Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

PS/2 Keyboard Driver missing on Vista after virus cleanup


  • This topic is locked This topic is locked
46 replies to this topic

#1 rppgaty

rppgaty

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:25 AM

Posted 09 March 2012 - 08:12 PM

Hey there. I was hoping I could get some help with this problem. As the title says, the PS/2 Keyboard Driver is missing.
I cannot use the Keyboard once the computer boots into windows. It works fine in Linux, GRUB, and Windows Recovery Mode.

Here's the hijack this! log...and this system was affected by rootkit.zeroaccess

Mod Edit: Removed malware log data, No DDS, HijackThis, or ComboFix logs should be posted in this forum. - BleepingComputer.com - http://www.bleepingcomputer.com/forums/forum-56/announcement-45-no-dds-hijackthis-or-combofix-logs-should-be-posted-in-this-forum/ and the lack of keyboard driver does not appear to be malware issue ~ Hamluis.

Edited by hamluis, 10 March 2012 - 07:49 AM.


BC AdBot (Login to Remove)

 


#2 jtokarchuk

jtokarchuk

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Dauphin, MB, Canada
  • Local time:04:25 AM

Posted 10 March 2012 - 11:01 AM

Have you tried a system restore to a previously working state?

does the keyboard just not work, or does it show up flagged in device manager?
If I have not responded to you within 24 hours, please PM me.

#3 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,658 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:02:25 AM

Posted 10 March 2012 - 11:56 AM

and this system was affected by rootkit.zeroaccess

This is serious infection.

Please follow the instructions in ==>This Guide<== starting at Step 6. If you cannot complete a step, skip it and continue.

Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.

If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.

It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.

If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#4 hamluis

hamluis

    Moderator


  • Moderator
  • 55,384 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:04:25 AM

Posted 10 March 2012 - 12:51 PM

<<Driver missing on Vista after virus cleanup>>

That title implies that malware is not a consideration...but Broni has raised a valid point.

Are you saying that your system is infected...or are you saying that it's not infected but your keyboard doesn't work properly?

Louis

#5 jtokarchuk

jtokarchuk

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Dauphin, MB, Canada
  • Local time:04:25 AM

Posted 10 March 2012 - 01:03 PM

I have seen this a lot -- it's a byproduct of some infections. You could also try a "sfc /scannow" from a command prompt.
If I have not responded to you within 24 hours, please PM me.

#6 Allan

Allan

  • BC Advisor
  • 8,562 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:05:25 AM

Posted 10 March 2012 - 01:06 PM

Let's start at the top. Windows does not require a keyboard driver. The ability to use a keyboard (and a mouse) is built into the OS. As is suggested above, your problem is a direct result of the infection.

#7 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,920 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:12:25 PM

Posted 10 March 2012 - 01:21 PM

Hello, can you use an USB mouse to be able to run the following file?

Please download and run the following file and let me know if that fixes the problem.
http://download.bleepingcomputer.com/win-services/vista/i8042prt.reg

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#8 rppgaty

rppgaty
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:25 AM

Posted 10 March 2012 - 03:22 PM

Have you tried a system restore to a previously working state?

does the keyboard just not work, or does it show up flagged in device manager?



I cannot System Restore, as there are no Restore Points. Nothing shows up as a "keyboard" under Device Manager.

#9 rppgaty

rppgaty
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:25 AM

Posted 10 March 2012 - 03:24 PM

<<Driver missing on Vista after virus cleanup>>

That title implies that malware is not a consideration...but Broni has raised a valid point.

Are you saying that your system is infected...or are you saying that it's not infected but your keyboard doesn't work properly?

Louis


The system is no longer infected AFAIK, but when I had tried to remove the affected file (using Ubuntu) from system32 and rebooted, I couldn't get the keyboard to work.

Edited by rppgaty, 10 March 2012 - 03:51 PM.


#10 rppgaty

rppgaty
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:25 AM

Posted 10 March 2012 - 03:54 PM

Hello, can you use an USB mouse to be able to run the following file?

Please download and run the following file and let me know if that fixes the problem.
http://download.bleepingcomputer.com/win-services/vista/i8042prt.reg


I'll try this right after I finish trying what Broni suggested.

#11 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,920 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:12:25 PM

Posted 10 March 2012 - 04:08 PM

Please hold off with Broni's suggestions for now. If necessary I'll move this topic to the malware removal forum, but no need to do these steps right now.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#12 rppgaty

rppgaty
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:25 AM

Posted 10 March 2012 - 05:02 PM

Oh No. Too late for that. I've already gone and did it. I also tried yours...none of them worked.

Edited by rppgaty, 10 March 2012 - 05:07 PM.


#13 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,920 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:12:25 PM

Posted 11 March 2012 - 02:02 AM

You mention you have Linux available? If so, can you verify the following file exists: c:\windows\system32\drivers\i8042prt.sys

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#14 rppgaty

rppgaty
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:25 AM

Posted 11 March 2012 - 02:26 PM

You mention you have Linux available? If so, can you verify the following file exists: c:\windows\system32\drivers\i8042prt.sys


Yes that file exists.

#15 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,920 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:12:25 PM

Posted 11 March 2012 - 02:39 PM

Can you upload that file to http://www.virustotal.com? If asked reanalyse. Link me to the scan results.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users