Virus Bloked my keyboyboard & Mouse

[marbo]

Some virus or malware (I think a macro) block the keyboard (and mouse) as soon as I touch one key. Not always but often. How can I remove that? attached the log. Some time also appens that I am not able to "open" the drive, a window ask me "whic program want to use to open the file?" (more or less). the only way to see the files on the drive (can be an hardisk or a removable key) is to select "internet explorer" to open the "file"!!
Any suggestion?

[drongo]

Please execute this script: http://avptool.virusinfo.info/en/AVP...curescript.htm

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80ITA.DLL','');
 QuarantineFile('C:\WINDOWS\system32\Drivers\rdwm1061.sys','');
 QuarantineFile('C:\WINDOWS\system32\Drivers\sddriver.sys','');
 QuarantineFile('C:\WINDOWS\system32\drivers\AsInsHelp32.sys','');
 QuarantineFile('C:\PROGRA~2\CoCreate\MEls\MEls.exe','');
BC_ImportAll;
BC_Activate;
RebootWindows(true);
end.

It will just copy some files, please find the AVZ_quarantine folder in sub folder of avptool,
Zip it (remember to protect it with password virus and send by http://virusinfo.info/upload_virus_eng.php?tid=39941
Let us know, when you done.

[marbo]

OK Drongo, first of all I wish to thank you for your help.
I have executed the script, then zipped the quarantine file (is name is "2009-02-18.zip" zipped with password "virus" as per your request and sent.

I will waiting for your reply.

Ciao!
Marbo

Please execute this script: http://avptool.virusinfo.info/en/AVP...curescript.htm

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80ITA.DLL','');
 QuarantineFile('C:\WINDOWS\system32\Drivers\rdwm1061.sys','');
 QuarantineFile('C:\WINDOWS\system32\Drivers\sddriver.sys','');
 QuarantineFile('C:\WINDOWS\system32\drivers\AsInsHelp32.sys','');
 QuarantineFile('C:\PROGRA~2\CoCreate\MEls\MEls.exe','');
BC_ImportAll;
BC_Activate;
RebootWindows(true);
end.

It will just copy some files, please find the AVZ_quarantine folder in sub folder of avptool,
Zip it (remember to protect it with password virus and send by http://virusinfo.info/upload_virus_eng.php?tid=39941
Let us know, when you done.

[drongo]

Don't quote all my posts, ok
I think, this program: C:\PROGRA~2\CoCreate\MEls\MEls.exe cause this- do you know what is this?
better uninstall it, if you unable to do it, you can use this script:

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteFile('C:\PROGRA~2\CoCreate\MEls\MEls.exe');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(6);
ExecuteRepair(8);
ExecuteRepair(9);
SetAVZPMStatus(true);
RebootWindows(true);
end.

If it doesn't solve your problem, let us know

[marbo]

"I think, this program: C:\PROGRA~2\CoCreate\MEls\MEls.exe cause this- do you know what is this?
better uninstall it..."

Hi Drongo, the program that you said is a 3D cad (the program name is MI by CoCreate) that I use to design mechanical parts.
May be is better if I resume the situation from the beginning.
Two weeks ago, suddenly, I had a problem with my computer: I was no more able to "open" a drive (hard disk or removable). All the time that I select a drive a system window pop up and ask me to choose which program it has to use to open the file (The FILE???..it is an hardisk..stupid computer, not a file!!). The only way to open a drive and see the files was to select "explorer" from the list of programs to use to open the "file".

Following that I scan the whole computer with 4 or 5 different antivirus, delete the indicated files and ...it was seem that the problem was resolved... (soon I discover that this was not completely true! in fact sometimes when I insert a usb key, the same system window pop up again)
Just the next day I open a file (.RTF) and IMMEDIATELY after, the computer start to block the keybord and mouse.
That is the picture. I wish to avoid to format the harddisk...too many programs to re-install and mails to recover...
Do you think you can help me?
waiting for suggestion.
Thank you again.
Marbo

[drongo]

I don't see signs of virus infection, try to unistall all your "anti" , then execute this script in avz:

begin
ExecuteRepair(1);
ExecuteRepair(6);
ExecuteRepair(8);
ExecuteRepair(9);
RebootWindows(true);
end.

After that try ccleaner ( portable version* http://www.ccleaner.com/download/bui...ading-portable ) - very nice program, perhaps it will solve your problem without formatting.

try follow the rules : http://virusinfo.info/showthread.php?t=9184, perhaps in a new logs we will be able to see something new.