Показано с 1 по 6 из 6.

Virus Bloked my keyboyboard & Mouse

  1. #1
    Junior Member Репутация
    Регистрация
    11.02.2009
    Сообщений
    3
    Вес репутации
    33

    Virus Bloked my keyboyboard & Mouse

    Some virus or malware (I think a macro) block the keyboard (and mouse) as soon as I touch one key. Not always but often. How can I remove that? attached the log. Some time also appens that I am not able to "open" the drive, a window ask me "whic program want to use to open the file?" (more or less). the only way to see the files on the drive (can be an hardisk or a removable key) is to select "internet explorer" to open the "file"!!
    Any suggestion?
    Вложения Вложения

  2. #2
    Senior Member Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Аватар для drongo
    Регистрация
    17.09.2004
    Адрес
    Israel
    Сообщений
    7,165
    Вес репутации
    971
    Please execute this script: http://avptool.virusinfo.info/en/AVP...curescript.htm
    Код:
    begin
    SearchRootkit(true, true);
    SetAVZGuardStatus(True);
     QuarantineFile('C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80ITA.DLL','');
     QuarantineFile('C:\WINDOWS\system32\Drivers\rdwm1061.sys','');
     QuarantineFile('C:\WINDOWS\system32\Drivers\sddriver.sys','');
     QuarantineFile('C:\WINDOWS\system32\drivers\AsInsHelp32.sys','');
     QuarantineFile('C:\PROGRA~2\CoCreate\MEls\MEls.exe','');
    BC_ImportAll;
    BC_Activate;
    RebootWindows(true);
    end.
    It will just copy some files, please find the AVZ_quarantine folder in sub folder of avptool,
    Zip it (remember to protect it with password virus and send by http://virusinfo.info/upload_virus_eng.php?tid=39941
    Let us know, when you done.

  3. #3
    Junior Member Репутация
    Регистрация
    11.02.2009
    Сообщений
    3
    Вес репутации
    33

    Executed - Zipped & Sent

    OK Drongo, first of all I wish to thank you for your help.
    I have executed the script, then zipped the quarantine file (is name is "2009-02-18.zip" zipped with password "virus" as per your request and sent.

    I will waiting for your reply.

    Ciao!
    Marbo




    Цитата Сообщение от drongo Посмотреть сообщение
    Please execute this script: http://avptool.virusinfo.info/en/AVP...curescript.htm
    Код:
    begin
    SearchRootkit(true, true);
    SetAVZGuardStatus(True);
     QuarantineFile('C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80ITA.DLL','');
     QuarantineFile('C:\WINDOWS\system32\Drivers\rdwm1061.sys','');
     QuarantineFile('C:\WINDOWS\system32\Drivers\sddriver.sys','');
     QuarantineFile('C:\WINDOWS\system32\drivers\AsInsHelp32.sys','');
     QuarantineFile('C:\PROGRA~2\CoCreate\MEls\MEls.exe','');
    BC_ImportAll;
    BC_Activate;
    RebootWindows(true);
    end.
    It will just copy some files, please find the AVZ_quarantine folder in sub folder of avptool,
    Zip it (remember to protect it with password virus and send by http://virusinfo.info/upload_virus_eng.php?tid=39941
    Let us know, when you done.

  4. #4
    Senior Member Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Аватар для drongo
    Регистрация
    17.09.2004
    Адрес
    Israel
    Сообщений
    7,165
    Вес репутации
    971
    Don't quote all my posts, ok
    I think, this program: C:\PROGRA~2\CoCreate\MEls\MEls.exe cause this- do you know what is this?
    better uninstall it, if you unable to do it, you can use this script:
    Код:
    begin
    SearchRootkit(true, true);
    SetAVZGuardStatus(True);
     DeleteFile('C:\PROGRA~2\CoCreate\MEls\MEls.exe');
    BC_ImportDeletedList;
    ExecuteSysClean;
    BC_Activate;
    ExecuteRepair(6);
    ExecuteRepair(8);
    ExecuteRepair(9);
    SetAVZPMStatus(true);
    RebootWindows(true);
    end.
    If it doesn't solve your problem, let us know

  5. #5
    Junior Member Репутация
    Регистрация
    11.02.2009
    Сообщений
    3
    Вес репутации
    33

    Program

    "I think, this program: C:\PROGRA~2\CoCreate\MEls\MEls.exe cause this- do you know what is this?
    better uninstall it..."

    Hi Drongo, the program that you said is a 3D cad (the program name is MI by CoCreate) that I use to design mechanical parts.
    May be is better if I resume the situation from the beginning.
    Two weeks ago, suddenly, I had a problem with my computer: I was no more able to "open" a drive (hard disk or removable). All the time that I select a drive a system window pop up and ask me to choose which program it has to use to open the file (The FILE???..it is an hardisk..stupid computer, not a file!!). The only way to open a drive and see the files was to select "explorer" from the list of programs to use to open the "file".

    Following that I scan the whole computer with 4 or 5 different antivirus, delete the indicated files and ...it was seem that the problem was resolved... (soon I discover that this was not completely true! in fact sometimes when I insert a usb key, the same system window pop up again)
    Just the next day I open a file (.RTF) and IMMEDIATELY after, the computer start to block the keybord and mouse.
    That is the picture. I wish to avoid to format the harddisk...too many programs to re-install and mails to recover...
    Do you think you can help me?
    waiting for suggestion.
    Thank you again.
    Marbo

  6. #6
    Senior Member Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Аватар для drongo
    Регистрация
    17.09.2004
    Адрес
    Israel
    Сообщений
    7,165
    Вес репутации
    971
    I don't see signs of virus infection, try to unistall all your "anti" , then execute this script in avz:

    Код:
    begin
    ExecuteRepair(1);
    ExecuteRepair(6);
    ExecuteRepair(8);
    ExecuteRepair(9);
    RebootWindows(true);
    end.
    After that try ccleaner ( portable version* http://www.ccleaner.com/download/bui...ading-portable ) - very nice program, perhaps it will solve your problem without formatting.

    try follow the rules : http://virusinfo.info/showthread.php?t=9184, perhaps in a new logs we will be able to see something new.
    Последний раз редактировалось drongo; 20.02.2009 в 00:53.

Похожие темы

  1. C:\Documents and Settings\ IS BLOKED
    От akram fattoum в разделе AntiViruses, Anti-Adware / Spyware / Hijackers
    Ответов: 0
    Последнее сообщение: 02.08.2011, 05:08
  2. virus affecting mouse
    От researcher.ernesto в разделе Malware Removal Service
    Ответов: 1
    Последнее сообщение: 25.04.2010, 10:33
  3. Ответов: 5
    Последнее сообщение: 26.11.2009, 14:15
  4. Ответов: 4
    Последнее сообщение: 04.08.2009, 12:17
  5. Intermittent mouse right click etc
    От allisia в разделе Malware Removal Service
    Ответов: 6
    Последнее сообщение: 05.07.2008, 06:13

Свернуть/Развернуть Ваши права в разделе

  • Вы не можете создавать новые темы
  • Вы не можете отвечать в темах
  • Вы не можете прикреплять вложения
  • Вы не можете редактировать свои сообщения
  •  
Page generated in 0.00211 seconds with 17 queries