Help evil keyboard/mouse hijack/hook

leisurekidz · Nov 20, 2006

my keyboard and mouse are malfunctioning. starting last thursday nov 16th, the keyboard locked in the caps lock position. when i press caps lock key, it types in lowercase, but i am unable to type numbers or lowercase punctuation. the numbers keys do not work. i am posting this from work as i cannot log into any site from home.

my mouse automatically selects nearly every item on a page when i left click on a single item. i have to right click and use open to open single items. some buttons that require a single click require two now.
the scroll button moves me back a page, instead of scrolling down the page. all web links open in a new window. when i left click on a web page it selects all, and will not de-select.

when i run spybot s&d i occasionally receive an error message in german, which shut it down.

i have uninstalled the keyboard drivers only to have them automatically re-installed upon restart. when i manually boot, disk check is cancelled automatically. i have run intellimouse drivers repair from the cd rom with no change. none of the anti-virus programs have corrected this.

when i ran trend house call, it found 42 tracking cookies, and 1 adware program from microgaming systems, but it shuts down before it completes the scan. i was unable to run the other two web site virus searches as they require valid email adresses and i cannot type periods. here's my log

chaslang · Nov 20, 2006

Welcome to Majorgeeks!

Quite often problems like you describe are hardware related and not malware. If your keyboard is a programmable keyboard, it may have been reprogrammed. Do you have another keyboard you can use (even temporarily)?

Your HJT log does not show malware problems but HJT is not a malware scanning/detection tool and will help you find most of the possible malware problems that exist in the world today. That is why it is our last step not the first. If you want to check your PC for malware, I'm giving the procedure below. But before you start this procedure you need to remove one of the antivirus applications you have installed. You have AOL Active shield which is really Kaspersky Antivirus and you have F-Secure. As you will see in step 3 of the below, you must ONLY have one antivirus application installed.

Please follow our standard cleaning procedures as best as you can. The more you can do the greater the likelyhood that we can help you. Also there are steps included for installing, renaming, running, and posting HijackThis logs as attachments.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:

CounterSpy - ONLY IF you were not able to run Windows Defender

Bitdefender - from step 6

Panda Scan - from step 6

runkeys.txt - the log from GetRunKey.bat

newfiles.txt - the log from ShowNew.bat

HijackThis

NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!

Log in or Sign up

Help evil keyboard/mouse hijack/hook

leisurekidz Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member