Hijack\Radio Station like activity on Windows PC

[Dallascisco]

I have been working with a client that seems to have some type of browser hijack or spyware infection. Randomly you will hear what seems to be a radio station in the background. You'll hear news headlines, the weather, a baseball players interview, etc. It is not repetitive like alot of other infections and doesn't seem to be selling anything. AVG is also picking up on alot of items in the temp files directory that it doesn't give an option to clean. You can only ignore or create an exception. Here is what I've done so far.

full malwarebytes scan
full super antisyware scan
windows defender scan
combofix
aswmbr
eset online scan
reset IE settings to default
check for rss feeds
system restore to older state

I'm either on the wrong track or there is some new variant that hasn't been dat'd up yet. Anything I'm missing here?

 

[seepy83]

1 - What are the items in the temp folder that AVG is alerting to?

2 - Your speakers could actually be picking up a radio station. The speaker leads/wires can act as an antennae under the correct conditions. http://www.stevelarkins.freeuk.com/computer_interference.htm

 

[Dallascisco]

The files being referred to are simple things you'd find in the temp folder. Url, txt, php

 

[unokitty]

As has been suggested, the problem may be with your computer but you it also may be with your with your speakers.

Have you tried disconnecting your Ethernet connection to see if the radio sound goes away?

If the problem goes away when you disconnect, then it is likely an Internet based problem. If it doesn't then, it is likely some sort of RF issue.

Two questions concerning your speakers.

Are the speakers shielded?

Have you tried moving the speakers?

Questions concerning your computer.

Have you used a utility, like netstat, to verify that your computer is making an outside connection?

Alternatively, have you used a sniffer, like Wireshark, to examine the connections that your computer is making?

Answering these questions should at least identify the source of the problem. If you find that it is coming from the Internet, there are other utilities that you could use to identify the program that is using that particular socket on your computer.

Best of luck,
Uno

 

[dawks]

As has been suggested, the problem may be with your computer but you it also may be with your with your speakers.

Have you tried disconnecting your Ethernet connection to see if the radio sound goes away?

If the problem goes away when you disconnect, then it is likely an Internet based problem. If it doesn't then, it is likely some sort of RF issue.

Two questions concerning your speakers.

Are the speakers shielded?

Have you tried moving the speakers?

Questions concerning your computer.

Have you used a utility, like netstat, to verify that your computer is making an outside connection?

Alternatively, have you used a sniffer, like Wireshark, to examine the connections that your computer is making?

Answering these questions should at least identify the source of the problem. If you find that it is coming from the Internet, there are other utilities that you could use to identify the program that is using that particular socket on your computer.

Best of luck,
Uno

Yup, we literally had this question a few weeks ago. Its almost certainly radio interference. It seems pretty odd that a virus would start playing radio stations randomly, and at low volume.. Especially local radio stations.