Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

My keyboard doesn't work and my conputer does a weird sound when started 99% sur


  • This topic is locked This topic is locked
12 replies to this topic

#1 commonslow

commonslow

  • Members
  • 5 posts
  • OFFLINE
  •  

Posted 09 March 2017 - 10:15 AM

Attached File  Addition.txt   51.97KB   2 downloadsAttached File  FRST.txt   24.24KB   4 downloads



BC AdBot (Login to Remove)

 


#2 Sirawit

Sirawit

    Bleepin' Brony


  • Malware Response Team
  • 4,156 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Thailand
  • Local time:09:19 PM

Posted 09 March 2017 - 12:56 PM

Hello commonslow and welcome to BleepingComputer!           :)

 

My name is Sirawit and I'm here to help you.

 

If I don't reply after 2 days, feel free to PM me.          :)

==========================================================================

Some points for you to keep in mind:

  • Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planned. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.
  • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.
  • Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.
  • Do not attach logs or use code boxes, just copy and paste the text.
  • Periodically update me on the condition of your computer, and provide detail in every post.
  • In the upper right-hand corner of the topic, you will see the "Follow this topic" button. Click on this then choose Immediate E-Mail notification and then Proceed and you will be sent an email once I have posted a response.
  • If you do not reply to your topic after 3 days I will bump the topic, if you didn't reply in next 3 days we assume it has been abandoned and I will close it.
  • Once things seem to be working again, please do not abandon the thread. I will give an "all-clean" message at the very end with some additional information on how to stay malware-free.
  • Lastly, I would like to remind you that most members here are volunteers, and sometimes "real life" can get in the way of our malware hunt. I will notify you if I know I will need to be away for longer than 48 hours.

==========================================================================

 

I'm currently reviewing your log files and will reply back to you with more instructions as soon as possible.

 

Thank you.


If I don't reply back to you in 2 days, feel free to send me a PM.

 

“You’re lying… just like you were lying to me before. You have to hate me. I’ve been the worst daughter in the world… you should hate me.”

“But I don’t, Nyx. Because, Nyx, I’m your mother, and a mother will always love her daughter, no matter what.” -Past sins by Pen stroke.


#3 Sirawit

Sirawit

    Bleepin' Brony


  • Malware Response Team
  • 4,156 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Thailand
  • Local time:09:19 PM

Posted 09 March 2017 - 01:37 PM

Hi commonslow.

 

Could you please clarify your problem more thoroughly? Like how bad the keyboard problem is, and when the strange sound problem appears. Also if you have other symptoms please tell me.

 

Do you have any other keyboard you can use to test? This might be a hardware problem, not software.

 

 

Some warnings based on your log files:

-----------------

 

:step1: Using more than one anti-virus program is not advisableWhy? The primary concern with doing so is due to Windows resource management and significant conflicts that can arise especially when they are running in real-time protection mode simultaneously. Even if one of them is disabled for use as a stand-alone on demand scannerit can affect the other and cause conflicts. Anti-virus software components insert themselves deep into the operating systems core where they install kernel mode drivers that load at boot-up regardless of whether real-time protection is enabled or not. Thus, using multiple anti-virus solutions can result in kernel mode conflicts causing system instability, catastrophic crashes, slow performance and waste vital system resources. When actively running in the background while connected to the Internet, each anti-virus may try to update their definition databases at the same time. As the programs compete for resources required to download the necessary files this often can result in sluggish system performance or unresponsive behavior.

When scanning engines are initiated, each anti-virus may interpret the activity of the other as suspicious behavior and there is a greater chance of them alerting you to a "false positive". If one finds a virus or a suspicious file and then the other also finds the same, both programs will be competing over exclusive rights on dealing with that threat. Each anti-virus may attempt to remove the offending file and quarantine it at the same time resulting in a resource management issue as to which program gets permission to act first. If one anit-virus finds and quarantines the file before the other one does, then you may encounter the problem of both wanting to scan each other's zipped or archived files and each reporting the other's quarantined contents. This can lead to a repetitive cycle of endless alerts that continually warn you that a threat has been found after it has already been neutralized.

Anti-virus scanners use virus definitions to check for malware and these can include a fragment of the virus code which may be recognized by other anti-virus programs as the virus itself. Because of this, many anti-virus vendors encrypt their definitions so that they do not trigger a false alarm when scanned by other security programs. Other vendors do not encrypt their definitions and they can trigger false alarms when detected by the resident anti-virus. Further, dual installation is not always possible because most of the newer anti-virus programs will detect the presence of another and may insist that it be removed prior to installation. If the installation does complete with another anti-virus already installed, you may encounter issues like system freezing, unresponsiveness or similar symptoms as described above while trying to use it. In some cases, one of the anti-virus programs may even get disabled by the other.

To avoid these problems, use only one anti-virus solution. Please uninstall either ESET Endpoint or Microsoft Security Essentials.

 

-------------------

 

:step2: Going over your logs I noticed that you have uTorrent installed.

  • Avoid gaming sites, pirated software, cracking tools, keygens, and peer-to-peer (P2P) file sharing programs.
  • They are a security risk which can make your computer susceptible to a wide variety of malware infections, remote attacks, exposure of personal information, and identity theft. Many malicious worms and Trojans spread across P2P file sharing networks, gaming and underground sites.
  • Users visiting such pages may see innocuous-looking banner ads containing code which can trigger pop-up ads and malicious Flash ads that install viruses, Trojans and spyware. Ads are a target for hackers because they offer a stealthy way to distribute malware to a wide range of Internet users.
  • The best way to reduce the risk of infection is to avoid these types of web sites and not use any P2P applications.

It is pretty much certain that if you continue to use P2P programs, you will get infected again.
I would recommend that you uninstall uTorrent, however that choice is up to you. If you choose to remove these programs, you can do so via Start > Control Panel > Add/Remove Programs.

If you wish to keep it, please do not use it until your computer is cleaned.

 

----------------------

 

Thank you.


If I don't reply back to you in 2 days, feel free to send me a PM.

 

“You’re lying… just like you were lying to me before. You have to hate me. I’ve been the worst daughter in the world… you should hate me.”

“But I don’t, Nyx. Because, Nyx, I’m your mother, and a mother will always love her daughter, no matter what.” -Past sins by Pen stroke.


#4 commonslow

commonslow
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  

Posted 10 March 2017 - 09:47 AM

First of all, I had the same problem like 2 months ago, I then downloaded adwcleaner and it immediatly found 33 threats so it delteded them and ever since everything worked perfectly until now. I did the same thing, and It didnt work, at first it found 0 threats then it found around 30 but even after cleaning, the keyboard doesnt work..
I downloaded multiple programms that should help however one of them found 11 threats the other 7..
And they weren't even the same.
And now the malwarebytes programme keeps popping message about a page called prestoris . Com, which I was told is some kind of a virus..
And the computer does the same sound as an ekg machine when u die and u have the straight line..and it does this sound for like 5 seconds straight

 



#5 Sirawit

Sirawit

    Bleepin' Brony


  • Malware Response Team
  • 4,156 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Thailand
  • Local time:09:19 PM

Posted 10 March 2017 - 12:34 PM

Hi commonslow.

 

:step1: Please refer to this instruction and save your MBAM protection log from the day you get a notification about websites blocking. Export it as .TXT file and attach the file to your next reply.

 

:step2: Please go to C:\Adwcleaner and find your Adwcleaner log from 2 months ago that it find 33 items to clean. The log file will be named Adwcleaner[Cx].txt when x is a number. Post this log file in your next reply.

 

-------------------

 

:step3: We need to remove programs using "Programs and Features"

Click the "Start" orb on the taskbar, and then click the "Control Panel" button.

  • If you use Category mode, click on Uninstall a Program.
  • If you use Icons mode, click on Program and Features.

A list of programs installed will be "populated" (this may take a bit of time).
If they exist, uninstall the following by clicking on the below entries and selecting "Remove":

McAfee Security Scan Plus

Additional instructions can be found here if needed.

 

-------------------

 

:step4: We need to run a fix with FRST:

  • Please download the attached fixlist.txt file and save it to the same location as FRST
    Note: It's important that both files, FRST.exe/FRST64.exe and fixlist.txt are in the same location or the fix will not work
    NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
    Attached File  fixlist.txt   175bytes   2 downloads
  • Run FRST.exe/FRST64.exe and press the Fix button just once and wait
  • If for some reason the tool needs a restart, please make sure you let the system restart normally, then let the tool complete its run
  • When finished, FRST will generate a log (Fixlog.txt) in the same location the tool was run, please post it to your reply

==========

 

Thank you.


If I don't reply back to you in 2 days, feel free to send me a PM.

 

“You’re lying… just like you were lying to me before. You have to hate me. I’ve been the worst daughter in the world… you should hate me.”

“But I don’t, Nyx. Because, Nyx, I’m your mother, and a mother will always love her daughter, no matter what.” -Past sins by Pen stroke.


#6 commonslow

commonslow
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  

Posted 11 March 2017 - 03:03 AM

60 items to clean

Attached Files



#7 Sirawit

Sirawit

    Bleepin' Brony


  • Malware Response Team
  • 4,156 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Thailand
  • Local time:09:19 PM

Posted 12 March 2017 - 04:58 AM

Hi commonslow.

 

We need to run the SFC /SCANNOW Command

The sfc /scannow command (System File Checker) scans the integrity of all protected Windows system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible.

Note: Be aware that if you have modified your system files as in theming explorer/system files, running sfc /scannow will revert the system files such as explorer.exe back to its default state.

Note: Make the appropriate backups of your system files that you have modified for theming if you wish to save them before running sfc /scannow.

 

Note: This scan might take a long time to finish. Common running time is around 15-30 minutes.


For Windows Vista / 7:
 

  • Click the Windows "Orb" button.
  • Type cmd.
  • Right click on the search result cmd.exe and click Run as Administrator.

 

Next:

  • Copy the following line of text and paste it into the black box.
    (right-click in the black box and choose paste)

    sfc /scannow
  • Press Enter to run the command. 
    Note: This may take a while to finish.
  • If SFC could not fix something, then run the command again to see if it may be able to the next time. Sometimes it may take running the sfc /scannow command 3 or more times to completely fix everything that it's able to.


Retrieving SFC /scannow log

For Windows Vista / 7:
 

  • Click the Windows "Orb" button.
  • Type cmd.
  • Right click on the search result cmd.exe and click Run as Administrator.
  • Copy the following line of text and paste it into the black box.
    (right-click in the black box and choose paste)

    findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt"
  • Press Enter to run the command.
  • A text file sfcdetails.txt should appear on your desktop. Post the content of the file in your next reply.

Thank you.


If I don't reply back to you in 2 days, feel free to send me a PM.

 

“You’re lying… just like you were lying to me before. You have to hate me. I’ve been the worst daughter in the world… you should hate me.”

“But I don’t, Nyx. Because, Nyx, I’m your mother, and a mother will always love her daughter, no matter what.” -Past sins by Pen stroke.


#8 commonslow

commonslow
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  

Posted 12 March 2017 - 05:35 AM

Thanks sir for all this help so far, but how do I press enter in cmd if my keyboard doesn't work? I reply to you only by using my phone

#9 Sirawit

Sirawit

    Bleepin' Brony


  • Malware Response Team
  • 4,156 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Thailand
  • Local time:09:19 PM

Posted 12 March 2017 - 05:40 AM

Hi commonslow.

 

On Screen Keyboard should work. (It's a keyboard you can type in with a mouse.)

You can find it at Start > All programs > Accessories > Ease of Access > On Screen Keyboard.

 

Thanks.


If I don't reply back to you in 2 days, feel free to send me a PM.

 

“You’re lying… just like you were lying to me before. You have to hate me. I’ve been the worst daughter in the world… you should hate me.”

“But I don’t, Nyx. Because, Nyx, I’m your mother, and a mother will always love her daughter, no matter what.” -Past sins by Pen stroke.


#10 commonslow

commonslow
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  

Posted 12 March 2017 - 04:46 PM

Alright, everything works perfectly now..thank you very much for your help! Have a nice week



#11 Sirawit

Sirawit

    Bleepin' Brony


  • Malware Response Team
  • 4,156 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Thailand
  • Local time:09:19 PM

Posted 13 March 2017 - 10:54 AM

Hi commonslow.

 

That's great to hear! :) Anyway, to properly finishing off our cleaning, please create a new FRST log file for me for a bit of checking.

 

Thank you.


If I don't reply back to you in 2 days, feel free to send me a PM.

 

“You’re lying… just like you were lying to me before. You have to hate me. I’ve been the worst daughter in the world… you should hate me.”

“But I don’t, Nyx. Because, Nyx, I’m your mother, and a mother will always love her daughter, no matter what.” -Past sins by Pen stroke.


#12 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 36,198 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:07:19 AM

Posted 16 March 2017 - 07:34 PM

Greetings,

===================================================

Do You Still Need Help?

It has been 3 days since my last post.
  • Do you still need help with this?
  • If you have not replied within 48 hours I will assume you have abandoned the Topic and it will be closed.

Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#13 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 36,198 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:07:19 AM

Posted 18 March 2017 - 10:00 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users