pc in bad shape

Discussion in 'Malware Help (A Specialist Will Reply)' started by tilelayher, Jun 2, 2006.

  1. tilelayher

    tilelayher Private E-2

    My sister logged onto our family pc yesterday and i was on it all day and it was fine as soon as she logged on, the keyboard was acting goofy, if u press the alt key a search box opens, if you press a on the keyboard the internet explorer window opens, i cannot even log in because my password has symbols that open windows, luckily hers doesnt so i have to work under her account and mine is an admins and her isnt anyways, i have some log files, i am unable to run panda scan it wont let me and i did eventhing i was supposed to, i think. please help thanks
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Sounds more like a hardware problem than malware. It sounds like your keyboard was reprogrammed. Is it a programmable keyboard?

    You did not uninstall the below in step 0 of the READ ME. Uninstall them now:
    Viewpoint Manager
    MyWebSearch Email Plugin
    BearShare


    Now Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/148aebd66c1b32f48321/netzip/RdxIE601.cab
    O16 - DPF: {A93B47FD-9BF6-4DA8-97FC-9270B9D64A6C} (VaPgCtrl Class) - http://bronwnies.dyndns.org:8080/plugin/h263ctrl.cab

    After clicking Fix, exit HJT.:
    Now reboot in normal mode and post a new HJT log.

    Make sure you tell me how things are working now.
     
  3. tilelayher

    tilelayher Private E-2

    the keyboards still messed up, when i press lettter kets they do different things and i really do not think the letter keys are reporgrammable
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Your keyboard problems are not due to malware. Try a different keyboard or check to see if your keyboard is reprogrammable and reset it to default.

    Does your keyboard work okay when you boot into safe mode?

    How come your HijackThis program is now in the exact incorrect location and why do I see different items in the log. Also I still see some items I asked you to uninstall.

    Are you now posting a log from a different user account? You should not be doing that! One user account should be finished before going to another and you need to tell us when you change accounts. Also you must run all steps (except step 6) or the READ & RUN ME for each user account.

    Install HJT properly per step 7 of the READ ME and uninstall those items I already asked you to uninstall. If they are already uninstalled, just continue to the below where we will manually fix them anyway.

    Now Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://y/
    O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe
    O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
    O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe


    After clicking Fix, exit HJT. And reboot into safe mode and delete the below:
    C:\Program Files\MYWEBS~1 <--- or MyWebSearch Email Plugin (whatever it is named
    C:\Program Files\BearShare

    Now reboot in normal mode and post a new HJT log.

    Make sure you tell me how things are working now.
     
  5. tilelayher

    tilelayher Private E-2

    the keybo is in bd shpe i cnt press the key to the left of s still

    heres the log
     

    Attached Files:

  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I repeat some text from my previous message
    And now......where did the below new item come from and what is it?
    O4 - HKLM\..\RunOnce: [InstallShieldSetup] C:\PROGRA~1\INSTAL~1\{036AA~1\Setup.exe -rebootC:\PROGRA~1\INSTAL~1\{036AA~1\reboot.ini -l0x9


    Read the below too:
    http://www.liutilities.com/products/wintaskspro/processlibrary/itouch/
     
    Last edited: Jun 3, 2006
  7. tilelayher

    tilelayher Private E-2

    the keybord doenst work in sfe mode. ive never hd ne problems with it before but ll the sudden it strted cting very differnet, should i remove the link you posted in hyjinx thisz

    wht m i supposed to do with the link you put for itouchz
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    What is is from? What are you trying to install? It was not in your previous logs?


    I was trying to show you that you have Logitech itouch keyboard which appears to be programmable. Check your documentation to see how to reset it to defaults. I cannot help you with a hardware issue like this in the malware forum. You may want to also look at the below link. Perhaps it will work for your keyboard.


    My iTouch keys aren't doing what they are supposed to.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds