Laptop keyboard not working ..pls help

Hi...not sure if this is software or gremlins
mother in laws laptop so bare with me....

Compaq Presaro CQ42..
Window 7 Home Premium
Service pack 1


Keyboard doesnt work, will work if in safe mode, will not work in safe mode with networking....., touchpad works ...runs norton 360, internet by usb and wireless network at my house
have tried reinstaling driver......all windows updates current and nortons up to date...grrrrr
gone through HP help and done a bios update......
tried diagnostic start up....still not working....
Any suggestions??????
thx di

 

I8042prt.sys is the driver for your keyboard. It could be that you have a possible rootkit but I am not sure.

Do you have the following file on the computer?

C:\sand-box\win.exe

Is I8042prt.sys located at C:\WINDOWS\SYSTEM32\DRIVERS\

It is also at this registry key, but I would not be able to tell you if it has been modified.

HKEY_Local_Machine\System\CurrentControlSet\Services\ i8042prt:Imagepath=System32\Drivers\i8042prt.sys

Do not use any cleaner programs.

http://greatis.com/blog/how-to-remove-malware/restored-i8042prt-sys-trojan-tdss.htm

Hopefully somebody from the Malware Removal Section can give their thoughts on this.

 

Hi, thank you for the reply......

have done a search and no there is no sand-box file(s)

I8042prt.sys is located C:\WINDOWS\SYSTEM32\DRIVERS\

Not sure how to find this one
HKEY_Local_Machine\System\CurrentControlSet\Services\ i8042prt:Imagepath=System32\Drivers\i8042prt.sys

I havent/dont use registry cleaners
any other suggestions....? i will post similar into malaware........
thanks again
di

 

When you go into Device Manager, is there a yellow exclamation mark next to your keyboard? Under "Standard PS/2 keyboard" right click and select Properties. In the General tab it will say if the keyboard is working properly. Under the Driver Tab, You should have two drivers listed. I8042prt.sys and kbdclass.sys. Edit: Do not do this in safe mode when the keyboard is working.

kbdclass should also be in System32\Drivers.

It also has the registry key.
HKEY_Local_Machine\System\CurrentControlSet\Services\kbdclass.sys

HKEY_Local_Machine\System\CurrentControlSet\Services\i8042prt.sys

Both of these keys are in the registry.

Click the Windows Globe and in the Search box type regedit and then enter. Do not modify or delete any keys.

 

There is a zero-access rootkit that changes I8042prt.sys. I would go to the Malware Removal Forum and post there after you have followed the instructions in the sticky post. If you are clean, then you can come back here and hopefully get your problem solved.

 

thanks.....i have just posted logs there ....fingers crossed......thank you for you help so far

 

Hi Tgell......ok spent a bit of time in malaware and still no keyboard........pls pls be a guru and solve this before i chuck this laptop the window(seriously)

didnt have discs to restore so done a HP restore, still no keyboard but will work in safe mode and a usb keyboard works ...grrrrr
thanks di

 

You can try this. Go into device manager and right click your ps/2 keyboard. Under the driver tab, select uninstall and then reboot the computer to let Windows find the keyboard and install the driver again.

 

Have you checked with hp's support page?
Also do you have a windows 7 dvd to try to do a system repair??

 

did you try to do a system restore??

 

Hi Tgell.....yeap tried uninstalling ,rebooting no change

Hi Hugh.....yeap tried HP support pages....tried system restore.....tried finding newer driver no luck........dont have windows disc.......MIL hadnt made backup disc so tried just HP restore....been through the malaware spyware etc , keyboard works in safe mode, doesnt work in safe made with networking, tried diagnostic start still not working, usb keyboard works........touchpad works, tried the battery out reboot thingy.........probably a few more weird things as well.......kind off running out of ideas.......... i just dont know anymore puter is only 14 months old so too good to give up just yet
any help is appreciated
thx di

 

When you say this, it makes me think that it's a software problem. I will review your thread again but if i recall correctly there weren't any infected system drivers like i8042prt.sys or kbdclass.sys.

Since the keyboard works in Safe Mode, can you try using MSconfig (Start -> run -> msconfig)
Go into the Startup tab and press the Disable All button.
One you have done that, then go into the Services tab.
First place a checkmark into: "Hide All Microsoft Services" <--- This is very important, do not skip this step!
Once there is a checkmark in "Hide All Microsoft Services", press the Disable All button and then press OK to exit out of MSconfig.
Reboot your PC (into Normal Mode) and see if there are any changes.

If the keyboard works now, then you know it's a software or service that is conflicting with your keyboard functionality in Normal Mode.

 

Hi thisisu, i have tried what u suggested....but no still no keyboard.....its so weird.....
I've even tried different keys and combinations of keys...long shot but maybe some strange keyboard lock ?? i know im strange but will try anything

thanks again for you help and patience
di

 

There is one thing you could try is go into device manager and then keyboards and have it delete the keyboard and reboot it should redetect it.:cool

 

Try this but I doubt it will work. You may have to do some kind of repair install but because you have an HP, I doubt you have the XP install CD. Other option would be to take it back to a factory state after backing up all data and then reinstalling all programs.

Do not do this in safe mode.

Right-click on My Computer
Select Properties from the context menu
Click Advanced tab
Click Environment Variables
Click New
In the variable name put devmgr_show_nonpresent_devices
In the variable value put 1
Click OK to exit

edit: reboot

Then in Device Manager select View>show hidden devices. Click on the keyboard section. Are there any greyed out devices under keyboard? Is so, delete them.

As a side note, also click non-plug and play devices. Are there any devices listed as keyboard?

 

I'm curious whether the registry is involved in this problem. If you get a chance I would like to compare a couple of registry keys with my own to see if there is an obvious difference. Sounds complicated but it really isn't.

1) Create a Restore Point (You won't me making any changes but just for safety). Windows Start/Orb button; type in create restore and "Create a Restore Point" will appear at the top of the list. Select it and in the Window that opens click the Create button. Type in a name and hit Create button. Close out window.

2) Hit Start/Orb and type regedit, and regedit.exe will appear at top of list so click it.

3) Registry editor opens. You want to navigate to HKEY_Local_Machine\System\CurrentControlSet\Services by clicking on triangle next to each folder. So in the left pane click triangle next to HKEY_Local_Machine
Triangle next to System
Triangle next to CurrentControlSet
Triangle next to Services

4) Now you want to Export a copy of three keys to your Desktop
So scroll down in the Services folder for the folder i8042prt. Don't click on the triangle next to it but instead right-click on the folder to highlight it and select Export from the right-click popup menu. In the export window select Desktop icon from the left for location to save and then type in control i8042 for the name, then click Save button.

Continue down in Services to kbdclass folder. Right-click folder and select Export. Select your Desktop and type in control keyboard for the name and click Save.

Last one is kbdhid folder. Right-click, choose Export and save to Desktop as control kbdhid.

5) Exit Regedit. (Just close window or use File and then choose Exit.)

6) Go to Desktop and select the three .reg files you just created. (Hold crtl key and click on each file so that all three are highlighted) Right-click the group of highlighted files and select Send To and choose Compressed folder. This will create a zipped folder on your Desktop.

7) Attach that zipped file to a post here in this thread.

I've seen mention of these keys in a couple of threads related to this problem but no definitive answer of how they are involved. If your laptop's match mine then I think we can rule them out.