AboutCarolyn Meinel Expertise I cover Windows, Unix, TCP/IP and Ethernet security questions. I do not cover Mac, Palm Pilot, or other networking issues.
Experience Books by Carolyn Meinel: wrote a chapter for The Hacking of America book (see http://www.amazon.com/exec/obidos/ASIN/1567204600/happyhacker)
My article Code Red for the Web for Scientific American was reprinted in the book Best American Science Writing 2002 (see http://www.amazon.com/exec/obidos/ASIN/0060936509/happyhacker). My book The Happy Hacker: A Guide to Mostly Harmless Hacking is now in 4th edition with a Japanese edition (see http://happyhacker.org/hhbook/).
I have hp pavilion dv2000.my cursor moves randomly around the desktop,
and then clicks or double clicks, opening programs.this happened when
im connected to internet
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:43:21 PM, on 30/7/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal
Answer First, here's the good news. This is probably not being done to your computer by organized crime.
You appear to have a Trojan that is enabling someone -- probably a bratty 13-year-old -- play with your computer whenever you get online. He probably has all his friends over so they can watch him teasing you as they view an image of your computer's desktop on the bratty kid's computer. If your computer was infected by the kinds of Trojans that professional criminals use, it wouldn't be so obvious.
The guilty process in that Hijack This report probably is windowssystem32wpclsp.dll. You might be able to clean your computer yourself by booting into Safe Mode -- command line, and deleting this file. But because it is a .dll, it is only part of the malicious program you're trying to remove. The danger of manually removing just this .dll is that the other remaining parts of the program might slow your computer or make it crash.
IMHO, your best bet is to install and run a better Internet security program than whatever you are running now. Here's what will almost certainly work.
1) Download either Kapersky Internet Security, which offers a free 30 day trial at http://kapersky.com, or F-Secure's Complete Internet security suite, which offers a free thirty day trial: https://store.f-secure.com/cgi-bin/dlreg/ml=EN?ID=FSISTB&desid=TRIAL
2) Disconnect from the Internet.
3) Uninstall your current antivirus. This is absolutely essential because otherwise it and F-Secure or Kapersky will fight each other and might crash your computer. It isn't good enough to just turn off your old antivirus because it probably has been crippled by your virus infection.
4) Install your Internet Security product. Download any updates available.
5) Run a complete scan of your computer. Follow any instructions it might give you.
6) Reboot.
If this works, you can either keep your new Internet Security product or uninstall it and reinstall your old antivirus from either a download of the latest version from their website (if that's how they sell it) or from the disk it was on when you bought it. Be sure to get all the latest updates right away. Usually antivirus companies are pretty good about updating their programs whenever some new attack becomes able to evade or cripple their product.
If you weren't running an antivirus program that includes antispyware protection and a firewall, then I recommend that you not reinstall your old program. Nowadays we need total protection, and this includes antispyware and a firewall.
7) To prevent future infections, don't use Internet Explorer, as it is susceptible to introducing viruses, adware and spyware into your computer. Instead you could use Firefox, free from Mozilla.org . Instead of using Outlook for email, you could use Thunderbird, free from Mozilla.org, or Eudora, free from Eudora.com .
