dead mouse and keyboard - virus?

Discussion in 'Malware Help (A Specialist Will Reply)' started by joannelj, Feb 1, 2011.

  1. joannelj

    joannelj Private E-2

    My boss's computer suddenly had the cursor move to the middle of the screen and freeze. The keyboard is also not working. They are USB. There is no PS2 port on the computer. I've switched to a different keyboard and mouse, and have tried all the USB ports with no luck. They work when I am in the BIOS settings, or if I use a boot disc. But in windows XP, and safe mode, they do not work.

    I ran the free AVG boot disc virus scan on it, and it did not find anything. I also tried running some of the programs from Hiren's boot disc, but only a few worked - most give errors. I downloaded the Avira boot disc, and it returned the following:TR/Crypt.XPACK.Gen3. It said it renamed it. I have also downloaded and run the Kaspersky rescue disk. It did not find anything.

    I'm at a loss on how to approach this, since of course, when it boots normally, I can't do anything without a mouse and keyboard.

    I don't know if it's a virus, but I don't believe it's a hardware problem.

    Help!
    JoAnne

    PS: the computer is not frozen. XP loads, and the email program opens and downloads email. It's just the USB ports or mouse and keyboard that don't work.
     
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    If you are having problems where you cannot boot, or cannot run any scans while Windows is running, or other scans just have not helped, you may want to try creating one or more of the below CDs to boot from that allow you to run scans and perform many other tasks without Windows even being loaded. Sometimes this can help to get you started when all else fails. They can even help in cases where a previous scan may have removed something that resulted in your PC being unbootable.
     
  3. joannelj

    joannelj Private E-2

    I'm working my way through the list...
    Avira: found and renamed TR/Crypt.XPACK.Gen3
    AVG: found nothing
    Bit Defender: I ran this from a CD. It found gen.variant.kazy.9786, and says it deleted it.
    F-secure: locked up at 78%. I will retry it later.
    Kaspersky: found nothing
    DrWeb: (i know, it's not on the list) still scanning - will update this post tomorrow...
     
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Good to know. Just keep us informed. ;)
     
  5. joannelj

    joannelj Private E-2

    Yay!! I've fixed it. I suspect that a USB driver was infected, and then one of the scans deleted it, but I don't know this for sure.

    Anyway, from my (good) computer I copied these USB drivers onto a flash drive.
    (c:\WINDOWS\system32)
    Hccoin.dll
    C:\WINDOWS\system32\drivers)
    Usbehci.sys
    Usbhub.sys
    Usbport.sys
    Then I booted with Hiren's cd - mini windows XP, and copied the files to the appropriate locations on the messed up computer. On three of them, it asked if I wanted to overwrite (I did.) but on one of them, the file wasn't there (that's why I suspect a virus scan deleted it.) Once that file was put back where it belonged, I rebooted, waited while it found new hardware, and voila!

    Hope this might help someone else, someday.

    :)
    joanne
     
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Sweet!!! And good job!! Glad to know all is well now!! ;)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds