Think I downloaded a virus or something through an email attachment.

When I type something....google, email, yahoo search, etc....my keyboard is acting like it's possesed. Also, when I "click" on a website my IE browser launches into fits...rapid fires multiple launches of a site....but both seem intermitent.


Ran full AVG update and scan, full Spybot scan and Adaware scan ...to no avail....any suggestions ??? Not sure if my Spybot is set to scan my registry.

Just downloaded "HiJack this" and the results are foreign to me. If I post the scan log, could someone interpret what's there ??

Any help is appreciated.

If you have a commercial version of AVG their tech support may be able to help you. Free version only offers online help.

Looks like these occurances are very intermittent. Does that mean anything ??

Tim, PH ??

This PC is 6 or 7 years old, should I just pitch it ??

Any help is appreciated.

What OS do you have installed? If it's XP, try a system restore for a date before you had the problem.

Sometimes with the real PITA problems it's easier to just do a fresh install. Take the option to install to a different directory (C:\WINDOZE or something) and you won't lose your data.

As the dominant male in a house with 5 computers and three teenagers, I have plenty of experience with Hijack This! By all means, post your log file so I can look at it.

Although, I have to say it sounds like more of a hardware problem. If your keyboard and mouse are USB-connected, try plugging them into a different USB slot. You may even want to uninstall them via the Device manager and let Windows redetect them when you reboot.

I'm running XP....went to do a system restore and it was turned off !!!

My keyboard is connected by a serial port ....

Here is the Hijack this report - thanks for the help :

Logfile of HijackThis v1.99.1
Scan saved at 9:17:01 AM, on 7/23/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2P1.EXE
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\Mark\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.yahoo.com/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [EPSON PictureMate] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2P1.EXE /P17 "EPSON PictureMate" /O6 "USB001" /M "PictureMate"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
O4 - HKCU\..\Run: [EPSON PictureMate] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2P1.EXE /P17 "EPSON PictureMate" /M "PictureMate" /EF "HKCU"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1408.g.akamai.net/7/1408/9955/20031218/akamai.i...es4d/iTunesSetup.exe
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/4058/ftp.coupons.com/r3302/Coupons.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://131.156.107.87/activex/AMC.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/bejeweled2/sis/popcaploader_v10.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: Automatic LiveUpdate Scheduler - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

Don't see anything funky in there. I had to look up E_S4I2P1.EXE, but that's just a status monitor for your Epson printer.

It looks like you ran the scan while you had IE running, right?

So, it looks like something with your keyboard and mouse. You mentioned that sometimes the keyboard acts up, and that your IE problems happen when you click on a link. Do either ever act up anytime other than when you're online? Do you have a spare of either you can plug in and try? Preferably into a USB slot?

More questions:
How long has this been happening?
Make any hardware or software changes around the same time?
Is it getting worse as time goes on?
Are your KB and mouse anything special? Or just run-of-the-mill generics? Did they come with their own software?

Anytime I need a Hijackthis log read I go here and post it.

http://forums.tomcoyote.org/forums.html

I might take them a little bit to read it but I've always had good results with their help.

Scroll down to Security and post in the "HijackThis™ Logs and Malware Removal" section.

quote:

Originally posted by Since69:
Don't see anything funky in there. I had to look up E_S4I2P1.EXE, but that's just a status monitor for your Epson printer.

It looks like you ran the scan while you had IE running, right?

So, it looks like something with your keyboard and mouse. You mentioned that sometimes the keyboard acts up, and that your IE problems happen when you click on a link. Do either ever act up anytime other than when you're online? Do you have a spare of either you can plug in and try? Preferably into a USB slot?

More questions:
How long has this been happening?
Make any hardware or software changes around the same time?
Is it getting worse as time goes on?
Are your KB and mouse anything special? Or just run-of-the-mill generics? Did they come with their own software?

Pretty sure I ran Hijack this with IE running.

My key board and mouse seem fine offline....no spares

Been happening around 3 or 4 days....no other changes

It seems fine after a re-boot and then comes back with a vengence after a while

just a cheapo windows keyboard and a belkin optical mouse.

** Also, noticed yesterday and today... when booting the computer I hear a rapid chatter (hard-drive ??) and when I get to the log in screen it gets weird when I try to type in the password....letters missing from what I type and then locks up for a bit...eventualy works.

thanks again for your advice trouble shooting.

Still sounds like a hardware issue to me, but just to rule out the software side, try running for a while (half-hour or so) in safe mode and see if you have the same problems.

In case you don't know how to get into safe mode: reboot, and press F8 repeatedly during the startup process (before the windows splash screen shows). The computer will ask you which mode to boot into - pick "safe mode with networking" so you can get online, too (just be careful where you go - you won't have AVG running).

One other question, too: Does your hard drive seem like it's chattering a lot more than it used to? Sometimes excessive disk activity can slow down a computer so much that input devices act weird (because they're not being polled as often).

Since 69, sounds like my hard drive is dying a slow death and something else , bus controller ???, according to a geek friend of the family who recently paid a visit.

Not the worst news as this pc is getting long in the tooth ....as far as pc's go. Maybe time for a replacemment that has better performance as this one's pretty low on the performance scale.


Just thought I would let you know and say thanks for all the help !!