keyboard locks up and occasional beeping

Discussion in 'Malware Help (A Specialist Will Reply)' started by lpeter, Oct 20, 2007.

  1. lpeter

    lpeter Private E-2

    The following problem seemed to start yesterday after downloading an update to Firefox along with a plugin to sync bookmarks. However, this might be coincidental since I had an identical problem last week, which magically seemed to disappear after I left the computer alone for several hours. Once it started to run ok last week, I updated Symantec, performed a virus check (no viruses), ran AdAware, ran Spybot and defragmented. Then, for a week the pc worked perfectly until now.

    At the outset of the problem yesterday, I was using Outlook Express when I noticed that my keyboard stopped functioning correctly. There were many missing letters to the message I typed. So I rebooted, tried Notepad, which worked fine initially and then the same keyboard issue occurred. Then, the computer spontaneously locked. When I tried to enter my user name and password, it would switch off between letting me type, not letting me type, typing random letters by itself, and making beeping sounds. The beeping sounds change from a beep when I tried to type a letter to occasionally sounding many beeps in a row without my touching the machine at all.

    Just in case the problem was related to downloading the firefox update w/plugin, I restarted in safe mode and rolled back the machine to the day before and it seemed to work fine again...until I restarted it this morning. Same issues occurring. Machine gave me problems entering my login and started beeping.

    I restarted in safe mode but I experience the same issues. However, every so often the machine works ok for a few minutes at a time. It allowed me to start AdAware in safe mode but then the keyboard spontaneously locked during its run and I could not log in again due to keyboard issues. I also connected a separate keyboard and it sometimes allows me to type and sometime not. Presently, I can't log back on to see the results of AdAware because I can't control the keyboard.

    I haven't even been able to complete the preliminary steps you suggest before posting this issue. I'm also uncertain if this is a malware or hw problem. The laptop is several years old at this point. Thanks in advance for advising.
     
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    First thing to try is a different keyboard.....let us know.:)
     
  3. lpeter

    lpeter Private E-2

    Ok, my computer has returned to normal for the time being just as it did last week when the same issues occurred. Igave me the chance to run all of the prlim steps indicated.

    - At the outset I checked symantec for the viruses it had found recently. There are 2 files sitting in quarantine that i tried to delete. When I tried to delete them I received feedback that they were deleted, yet they still seem to be sitting in quarantine. When I try to delete them it now says it can't because it's already been deleted or it's in an email, which is not the case since the path shows that both viruses were sitting in subfolders of java/cache/...). I also noticed that my Symantec AV sw can no longer scan my computer. It simply indicates that it has encountered a problem and needs to close. It appears to have been disabled (by the virus?).

    - Had to run avg instead of counterspy. It found 1 threat -- Worm.AimVen. I "applied all actions". (I then went to the add/remove software application in the control panel and removed AIM. However I see that there is still an AIM95 folder on my hard drive with a data file in it.)

    - bdscan found 10 infected files, I believe they were mostly if not all variations of Generic.Peed.Eml.

    - Active scan found 1 item -- Spyware:Cookie/Tribalfusion


    Attaching files to this email and a follow-up.
     

    Attached Files:

  4. lpeter

    lpeter Private E-2

    more attachments
     

    Attached Files:

  5. lpeter

    lpeter Private E-2

    I reran avg realizing that I ran it the first time in safe mode. Upon rerunning it, it found 6 malware items, 5 were tracking cookies and 1 was the Aim.Ven worm again. It quarantined Aim.Ven when I applied all actions. Attached is a report that says it found nothing, which is confusing to me.
     

    Attached Files:

  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Use add/remove programs to uninstall:
    Viewpoint Media Player
    J2SE Runtime Environment 5.0 Update 6"
    J2SE Runtime Environment 5.0"
    Java 2 Runtime Environment, SE v1.4.1_01"
    Java Web Start"
    Java(TM) 6 Update 2
    Java(TM) SE Runtime Environment 6 Update 1
    MarketResearch

    Otherwise, you are looking clean.

    Are you still having problems?
     
  7. lpeter

    lpeter Private E-2

    I think I got everything except "market research", which I did not see in the add/remove programs area. I searched my computer for it but still did not find it. My computer is operating normally but my fear is that the symptoms have disappeared only to return again soon, as they did this past week. Some questions for you:

    1. Are the symptoms I experienced consistent with the viruses we deleted?
    2. My Symantec AV still cannot scan, should I replace it? If so, what do you recommend?

    Thanks, Tim!
     
  8. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Get rid of your IE toolbars and add-ons ....

    I see you are running the client software for symnatec ....is this a networked computer?

    Best bet would be to uninstall and reinstall ....assuming this is a paid for program.

    If not, I'd uninstall and use a different AV program (Avast or AVG) ...(again, if this is not a networked computer in a work situation).

    Otherwise, Your logs look clean. You may uninstall any programs we had you download (including CounterSpy, etc).

    If you are not having any other malware problems, it is time to do our final steps:

    1. If we used Pocket Killbox during your cleanup, do the below
    * Run Pocket Killbox and select File, Cleanup, Delete All Backups
    2. If we used ComboFix you can delete the ComboFix.exe file and associated C:\combofix.txt log that was created.
    3. If we user SDFix you can delete all the SDFix related files and folders from your Desktop or whereever you installed it.
    4. If we used VundoFix, you can delete the VundoFix.exe file and the C:\VundoFix Backups folder and C:\vundofix.txt log that was created.
    5. If we had your run FixWareOut, you can delete the Fixwareout.exe file and the C:\fixwareout folder.
    6. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    7. You can delete the ShowNew.Zip and GetRunkey.Zip files and the files that you extracted from the ZIP files. You can also delete the C:\newfiles.txt and C:\runkeys.txt logs that were created
    8. If you are running Windows XP or Windows ME, do the below:
    * go back to step 8 of the READ & RUN ME to Disable System Restore which will flush your Restore Points.
    * Then reboot and Enable System Restore to create a new clean Restore Point.
    9. After doing the above, you should work thru the below link:
    * How to Protect yourself from malware!
     
  9. lpeter

    lpeter Private E-2

    Ok, will do. Many thanks again, Tim! Do you think that the locked keyboard, random keystrokes and beeping were symptomatic of the types of viruses deleted?
     
  10. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Normally I would say no ...but new viruses that are popping up are apt to do almost anything. Good luck and safe surfing. :)
     
  11. lpeter

    lpeter Private E-2

    Aaahhh!!! My worst fears have materialized. After going thru all of the final steps recommended, installing new spywire, AV, firewall, etc. computer was running fine for a day. And just now, I began to experience the same issues. Loss of keyboard control and beeping. Could I be reinfected or do you think it's a hw problem? Using a different keyboard seems to help only some of the time oddly enough. There are times when the machine enters characters by itself and won't let me control it. What do you suggest? Thx.
     
  12. lpeter

    lpeter Private E-2

    While awaiting your response I decided to once again go thru all prelim steps and post new scan files. I'm in the middle of the process and while using bdscan it has found a bunch of viruses in my email folders, which are being deleted. They all seem to be of the generic.peed.eml variety, the same ones we deleted yesterday. I installed a sw firewall yesterday but the constant requests to allow access to the computer are confusing. When I look up whether the requests are legit, the answer is sometimes yes and sometimes no. I might have inadvertently allowed access to something that could have reinfected my computer, or the scans did not pick up all of the instances of the virus yesterday. I will post logs later this evening or tomorrow
     
  13. lpeter

    lpeter Private E-2

    Re: trouble again - keyboard locks up and occasional beeping

    Per my posting yesterday, my problems recurred. I ran all of the prelim steps again. Bdscan got rid of about 7 instances of the "generic.peed.eml" virus in my email folders. I ran Panda scan twice since I saw no link to "get report" after closing the pop-up window. Nevertheless both scans were completely clean. Now using Comodo firewall but quite frankly I find it's confusing know what to let thru and what to block. Could that have let the same exact virus thru to my computer. As I type this message I see that whatever problems I'm having are again recurring (keyboard is intermittently not registering the keys I type. I plugged in another keyboard and now I can type again. Hardware problem? Motherboard? See attached logs. Thanks.
     

    Attached Files:

  14. lpeter

    lpeter Private E-2

    more attachments.
     

    Attached Files:

  15. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I'm still not seeing anything malicious ...but lets do a few things:
    Please download ATF Cleaner by Atribune. This program does not require an installation. The executable actually runs the program.

    NOTE: This program is for Windows XP and Windows 2000 only. ATF Cleaner will remove all files from the items that are checked so if you have some cookies you'd like to save. Please move them to a different directory first.

    * Double-click ATF-Cleaner.exe to run the program.
    * Under Main choose: Select All
    * Click the Empty Selected button.

    If you use Firefox browser

    * Click Firefox at the top and choose: Select All
    * Click the Empty Selected button.
    o NOTE: If you would like to keep your saved passwords, please click No at the prompt.

    If you use Opera browser

    * Click Opera at the top and choose: Select All
    * Click the Empty Selected button.
    o NOTE: If you would like to keep your saved passwords, please click No at the prompt.

    Click Exit on the Main ATF Cleaner menu to close the program.

    Now:
    Download Blacklight Beta
    • Download blbeta.exe and save it to the Desktop.
    • Once saved... double click blbeta.exe to install the program.
    • Click accept agreement and Click scan
      This app too may fire off a warning from antivirus. Let the driver load.
      Wait for it to finish.
    • If it displays any items...don't do anything with them yet. Just hit exit (close)
    • It will drop a log on Desktop that starts with fsbl....big number
    Please post contents of the BlackLight log.


    Then give this second rootkit detector a run and attach the log: AVG Anti-Rootkit
     
  16. lpeter

    lpeter Private E-2

    Tim, i followed steps until Blacklight ok. All was clean as far as I could tell. Once I clicked to go to blacklight there was no content on the page. So I googled F-secure and eventually found a beta product that might be a later version of what you wanted me to use. You might check out http://support.f-secure.com/enu/home/ols.shtml to see if this is where users should be sent in the future. However, I ran it twice and it did not work for me. The app took hours and hours to run and then it did not provide a report. Instead it said that IE could not access the page. Subsequently my computer starting acting up again to the point where I could not log on after the keyboard spontaneously locked. Beeping and no control of keyboard when I turn on the computer, with the user field and password fields flashing/highlighting characters that I did not type. Net, I've given up. Today purchased a new computer. My hope is that it was a hw problem and not a virus so I won't get reinfected with anything when I try to load some of my files into the new computer. I have scanned the files I'm going to load (Mcafee and bit defender) and they seem clean.

    AAARRRRRGHHHHHHH! Thank you for your help, anyway! What would your best guess be on the nature of the problem at this point?
     
  17. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Beeping when you turn on the computer is an indication that your post test is failing some component ....you can go to your manufacturer's home page and search for "beep codes" and it should tell you what the beeps indicate. You can post in the hardware section for further help with these issues. :)

    Sorry for the bad link to Blacklight ...not sure what happened to it ...have you tried doing a repair installation? Instructions here: xp repair install
     
  18. lpeter

    lpeter Private E-2

    Ok, will try to check it out when I have some spare time. Trying to make up for lost time this week already. Thanks again for your efforts.
     
  19. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    No problem ....keep us posted. :)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds