Spontaneously Opening Microsoft Calculator

[allaboutphones]

On my computer at home, the calculator program in Windows is randomly and spontaneously opening up. Most recently, it opened up and the number for pi appeared on the calculator. I am concerned that I have a virus or someone has access to my PC. Has anyone run into this problem, and if so do you have any recommmendations on what to do to correct it? I am running Microsoft Windows XP Home Edition Version 2002 Service Pack 2. Any feedback would be sincerely appreciated.

 

[bcastner]

Does your keyboard have a key for launching the calculator?

 

[linney]

These are from a private forum, do they apply?

"I have this 'problem' on my PC, but it's because I'm using a logitech that has the top-right key auto-mapped to CALC.EXE and it occasionally hits my desk, if I place it in my lap to type..."

"I suspect the problem to be with the keyboard or the keyboard drivers.
provided the keyboard has a key mapped for the calculator."

Or try here.

http://groups.google.com/groups?hl=...t&ie=UTF-8&oe=UTF-8&q=calc.exe+opens+randomly

http://www.google.com/search?sourceid=navclient&ie=UTF-8&oe=UTF-8&q=calc.exe+opens+randomly

Are there any errors in the Event Viewer?

Removing adware & spyware
Before Posting a Hijack log file - Best Practices
faq608-4650

 

[allaboutphones]

I can't locate a key that auto launches the calculator. One time, I left my computer, and when I came back to it 2 hours later, the calculator was open?!?! Wierd.

There are errors in the event viewer,

"TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts. For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp."

Any ideas? Do I need to get my PC scrubbed? Also, I notice that it seems to open up while I am playing Halo online...

 

[bcastner]

Your Event Manager error is discussed in detail here:

http://www.speedguide.net/read_articles.php?id=1497

The "patcher" can be found here:

http://www.lvllord.de/?lang=en&url=tools

 

[jimp56]

it opened up and the number for pi appeared on the calculator"

hotkey or not, that quote is troublesome to me. I would do the malware scans as linney suggested and evaluate your security practices (are you firewalled, do you have good A/V protection, etc).

this link:

http://www.google.com/search?sourceid=navclient&ie=UTF-8&oe=UTF-8&q=calc.exe+opens+randomly

in addition to the tcpip connection limits message - indicates to me you may have some nasties in your pc, as you have suspected.

 

[artfulbodger]

I don't know of any virus that opens up a specific application and enters very specific data.

However, this sounds like a trick I might want to play on someone - see if you have any sort of remote control software installed on your PC. Especially, take a look at your network firewall (you are using one, right) and make sure all incomming ports are blocked.

 

[linney]

An example of malware in action. This is not related to "artfulbodger's" comment, just posted for information.

"When the attachment is run, the virus checks the system date. If the date is January 28, 2004 or later, the virus simply exits and does not propagate. Otherwise, the virus executes the standard Windows calculator program CALC.EXE. Meanwhile, the virus copies itself to the WINDOWS SYSTEM directory (%SysDir%) as bbeagle.exe , and creates a registry key to load itself at system startup:"

http://vil.nai.com/vil/content/v_100965.htm