My Keyboard has been Remapped. Help! Part II

Well, it looks like I am not having a good month. In addition to programs and windows being opened on my computer (even when I am not online) I now have had my keyboard somehow remapped.

I was sitting there typing, I started to see and hear a lot of unexplained hard drive activity, and then when it stopped, some of my keys were re mapped. For instance when I hit "M" I get the number "0." When I hit the number "0" I don't get the letter "M" but "0" again, so "M" seems to have dissappeared. I would say about a quarter of all my keys are like this.

I updated my Trend Micro PC-Cillian anti-virus and ran and updated Spybot and they found nothing.

I tried a search on google, and on the Major Geeks forum and did not find anything helpful. Has anyone heard of this problem before?

Any help would be greatly appreciated.

-Big D

 

Does the same thing happen in Safe Mode?

 

Check the Language settings, and check your startup items (startup folder and registry run keys). Someone could have put a joke program that re-mapped your keys.

 

Thanks guys for your posts. I am on a notebook (Sony Vaio VX88) running Windows XP Home Edition (with all the updates installed).

I've also tried unplugging the USB wireless mouse and no dice.

Thanks for your help.

-Big D

 

Forgot to include my HijackThis scan info. I also checked my language settings and regional settings and they are listed as US. I checkeded the scan info below, but I don't have a technical enough eye to determine if one of those startup programs is causing me my grief.

Any help would be greatly appreciated (this is drivinb 0e 0ad!)

-Big D

Logfile of HijackThis v1.97.7
Scan saved at 11:09:05 AM, on 6/29/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\gearsec.exe
C:\WINDOWS\System32\r_server.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\Internet Security\Tmntsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Sony\HotKey Utility\HKserv.exe
C:\Program Files\Sony\Jog Dial Utility\JogServ2.exe
C:\program files\support.com\client\bin\tgcmd.exe
C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Trend Micro\Internet Security\PCClient.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Boingo\Boingo.exe
C:\Program Files\PowerPanel\Program\PcfMgr.exe
C:\Program Files\Verizon Online\SupportCenter\bin\mpbtn.exe
C:\Program Files\MSN\MSNCoreFiles\msn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Startup Sentry\SUS.exe
C:\Program Files\Startup Sentry\SUS.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Documents and Settings\Dimitrios K. Donavos\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://my.netzero.net/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.netzero.net/s/search?r=minisearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.netscape.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr*http://my.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ie/defaults/sb/ymsgr/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sony.com/vaiopeople
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://my.netzero.net/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Verizon Online
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 209.47.38.116:8000
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: URLSearchHook Class - {37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} - C:\Program Files\nzsearch\nzsearchenh.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\adobe\acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: ZeroBar - {F5735C15-1FB2-41FE-BA12-242757E69DDE} - C:\Program Files\NetZero\toolbar.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [HKSERV.EXE] C:\Program Files\Sony\HotKey Utility\HKserv.exe
O4 - HKLM\..\Run: [JOGSERV2.EXE] C:\Program Files\Sony\Jog Dial Utility\JogServ2.exe
O4 - HKLM\..\Run: [ZTgServerSwitch] c:\program files\support.com\client\bin\tgcmd.exe /server
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security\pccguide.exe"
O4 - HKLM\..\Run: [PCClient.exe] "C:\Program Files\Trend Micro\Internet Security\PCClient.exe"
O4 - HKLM\..\Run: [TM Outbreak Agent] "C:\Program Files\Trend Micro\Internet Security\TMOAgent.exe" /run
O4 - HKLM\..\Run: [HT] C:\Program Files\Internet Security Alliance\pcHacker Tracker\pcHT.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Startup Sentry] C:\Program Files\Startup Sentry\SUS.exe /quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Boingo.lnk = ?
O4 - Global Startup: PowerPanel.lnk = ?
O4 - Global Startup: Verizon Online Support Center.lnk = C:\Program Files\Verizon Online\SupportCenter\bin\matcli.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Control Pad (HKLM)
O9 - Extra 'Tools' menuitem: Control Pad (HKLM)
O9 - Extra button: Research (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0401.cab
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {D06A22B4-6087-4D3D-B7AF-82B113E9ABD4} (CPostLaunch Object) - http://www2.verizon.net/update/msnwebinstall/includes/vzWebIns.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

 

Ok UPDATE: I'm a few bad intels away from a WMD claim...

Apparently, after doing some further research in the sony manual, the well hidden and not well labeled "NumLk" key activates the keypad mapping and turns some of the letters into numbers.

DOH!!

Thanks to those of you who posted, and my apologies for wasting everyones time. Looks like I've got one less thing for the priest to worry about when he comes over to rid the unholy spirit thats taken control of my mouse cursor and opens programs on its own...

http://majorgeeks.com/vb/showthread.php?p=368625#post368625

 

BigD, Damn, I should have realised that was the solution to your laptop problem. My laptop has M and 0 (zero) as alternatives. I guess all brands have. I am going to have to read my manual (when all else fails) as I WANT to swap them occasionally to type out special characters, using a combination of the green Function key (Fn), ALT and numeric keypad to achieve this.

thanks again for the jolt to my memory cells. Bazza

===

 

How 2 type special characters on my (Gateway) laptop keyboard.

Finally, after 4 1/2 years I have bothered to look closely at my laptop keyboard. Still haven't RTFM. I've figured out how to type special characters. At least 1 anyhow.

Applause and plaudits will be welcome.

Press the green Fn key (Function) (bottom left), then the F9 key (Function key #9) at the same time, to lock in the (key)Pad-Lock, written in green on the F9 function key.

Then the Alt Key and the j(1) l(3) and m(0) keys, one after the other, to get é as in résumé. I've been typing out job applications, you see.

Correct spelling is with 2 x é's, not 1 x é, or no é's at all by those too dumb/lazy to figure it out for themselves. Only took me 4 1/2 years.

Note to self, check out superscript and subscript in the next 4.5 years.

He33 5've g6ne 0ad w5th the *6wer.

Sorry that should read Hell I've gone mad with the power.
(forgot to turn the bloody Pad-Key lock off).

Boy what an exercise, I think I will to stick to typing CV (it's easier), or just plug in a full size keyboard, press and hold down the Alt key and then 130 on the numeric keyboard.

Oh well, now I know how to, if I have to, so I guess the time wasn't completely wasted.

Another bit of useless, or useful, information to be tucked away in the remote recesses of the gray matter. I think it was Xflat who said useful, rather than useless, when I posted a previous gem on stalactites and stalagmites. If not Xflat, apologies to whoever it was. Bazza

PS: Similar variants/methods will apply to most laptops, for those who can be bothered. Baz.

===