Keyboard problem or virus?

[sanjoa]

I've got a problem with my keyboard. It makes so many + symbols almost everytime. Today it started doing this. May have a virus or should I replace the keyboard?

[Bizarre™]

If you have a spare keyboard, you can test whether or not it's defective.

[sanjoa]

I have this keyboard (see attached file)

[HX1]

Check for a sticky/weak key.. I knew this person once who like to dip and drink Dr. Pepper at the keyboard ( Backwoods/Cable Guy/Jeff Foxworthy/TaterSalad loud type ) laugh and download/watch funny e-mails all day.. He eventually spilled both into his keyboard..at which point the keys got sticky and eventually food and several other things made its way there.. The keyboard was taken apart and cleaned because it was doing the same thing.. ( I would have thrown it out - puke ) So you may want to look into the keyboard carefully.. Also the support system for the key can become jumbled/messed up so be sure to check it...when you take the key board apart.. if your daring enough to take it apart down to the contact points.. clean them with your fingers..gently.. anything that leave a foreign substance behind is /can cause a problem ( like cleaning with an eraser head.. can actually do more damage than good )

Before you do all of that it would smart to post/scan a HiJackThis! log... and check your system for infection/rootkits.. make sure that your keyboard is compatible with your OS.. and requirements are met.. and connects are secured properly.. Check for any driver packages available and make sure you get them from the company... if needed..

Otherwise you have a P.O.S. keyboard.. This also could be in conjunction with a dysfunctional ( see above ) key and repeat settings in your OS for your keyboard..

[sanjoa]

HijackThis logfile

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 10:04:19, on 11/02/2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

E:\WINDOWS\System32\smss.exe

E:\WINDOWS\system32\winlogon.exe

E:\WINDOWS\system32\services.exe

E:\WINDOWS\system32\lsass.exe

E:\WINDOWS\system32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\system32\spoolsv.exe

E:\Archivos de programa\Microsoft LifeCam\MSCamS32.exe

E:\Archivos de programa\Eset\nod32krn.exe

E:\WINDOWS\system32\svchost.exe

E:\Archivos de programa\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

E:\WINDOWS\Explorer.EXE

E:\WINDOWS\system32\ctfmon.exe

E:\Archivos de programa\Eset\nod32kui.exe

E:\WINDOWS\RTHDCPL.EXE

E:\Archivos de programa\Unlocker\UnlockerAssistant.exe

E:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb12.exe

E:\Archivos de programa\HP\HP Software Update\HPWuSchd2.exe

E:\WINDOWS\vVX3000.exe

E:\Archivos de programa\VistaSwitcher\vswitch.exe

E:\Archivos de programa\HP\Digital Imaging\bin\hpqtra08.exe

E:\Archivos de programa\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe

E:\Archivos de programa\HP\Digital Imaging\bin\hpqSTE08.exe

E:\Archivos de programa\Claro Internet\Claro Internet.exe

E:\Archivos de programa\HP\Digital Imaging\Product Assistant\bin\hprblog.exe

E:\Archivos de programa\Mozilla Firefox\firefox.exe

E:\Archivos de programa\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.google.es/preferences?hl={SUB_RFC1766}

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - E:\Archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Windows Live Aplicación auxiliar de inicio de sesión - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Archivos de programa\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\Archivos de programa\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O4 - HKLM\..\Run: [nod32kui] "E:\Archivos de programa\Eset\nod32kui.exe" /WAITSERVICE

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [unlockerAssistant] "E:\Archivos de programa\Unlocker\UnlockerAssistant.exe"

O4 - HKLM\..\Run: [HPDJ Taskbar Utility] E:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb12.exe

O4 - HKLM\..\Run: [HP Software Update] E:\Archivos de programa\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [LifeCam] "E:\Archivos de programa\Microsoft LifeCam\LifeExp.exe"

O4 - HKLM\..\Run: [VX3000] E:\WINDOWS\vVX3000.exe

O4 - HKCU\..\Run: [ctfmon.exe] E:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [VistaSwitcher] "E:\Archivos de programa\VistaSwitcher\vswitch.exe" /startup

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'SERVICIO LOCAL')

O4 - HKUS\S-1-5-19\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICIO LOCAL')

O4 - HKUS\S-1-5-19\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICIO LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'Servicio de red')

O4 - HKUS\S-1-5-20\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Servicio de red')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe (User 'Default user')

O4 - HKUS\.DEFAULT\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')

O4 - Global Startup: HP Digital Imaging Monitor.lnk = E:\Archivos de programa\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: Image Transfer.lnk = ?

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://E:\WINDOWS\system32\GPhotos.scr/200

O8 - Extra context menu item: E&xportar a Microsoft Excel - res://E:\ARCHIV~1\MICROS~1\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Referencia - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\ARCHIV~1\MICROS~1\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Archivos de programa\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Archivos de programa\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1264945711406

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1264945698437

O17 - HKLM\System\CCS\Services\Tcpip\..\{0D206651-8189-4BC4-9E5B-981A8636864C}: NameServer = 8.8.8.8 8.8.4.4

O17 - HKLM\System\CS1\Services\Tcpip\..\{0D206651-8189-4BC4-9E5B-981A8636864C}: NameServer = 8.8.8.8 8.8.4.4

O23 - Service: Google Updater Service (gusvc) - Google - E:\Archivos de programa\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Archivos de programa\Java\jre6\bin\jqs.exe

O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - E:\Archivos de programa\Eset\nod32krn.exe

O23 - Service: Pml Driver HPZ12 - HP - E:\WINDOWS\system32\HPZipm12.exe

O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - E:\Archivos de programa\TuneUp Utilities 2010\TuneUpDefragService.exe

O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - E:\Archivos de programa\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

--

End of file - 7088 bytes

[HX1]

Not really picking up on anything in your log.. I do see alot of stuff I would not have running.. so I am not sure if one of them could be causing a cross-malfunction..

Someone else may wanna double-check me..is odd that you still have an entry from an nLite installation.. unless it runs one f the three things for your sound..

BTW: What is up with your DNS server numbers?

[sanjoa]

don't know. I have set them to 8.8.8.8 and 8.8.4.4 (Google DNS)

what stuff wouldn't you have running?

[HX1]

Yeah I see.. mine look a little different is all.. I have one in each section.. but entered in both cards..the Updater, and the router.. Just shows up different from mine in HJT..

[sanjoa]

I've got a mobile broadband connection (3G)

[DKT27]

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

Hmm. What is this file for?

Well you should try to boot in safe mode. If it works. Then there's a software problem. If it doesn't, your keyboard's wire would be giving some problem(if you have a wired keyboard). I remember someone having same problem because problem in the wire or it's pin connected to the CPU.

[HX1]

That DKT27 is the Control Panel for the Sound driver I believe Realtek..AC97.. I think I had that .. but I disabled all of it as it is un-necessary..

EDIT: Wireless could be getting interference too..

[DKT27]

Yea you are right. See this for RTHDCPL.EXE

Well yes wireless could be getting interference too. :yes:

[box]

The way to test is to take your weird keyboard and plug it into a known good computer and see if you get weird keys. You then take another known good keyboard and plug it into your weird computer and see if you get weird keys from a known good keyboard.

If a known good computer with a weird keyboard = no problem, then most likely setting or drivers in the weird computer.

If a known good computer with a weird key = problem, then most likely weird keyboard.

If a weird computer with a known good keyboard = no problem, then most likely weird keyboard.

If a weird computer with a known good keyboard = problem, then most likely settings or drivers in the weird computer.

Lastly, if you suspect that it is a bad keyboard, then test in Windows Safe Mode to rule out other software.