PDA

View Full Version : Keyboard types in double


magicmoose
02-13-2006, 08:57 PM
this problem appeared all of a sudden : when i try to use dead keys (for french accentuation) the key automatically works twice, and thus returns ^^, ¸¸. ¨¨, ``, effectively preventing me to type accentuated characters. Also, when using Ctrl+V to paste something, it pastes twice in one press. The problem is present in EVERY application. In Microsoft Excel, its even worse : the arrow keys and the backspace key also work double. The problem is there for all the users of the computer, but doesn't appear in Safe Mode. Every other keyboard I use (Ps/2 and USB) has that problem too, so its not a hardware trouble.

Using Windows XP Pro Service pack 2, on a Athlon64 3700+ that i bought 2 months ago. Worked perfectly until last week. Haven't changed any hardware since, didn't change any bios config, haven't installed anything suspicious, haven't found any viruses or spywares...

bassman
02-13-2006, 09:18 PM
Hello magicmoose and welcome to http://www.pcguide.com/ubb/pcgubb.gif
Just how big are those hooves of yours? :D :D just kiddin.
If you have tried different keyboards on this machine with the same outcome, it could very well be your keyboard controller.
haven't installed anything suspicious
Have you installed anything?

magicmoose
02-14-2006, 09:08 AM
last thing i installed was Ulead DVD Movie Factory 4 like 2 weeks ago, but everything worked fine until last week.

Whyzman
02-14-2006, 10:47 AM
I would say, let us know the answer to Bassman's inquiry regarding the problem still existing with a known working keyboard...

magicmoose
02-14-2006, 12:10 PM
I tried my original USB keyboard, which i discovered the problem with, a PS/2 keyboard, and a 3rd USB one. The two first have multimedia keys, the third is just a plain old keyboard. All of them have the same problem, but none has it in Safe mode. Where can i check the keyboard controller ?

Edit : I tried the 3 keyboards on my old PC (Win XP Pro, Athlon 1900+), all three work perfectly.

Whyzman
02-14-2006, 02:51 PM
In Device Manager, you can find Keyboard. If you expand (+) you should find your keyboard listed. What you could try is highlighting and removing. I'm not sure if you will lose keyboard function and have to manually reboot at this point, or if Windows will immediately on its own discover new hardware and reload the drivers...

If not, upon reboot Windows should locate the new hardware and reload drivers.

Thanks for giving us details on the keyboards. It helps to know that the variable of a faulty keyboard is 'potentially' out of the list...

magicmoose
02-14-2006, 08:53 PM
Deleted the Keyboard and User USB Interface (HID) (or its equivalant in english, I have french Win XP and not sure how it's translated) drivers and rebooted. Upon boot Windows detected the keyboard and reinstalled the stuff he needed. I now have half as much stuff in User USB Interface (HID) section, which in my opinion is already better, but the problem is still there.

Whyzman
02-14-2006, 09:21 PM
In Control Panel under Keyboard...mine has a tab titled Speed...and then Repeat Delay.

It determines how long a period of time elapses before a key repeats. If you are needing to use a two key sequence to get the characters you need this might have something to do with it... Also, I'm thinking this software would be disabled in SAFEMODE...

You might want to have a look there and see what it is set at...

magicmoose
02-14-2006, 09:38 PM
This is the first thing I checked. Both speed and repeat delay are at medium setting. As i explained before, it is really a one press -> instant double action problem and doesn't seem to have something to do with repeat speed. :(

Whyzman
02-14-2006, 09:40 PM
Do you have sofware installed for the keyboard?

magicmoose
02-14-2006, 09:41 PM
Nope, nothing but default WinXP drivers from initial install.

Whyzman
02-14-2006, 10:21 PM
Hmmm...sure smells of a software issue...

You might need to try a clean boot troubleshoot:

http://support.microsoft.com/default.aspx?scid=kb;en-us;316434

magicmoose
02-14-2006, 10:32 PM
I'll work on this.

Whyzman
02-14-2006, 11:43 PM
Any chance you have this computer set up for English as an optional language. If so, and you switch, do you have the same problems?

magicmoose
02-14-2006, 11:50 PM
I tried all possible French Canadian language settings as well as US English, all with same results. The keys aren't on the same position on the keyboard, but when I manage to find them back they still have the problem.

I'm still working onto that clean boot thing

magicmoose
02-15-2006, 12:09 AM
I tried everything listed in the advanced clean-boot troubleshooting procedures and haven't solved anything, the problem is still there.

I found another forum (a french one) with someone reporting that problem, only it was on a laptop and he had something called Skin2000 Keylogger installed, and deleting that program solved the problem. Two other people posted after this, having the exact same problem as him but on a PC and without that Skin2000 Keylogger stuff, which is also my situation. Nobody there found out yet what it is.

bassman
02-15-2006, 12:24 AM
Welllllll.......
We have a known situation of an intrusion software and 3 instances (aparently identical conditions) without a sign of the same program. Could it be that you and the other 2 have a similar keylogger running but just have not found it yet?
You really need to run an HJT scan and post the log here. These are best picked up in the Applications and Security (http://www.pcguide.com/vb/forumdisplay.php?f=34) forum so I would recommend posting it there and refering to this thread for more background. I think this has now moved into a "Security" situation rather then a "Peripherals"
Mods, correct me if I am wrong ;)

Whyzman
02-15-2006, 12:54 AM
Hmmm...kinda makes sense. Perhaps the "dead keys" are messing with the keylogger...

Surely worth a look at the HJT log...

magicmoose
02-15-2006, 08:58 AM
Logfile of HijackThis v1.99.1
Scan saved at 07:22:25, on 2006-02-15
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\WINDOWS\system32\_taskmrg.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\AiO\hp psc 700 series\Bin\hpobrt07.exe
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\PROGRA~1\HEWLET~1\AiO\Shared\Bin\hpoevm07.exe
C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOSTS07.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Aware.exe
C:\Documents and Settings\Guillaume\Bureau\hijackthis\HijackThis.ex e

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [®Update] _taskmrg.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\..\Run: [®Update] _taskmrg.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: HPAiODevice(hp psc 700 series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp psc 700 series\Bin\hpobrt07.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - [url]http://go.microsoft.com/fwlink/?linkid=39204[/url]
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - [url]http://by113fd.bay113.hotmail.msn.com/resources/MsnPUpld.cab[/url]
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - [url]http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1133584347750[/url]
O16 - DPF: {68BCE50A-DC9B-4519-A118-6FDA19DB450D} (Info Class) - [url]http://www.blizzard.com/support/includes/cabs/si.cab[/url]
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - [url]http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1133584343250[/url]
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - [url]http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab[/url]
O18 - Protocol: msnim - 0 - (no file)
O20 - AppInit_DLLs: MsgPlusLoader.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

Nothing running I don't know about.

david eaton
02-15-2006, 03:22 PM
Have Hijack This fix all of the following by placing a check in the appropriate boxes and hitting fix checked. Make sure all browser and all Windows Explorer windows are closed before fixing.

O4 - HKLM\..\Run: [®Update] _taskmrg.exe
O4 - HKCU\..\Run: [®Update] _taskmrg.exe

Reboot and delete

files
_taskmrg.exe

You do not seem to be running any anti virus program on your machine. Please get an on line scan at either Housecall (http://uk.trendmicro-europe.com/enterprise/products/housecall_launch.php) or Panda A/V (http://www.pandasoftware.com/activescan/com/activescan_principal.htm). Let it fix anything it finds. Then install a resident anti virus program.

Please post a followup Hijack this log, and say if your problems persist.

magicmoose
02-15-2006, 04:13 PM
Deleting the two O4 - HKCU\..\Run: [®Update] _taskmrg.exe solved the problem. Didn't even notice it was taskmrg.exe and not taskmgr.exe (real one).
Thank you very much guys for your help !

Whyzman
02-15-2006, 04:50 PM
Definitely follow David's recommendation to perform an on line virus scan!

http://castlecops.com/s9507-taskmrg_exe.html It appears this is added by a worm...

Also, many of us here use AVG free edition for our anti-virus

bassman
02-15-2006, 08:32 PM
WOOOHOOOO!!! :D :cool:
I love a confirmed fix ;)

Oblivionzz
02-12-2007, 01:03 PM
I have same problem
This is hijack log

Logfile of HijackThis v1.99.1
Scan saved at 17:03:23, on 12-02-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Programas\Java\jre1.5.0_08\bin\jusched.exe
C:\Programas\Eset\nod32kui.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Programas\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programas\MSN Messenger\MsnMsgr.Exe
C:\Programas\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Programas\GetRight\getright.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Programas\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programas\Sygate\SPF\smc.exe
C:\Programas\Azureus\Azureus.exe
C:\Programas\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Programas\Mozilla Firefox\firefox.exe
C:\Programas\Teamspeak2_RC2\TeamSpeak.exe
C:\Programas\PowerArchiver\POWERARC.EXE
C:\Programas\Internet Explorer\iexplore.exe
C:\Programas\PowerArchiver\POWERARC.EXE
C:\DOCUME~1\luis\DEFINI~1\Temp\_PA366\HijackThis.e xe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pt/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hiperligações
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programas\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Programas\GetRight\xx2gr.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programas\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: Alcohol Toolbar Helper - {8126A4A5-BFD3-46FE-BBDF-BFB5CF78E489} - C:\Programas\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll
O3 - Toolbar: Alcohol Toolbar - {ED4BD629-C1B6-4399-8A34-02CCAA921DC9} - C:\Programas\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programas\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Programas\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Programas\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programas\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Win32 Update] C:\WINDOWS\system32\dl32.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Programas\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: DSLMON.lnk = C:\Programas\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: GetRight - Tray Icon.lnk = C:\Programas\GetRight\getright.exe
O8 - Extra context menu item: Download with GetRight - C:\Programas\GetRight\GRdownload.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - C:\Programas\GetRight\GRbrowse.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programas\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programas\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - [url]http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab[/url]
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - [url]http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.3.102.cab[/url]
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - [url]http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1154387120484[/url]
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - [url]http://acs.pandasoftware.com/activescan/as5free/asinst.cab[/url]
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - [url]http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab[/url]
O17 - HKLM\System\CCS\Services\Tcpip\..\{D18A74B1-F706-4D5C-892E-32CF6A149044}: NameServer = 194.65.100.117
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Programas\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Programas\Sygate\SPF\smc.exe


Hope you can help

mjc
02-12-2007, 02:29 PM
Holy necroposting, Batman!

Oblivionzz, please start your own thread detailing your problem. You can add a link back to this thread...