mouse freezing

[cking]

I'm not sure where this problem should be listed. We have a user that his mouse continually locks up on him over night. We have swapped out computers(Dell and HP), mice (wired and wireless), checked power management settings and everything checks out. But when left over night its like the computer wants to hibernate but doesn't get all the way there and forgets the mouse is attached. Sometimes the pointer goes up to the top corner and just sticks there and sometimes it just freezes. Any suggestions?

[Gecko]

cking,

If you have changed out both the system and the mouse, then it's not hardware related.
So therefore it must be software related, look to see what programs/processes are running after the user leaves.
Check the Control Panel > Admin Tools > Event viewer to see if there is any error listed that could name the offending file name.
You could also try disconnecting the internet source after the user leaves and see if it still happens.

It has to be something that is running or scheduled to run overnight, look in Control Panel > Scheduled Tasks.
Could the user be running some type of connection program like Go to my PC or Open VPN?

The user could be reinfecting the systems with some type of spyware/trojan by installing some IE tool bar or the likes also.
In that case you should post a Hijackthis log

Good Luck

[cking]

There was nothing in the log files of the computer itself and we've swapped machines so Im not thinking its a virus or something like that but heres the HiJackThis Log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:26:03 AM, on 4/13/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;<local>
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 6959533102
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/i ... ction2.cab
O23 - Service: iSeries Access for Windows Remote Command (Cwbrxd) - IBM Corporation - C:\WINDOWS\CWBRXD.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe


--
End of file - 6093 bytes

[cking]

Was there anything in the HiJack this log to be concerned with? Could there be a conflict with another piece of software installed? and other thoughts?

[Gecko]

cking,

Sorry for not replying sooner, I was away on a personal matter.

I don't see anything bad in your HJT log but now days that doesn't mean it can't be infected.
I don't see an anti virus program installed and running, that is where I would start.
The other thing to look into is if the network card is set to allow it to "wake" on demand if so turn it off.

Tend Micro has a free online anti virus program that can be found .

If this only happens overnight why not just turn of the system?

[cking]

There is an antivirus software installed however being as this is a company computer they requested that I remove references to certain things (including the antivirus ) for safety I believe the wake on demand is off as it's not set to go to sleep anymore.

[PcTestCard.com]

I would suggest reset the BIO to default and reinstall the latest mainboard chipset driver, reboot the PC to take effect.

If this still does not work, let the PC running overnight in the safe mode and see if the same problem happens.

Also use "Msconfig" command at RUN and disable all startup options. This can help to make sure no startup scheduled apps causing the problem.

If still the same problem, seems that the system cannot resume all devices from the standby mode, check the power management features then.

Hope this helps!
Bill