Blinking monitor?

[SharonHayes]

Ugh.... I ran adaware at least once a week. Last time I did was a few days ago. Earlier today I started having trouble with my monitor blinking. It blinks twice fast and then goes to normal for 30 secs to 1 min and then does it again. Ran adaware and it picked up bridge.dll and a bunch of other things. Coincidentally, around the time the blinking started, I had 3 new files show up on my desktop - pup.exe, o.bat and o. I have NAV running in background and it does auto updates. Nothing has been picked up through that. But for ages, I havent been able to do a complete scan because it hangs up.

Coincidentally, I just started using vonage. Since my DSL provider uses PPPOE, I had to make some changes so that now when I boot up, I'm auto connected to the net instead of having to log in. I ran adaware last just a few hours before making these changes and system was clean. (While I'm dealing with the clean up now, I have my modem turned off on that computer to avoid any further incoming damage)

Anyhow, I am trying to deal with the nasty bridge.dll right now... but I was wondering if any of you have heard anything about a blinking monitor problem from any spyware, worms or viruses? Or is this something separate?

Real annoying trying to work on this while my monitor is blinking. I do have a spare I can hook up, but the tower is in a built in desk so it would be an hour more work to swap monitors out when it might not even work.

[SharonHayes]

Well, monitor is blinking faster now. Bad enough having a virus and other problems, nevermind dealing with a monitor blinking. :(

I tried doing a full scan with NAV and it says my master boot record was changed. Tried ignore and to proceed, but hangs up at 1000 files scanned. Tried fixing it and comp locked up. (Fortunately I was able to reboot okay)

I'm running housecall now to see what that says.

One odd thing, I need to use my access manager to re-connect to my DSL. No longer autoconnecting when I boot up.

I tried fixing my settings for Norton Personal Firewall and no luck on that.

[Whyzman]

Hello SharonHayes,

Welcome tohttp://www.pcguide.com/ubb/pcgubb.gif Forums!

What Operating System are you using??

Can you possibly download Spybot Search&Destroy and HiJackThis??

If you have the ability to d/l these you would want to run Spybot and let it remove/repair all that it finds.

You would then want to run HiJackThis and post the log here as per their directions. Don't make any changes until one of the experts here has a chance to review. Be sure to save the HiJackThis to it's own folder. Don't leave it in the Temp files, as it cannot undo changes from there if the need arises.

Can you download these from another safe computer, burn a CD and install them onto the infected computer??

[SharonHayes]

Thanks for the welcome. I'm still running Housecall and so far it's found 47 infected files :( Noncleanable ones showing up are

JS_IESTART.PS
TROJ_REVOP.A
TROJ_SMALL.JQ
WORM_MYDOOM.A

As it has been scanning, NAV has picked up downloaded infected files (from email attachments) that hadn't been picked up on scans before.

Anyhow, once this is done, I'll reboot and do what you suggested. But the interesting thing is MY MONITOR STOPPED BLINKING! Yay

If anyone were to see the way it was blinking, you'd understand why I know this is not a simple hardware or video card issue. It's almost like monitor is going into standby mode when it does it.

Relieved that the blinking has stopped. It's enough of a headache dealing with computer issues, nevermind trying to do it around a blinking monitor!

[Whyzman]

Which OS are you using? If it is XP do you have all the critical updates installed?

What about Internet Explorer...which version, and once again, do you have all the critical updates installed??

[SharonHayes]

I'm using ME and IE 5.5.4134.0100

I do autoupdates for ME, but for IE for ages, computer locks up trying to do updates. The last time I tried - just 2 months ago - I ended up getting a screen saying that I needed to reinstall Windows. (I did and it didn't help)

I've actually been working on clearing files off of this computer so I can reformat and install XP since there seems to be no other way around the update for IE.

Do you suggest I try doing the updates again? Or maybe trying to install version 6.0 of IE (full version) rather than just trying to update IE 5?

Thanks

Sharon
P.S. Housecall finished and the blinking has returned :(

[Whyzman]

I would suggest IE version 6 when you get the chance...it seems that Microsoft has addressed a chunk of security issues in the latest version...

I would suspect that the blinking monitor has something to do with your being infected with something...

[Whyzman]

Here's a link to the Symantic MY DOOM removal tool:

http://securityresponse.symantec.com/avcenter/venc/data/w32.novarg.a@mm.html

There's some good reading regarding how it is spread and you might want to take note of disabling System Restore...it can put it in there and the Anti-Virus software does not have access to SR to remove it. Thus, it can re-infect...

[PrntRhd]

TrendMicro solution to JS_IESTART.PS: link (http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=JS_IESTART.PS)

TrendMicro solution to TROJ_REVOP.A: link (http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_REVOP.A)

[Whyzman]

This one looks like it could be added to PrntRhd's links:

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_SMALL.J

Since you reinstalled not all that long ago...it might be well worth considering grabbing the important files you mentioned earlier and then reloading...

With all the stuff you've picked up a fresh start might be in order...

[PrntRhd]

Thanks, Whyzman!
:D

[SharonHayes]

What a busy night I am having. The blinking has stopped for good now it seems. (Knock on wood). Here's an update:

Spybot found 56 entries. Odd that adaware didn't pick up on these. Mostly advertising tracking (no apparent malicious things)

Turned system restore off.

Downloaded and ran fixmydoom removal tool from symantec. It deleted 88 files, but it showed 0 viral processes terminated, 0 viral threads terminated and 0 registry entries fixed. When I checked the log from it, it appears that the files were just files that I had downloaded - i.e. I hadn't been infected. (So I guess housecall had "false alarm" in that infected files were on my computer, just I wasn't actually infected. Most of the files cleaned by mydoom were in my Norton protected recyle folder.)

Cleaned up oem*.inf files with 0 k. Funny, I just did this maybe a month ago and the number of new files was incredible. It was slowing down the scans I've been running so needed to clean it.

Did trendmicro fix for JS_IESTART.PS

Trendmicro fix for TROJ_REVOP.A was to run their system clean package

<http://www.trendmicro.com/download/dcs.asp>.

It found 4 infected files - \system\kern32.vir (worm_badtrans.a)
\windows media player\wmplayer.exe (troj_small.iq) then 2 in recycle bin - worm_badtrans.a and troj_small.iq (suspected just the deleted files)

I went to follow the trendmicro fix for TROJ_SMALL.J and neither the registry entry nor the file were there, so i guess it was a false alarm.

rebooted

reran fixmydoom removal tool. It showed it was clear.

turned back on system restore

Renabled NAV

I'm now running housecall again. So far, over 50,000 files scanned and it looks clean. Once I finish with this, I'll post my hijack this log. Will wait to make sure it seems clean before I reinstall firewall (ended up removing it entirely because when I reactivated it, it kept freezing my comp) and install IE 6.0.

Whew

Thanks guys for your help so far! Much appreciated.

Sharon

[SharonHayes]

Housecall run again showed comp was virus-free. (yay) But the blinking started again after the scan finished :(

Follows is my HijackThis log.... half the things I don't recognize :(

Logfile of HijackThis v1.97.7
Scan saved at 1:20:29 AM, on 5/31/04
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\WS_FTP PRO\FTPSCHED.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SYMTRAY.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON UTILITIES\NPROTECT.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON CLEANSWEEP\CSINJECT.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\PROGRAM FILES\IOMEGA\DRIVEICONS\IMGICON.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\WS_FTP PRO\FTPQUEUE.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\KEYBOARD\TYPE32.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAM FILES\ICQ\ICQ.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\YAHOO!\MESSENGER\YPAGER.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS SHARED\WKCALREM.EXE
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\OSA.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON UTILITIES\SYSDOC32.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON CLEANSWEEP\CSINSM32.EXE
C:\PROGRAM FILES\PRINTKEY2000\PRINTKEY2000.EXE
C:\Program Files\Norton SystemWorks\Norton CleanSweep\Monwow.exe
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\SYMPATICO\ACCESS MANAGER\APP\ENTERNET.EXE
C:\PROGRAM FILES\YAHOO!\MESSENGER\YMSGR_TRAY.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.listhost.net:81/
O2 - BHO: Ipswitch.WsftpBrowserHelper - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\PROGRAM FILES\WS_FTP PRO\WSBHO2K0.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [Iomega Startup Options] C:\Program Files\Iomega\Common\ImgStart.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [ftpqueue] C:\PROGRAM FILES\WS_FTP PRO\ftpqueue.exe -tray
O4 - HKLM\..\Run: [NPROTECT] C:\Program Files\Norton SystemWorks\Norton Utilities\nprotect.exe
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\RunServices: [ftpqueue] C:\PROGRAM FILES\WS_FTP PRO\FTPSCHED.EXE
O4 - HKLM\..\RunServices: [SymTray - Norton SystemWorks] C:\Program Files\Common Files\Symantec Shared\SymTray.exe "Norton SystemWorks"
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [NPROTECT] C:\Program Files\Norton SystemWorks\Norton Utilities\nprotect.exe
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [CSINJECT.EXE] C:\Program Files\Norton SystemWorks\Norton CleanSweep\CSINJECT.EXE
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKCU\..\Run: [Mirabilis ICQ] C:\Program Files\ICQ\ICQ.exe -minimize
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRAM FILES\YAHOO!\MESSENGER\ypager.exe -quiet
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Startup: Norton System Doctor.lnk = C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE
O4 - Startup: CleanSweep Smart Sweep-Internet Sweep.lnk = C:\Program Files\Norton SystemWorks\Norton CleanSweep\csinsm32.exe
O4 - Startup: SilkQuit Meter.lnk = C:\Program Files\valecam\SilkQuit\SilkQuit.exe
O4 - Startup: Printkey2000.lnk = C:\Program Files\PrintKey2000\Printkey2000.exe
O8 - Extra context menu item: Blog this! (What) - http://www.blogger.com/contextScripts/blogthis.pyra?blogID=3026214
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: Dell Home (HKCU)
O12 - Plugin for .avi: C:\PROGRAM FILES\INTERNET DIAL ACCESS\COMMUNICATOR\PROGRAM\PLUGINS\npavi32.dll
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {A031D222-B496-11D2-9CC8-00105A10AAF6} (WONWebLauncher Class) - http://195.219.21.135/tools/FlipsideWebLauncherControl.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20021205/qtinstall.info.apple.com/drakken/us/win/QuickTimeInstaller.exe
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?38097.8268402778
O16 - DPF: {09C6CAC0-936E-40A0-BC26-707480103DC3} (shizmoo Class) - http://www.uproar.com/applets/activex/shizmoo/flipside_web18.cab
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://gelco.webex.com/client/latest/webex/ieatgpc.cab
O16 - DPF: {9CCE3B43-4DE0-4236-A84E-108CA848EE6A} (WebCam Control) - http://www.webcamnow.com/broadcast/ActiveXWebCam.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/activedata/SymAData.dll
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2e529727a6ef04/housecall.antivirus.com/housecall/xscan53.cab

[SharonHayes]

If I should repost the Hijack This log elsewhere, let me know. Thanks

[Whyzman]

We've only a few folks familiar with processing the HiJackThis logs...I'm sure they'll be around...

In the meantime, I would suggest moving HiJackThis to a folder other than the Desktop. I believe they prefer if you put it right on the C: Drive...

[Budfred]

Thanks for the heads up Whyzman...

Unfortunately, I don't know if this is good news or bad news... the log looks clean. The only thing that looks a bit suspcious is this because I don't recognize it. What I could find suggests it is okay too, but you can fix it if it doesn't look familiar:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.listhost.net:81/

I haven't read the whole thread, but it seems like the only option to check for malware would be a trojan scan. You could try this one... if it doesn't do it, it is probably more likely to be hardware or a software glitch...

http://scan.sygatetech.com/pretrojanscan.html

[SharonHayes]

Thanks guys...

the listhost url on my start page is one of my own web sites (I run a dot-com). I put it there after cleaning up what one of the bugs changed.

I had hoped all would be clean. After all the scans etc, nothing was showing, but after hearing how bad bridge.dll was, I was worried that there might have been some remnants of it left.

Just as an FYI, the flashing monitor problem has been gone since maybe a half hour after I did the last scan. So maybe everything is fine now.

Also, to clarify something... I had attached the monitor to a different desktop before I posted here the first time and it had never flashed. Re-attached it to the problem desktop and flashing started again. So I am pretty certain that the problem was with the monitor itself.

[SharonHayes]

Re-ran HJT from c:\ drive
Logfile of HijackThis v1.97.7
Scan saved at 12:26:42 AM, on 6/01/04
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\WS_FTP PRO\FTPSCHED.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SYMTRAY.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON UTILITIES\NPROTECT.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON CLEANSWEEP\CSINJECT.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\PROGRAM FILES\IOMEGA\DRIVEICONS\IMGICON.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\WS_FTP PRO\FTPQUEUE.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\KEYBOARD\TYPE32.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAM FILES\ICQ\ICQ.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\YAHOO!\MESSENGER\YPAGER.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS SHARED\WKCALREM.EXE
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\OSA.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON UTILITIES\SYSDOC32.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON CLEANSWEEP\CSINSM32.EXE
C:\PROGRAM FILES\PRINTKEY2000\PRINTKEY2000.EXE
C:\Program Files\Norton SystemWorks\Norton CleanSweep\Monwow.exe
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\SYMPATICO\ACCESS MANAGER\APP\ENTERNET.EXE
C:\PROGRAM FILES\YAHOO!\MESSENGER\YMSGR_TRAY.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\HJT\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.listhost.net:81/
O2 - BHO: Ipswitch.WsftpBrowserHelper - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\PROGRAM FILES\WS_FTP PRO\WSBHO2K0.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [Iomega Startup Options] C:\Program Files\Iomega\Common\ImgStart.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [ftpqueue] C:\PROGRAM FILES\WS_FTP PRO\ftpqueue.exe -tray
O4 - HKLM\..\Run: [NPROTECT] C:\Program Files\Norton SystemWorks\Norton Utilities\nprotect.exe
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\RunServices: [ftpqueue] C:\PROGRAM FILES\WS_FTP PRO\FTPSCHED.EXE
O4 - HKLM\..\RunServices: [SymTray - Norton SystemWorks] C:\Program Files\Common Files\Symantec Shared\SymTray.exe "Norton SystemWorks"
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [NPROTECT] C:\Program Files\Norton SystemWorks\Norton Utilities\nprotect.exe
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [CSINJECT.EXE] C:\Program Files\Norton SystemWorks\Norton CleanSweep\CSINJECT.EXE
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKCU\..\Run: [Mirabilis ICQ] C:\Program Files\ICQ\ICQ.exe -minimize
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRAM FILES\YAHOO!\MESSENGER\ypager.exe -quiet
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Startup: Norton System Doctor.lnk = C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE
O4 - Startup: CleanSweep Smart Sweep-Internet Sweep.lnk = C:\Program Files\Norton SystemWorks\Norton CleanSweep\csinsm32.exe
O4 - Startup: SilkQuit Meter.lnk = C:\Program Files\valecam\SilkQuit\SilkQuit.exe
O4 - Startup: Printkey2000.lnk = C:\Program Files\PrintKey2000\Printkey2000.exe
O8 - Extra context menu item: Blog this! (What) - http://www.blogger.com/contextScripts/blogthis.pyra?blogID=3026214
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: Dell Home (HKCU)
O12 - Plugin for .avi: C:\PROGRAM FILES\INTERNET DIAL ACCESS\COMMUNICATOR\PROGRAM\PLUGINS\npavi32.dll
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {A031D222-B496-11D2-9CC8-00105A10AAF6} (WONWebLauncher Class) - http://195.219.21.135/tools/FlipsideWebLauncherControl.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20021205/qtinstall.info.apple.com/drakken/us/win/QuickTimeInstaller.exe
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?38097.8268402778
O16 - DPF: {09C6CAC0-936E-40A0-BC26-707480103DC3} (shizmoo Class) - http://www.uproar.com/applets/activex/shizmoo/flipside_web18.cab
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://gelco.webex.com/client/latest/webex/ieatgpc.cab
O16 - DPF: {9CCE3B43-4DE0-4236-A84E-108CA848EE6A} (WebCam Control) - http://www.webcamnow.com/broadcast/ActiveXWebCam.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/activedata/SymAData.dll
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2e529727a6ef04/housecall.antivirus.com/housecall/xscan53.cab

[Whyzman]

Hmmmm.....actually, the fact that the monitor was working on another computer without incident would point to the fact that something is awry with the current setup and not the monitor...especially, if you hook it back up to the previous "working" rig and it doesn't begin blinking...

[Whyzman]

One other thought, if you should need to invest in a new monitor, I would suggest looking for the type that the monitor to PC connection cord is not hardwired...

Many monitors use a cord with pin connections on both ends...

That way you would not need to be messin' with having to pull the rig out of its cubby hole to swap monitors...