localhost Connection
12:45:43 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:45:43 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:43 naviscope.exe TCP www.spywareinfo.com 1185 Localhost Connection
12:45:43 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:45:43 naviscope.exe TCP www.spywareinfo.com 1181 Localhost Connection
12:45:43 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:45:43 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:45:43 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:43 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:43 naviscope.exe TCP www.spywareinfo.com 1182 Localhost Connection
12:45:42 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:42 naviscope.exe TCP www.spywareinfo.com 1179 Localhost Connection
12:45:42 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:45:37 naviscope.exe TCP www.spywareinfo.com 1177 Localhost Connection
12:45:37 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:45:37 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:36 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:36 naviscope.exe TCP www.spywareinfo.com 1175 Localhost Connection
12:45:36 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:45:31 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:31 naviscope.exe TCP www.spywareinfo.com 1173 Localhost Connection
12:45:31 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:45:14 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:14 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:45:14 naviscope.exe TCP www.spywareinfo.com 1171 Localhost Connection
12:45:09 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:09 naviscope.exe TCP www.spywareinfo.com 1169 Localhost Connection
12:45:09 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:45:09 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:09 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:09 naviscope.exe TCP www.spywareinfo.com 1166 Localhost Connection
12:45:09 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:45:09 naviscope.exe TCP www.spywareinfo.com 1165 Localhost Connection
12:45:09 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:45:09 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:09 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:09 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:09 naviscope.exe TCP www.spywareinfo.com 1161 Localhost Connection
12:45:09 naviscope.exe TCP www.spywareinfo.com 1160 Localhost Connection
12:45:09 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:45:09 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:45:09 naviscope.exe TCP www.spywareinfo.com 1159 Localhost Connection
12:45:09 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:45:08 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:45:08 naviscope.exe TCP www.spywareinfo.com 1157 Localhost Connection
12:45:08 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:35:40 svchost.exe TCP v4.windowsupdate.microsoft.com HTTPS HTTPS connection
12:35:39 svchost.exe TCP wustat.windows.com HTTP HTTP connection
12:35:38 svchost.exe TCP v4.windowsupdate.microsoft.com HTTP HTTP connection
12:35:37 svchost.exe TCP v4.windowsupdate.microsoft.com HTTP HTTP connection
12:35:36 svchost.exe TCP www.windowsupdate.com HTTP HTTP connection
12:35:36 svchost.exe TCP www.windowsupdate.com HTTP HTTP connection
12:35:36 svchost.exe UDP 194.65.100.117 DNS Allow DNS Resolving (UDP)
12:33:54 SYSTEM ICMP 220.122.132.48 Destination Unreachable/3 ICMP Traffic
12:33:54 SYSTEM ICMP 220.122.132.48 Destination Unreachable/3 ICMP Traffic
12:33:54 SYSTEM UDP 220.122.132.48 DNS Allow DNS Resolving (UDP)
12:30:57 ad-aware.exe TCP www.lavasoftusa.com HTTP Browser HTTP connection
12:30:33 ad-aware.exe TCP www.lavasoftusa.com HTTP Browser HTTP connection
12:30:31 ad-aware.exe TCP www.lavasoftusa.com HTTP Browser HTTP connection
12:30:31 svchost.exe UDP 194.65.100.117 DNS Allow DNS Resolving (UDP)
12:29:16 lucomserver.exe TCP i.i.com.com HTTP Symantec LiveUpdate HTTP
12:29:16 svchost.exe UDP 194.65.100.117 DNS Allow DNS Resolving (UDP)
12:27:44 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:27:44 naviscope.exe TCP www.spywareinfo.com 1141 Localhost Connection
12:27:44 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:27:44 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:27:44 naviscope.exe TCP www.spywareinfo.com 1139 Localhost Connection
12:27:44 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:27:44 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:27:44 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:27:44 naviscope.exe TCP www.spywareinfo.com 1136 Localhost Connection
12:27:44 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:27:44 naviscope.exe TCP www.spywareinfo.com 1135 Localhost Connection
12:27:44 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:27:44 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:27:44 naviscope.exe TCP www.spywareinfo.com 1133 Localhost Connection
12:27:44 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:27:44 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:27:44 naviscope.exe TCP www.spywareinfo.com 1131 Localhost Connection
12:27:44 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:27:44 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:27:44 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:27:44 naviscope.exe TCP www.spywareinfo.com 1129 Localhost Connection
12:27:44 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:27:44 naviscope.exe TCP www.spywareinfo.com 1127 Localhost Connection
12:27:44 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:27:44 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:27:44 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:27:44 naviscope.exe TCP www.spywareinfo.com 1124 Localhost Connection
12:27:44 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:27:44 naviscope.exe TCP www.computing.net HTTP NAVISCOPE Rule #2
12:27:44 naviscope.exe TCP www.spywareinfo.com 1122 Localhost Connection
12:27:44 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection
12:27:44 iexplore.exe TCP www.spywareinfo.com 81 Internet Explorer HTTP connection

could that be the reason ? and if not how can i removit ??

to jackg :

im going to try and use another ide cable, but i recent intaled a wireless keybord and mouse, could be some bug... so im going for step to step... gona take a few days.. im goind to replace the cable .. them to the old keybord and mouse...the power suply is a good one ... i dint got a cheap model ... my tower is one of a medium range prices .. of the nş1 awarded computer shop of my contry:) best computer 2004, best online site, best shop etc ....

thx for the help ... i keep u informed of my ghost computer :)))


Report Offensive Follow Up For Removal

Response Number 5
Name: jdsetls
Date: February 24, 2004 at 06:07:51 Pacific
Reply: (edit)

Did you use NTI CD-maker ?

Answer privately,
jdsetls@netscape.net

Jacques


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 5 Days.
Discuss in The Lounge
Poll History




Data Recovery Software