Solved Urgent!! Cursor Jumping Around Crazily-Possible Malware?

Dimitris B

Member
Member
Local time
10:10 AM
Messages
92
Location
Kalamata, Greece
Greetings all,
This morning I opened my Windows 7 PC, but the cursor was maniacally jumping around, clicking things around. I even tried to physically unplug the mouse but no luck, i immediately assumed i had malware. I managed to open the Task Manager to trace the malware, the only suspicious thing i found is "brs.exe" with description "brs" but i couldn't go on and kill it since the cursor was jumping around like crazy. I hard reset the PC, when i rebooted the cursor was normal, but the brs.exe suspicious process was still there. I killed it, and found its origin in C:\Program Files (x86)\Cyberlink\Shared Files, a folder next to my installation of PowerDVD 9. I later searched things about brs.exe and I found that it's a Blu-Ray service or something like that, which doesnt make sense running like this because, for one I don't have any Blu-Ray capable Hardware, and PowerDVD was never running, and the location of the brs.exe is suspicious and so is the description, and also i've NEVER seen this file before running in the top 5 in Task Manager. It was consuming 900KB of Memory and zero CPU Cycles. Worst part is that it might not even by related to what happened, since i scanned it with VirusTotal and it was considered harmless and safe. I'll do a AV scan, but if u guys know what's happening, let me know!
 

My Computers My Computers

  • At a glance

    Windows 7 Home Premium 64-bit SP1Intel Core 2 Quad Q9650 (OVERCLOCK 3.8GHz)6GB DDR2 (Kingston)SAPPHRIE ATI HD 3870
    Computer type
    PC/Desktop
    Computer Manufacturer/Model Number
    Custom Build
    OS
    Windows 7 Home Premium 64-bit SP1
    CPU
    Intel Core 2 Quad Q9650 (OVERCLOCK 3.8GHz)
    Motherboard
    GIGABYTE GA-P35-DS3 Rev 2.0
    Memory
    6GB DDR2 (Kingston)
    Graphics Card(s)
    SAPPHRIE ATI HD 3870
    Sound Card
    Creative Sound Blaster Audigy 2 ZS Platinum Pro (SB0360)
    Monitor(s) Displays
    Hyundai U90D 19'' 75Hz 5ms TFT
    Screen Resolution
    1280x1024 75Hz (DVI)
    Hard Drives
    500GB Seagate ST3500413AS 7200 RPM Mechanical Hard Disk (OS DRIVE)
    1TB Western Digital WDC10EARS 5400RPM Mechanical Hard Disk
    PSU
    Be Quiet! 700W ATX PSU
    Case
    Unknown\Generic
    Cooling
    Scythe Samurai Z LGA775 Cooler
    Keyboard
    Microsoft Multimedia Keyboard 1.0A
    Mouse
    Microsoft Wheel Mouse Optical USB-PS/2 Compatible (BLACK)
    Internet Speed
    200Mbit/s FTTH (COSMOTE Fiber Plan)
    Antivirus
    MalwareBytes Free
    Browser
    Pale Moon/Firefox ESR 115
    Other Info
    Additional Expansions:

    SUNIX SUN1989 1x Serial/1x Parallel PCIe x1 Card
    Creative Sound Blaster Audigy 2 ZS Platinum Pro (SB0360) - Sony MHC 3700 Amplifier - KODA 8Ω/30W Speaker
    Pinnacle PCTV 310i PCI TV
    VIA 3x USB/ 2x 1394 PCI Card

    Disk Drives:

    Toshiba/Samsung CDDW SH-S203D DVD-RW (SATA)
    Sony/NEC OptiArc AD-5240S DVD-RW (SATA)
    Sony MPF920 3.5" HD Diskette Drive
    Printers: HP DeskJet 450 (USB)
  • At a glance

    Windows 7 Professional 64-Bit SP1Intel Core 2 Duo T5600 1.83GHzHynix/Samsung 4GB DDR2Intel Express 945
    Computer type
    Laptop
    System Manufacturer/Model Number
    HP Compaq NC4400 SubNotebook
    OS
    Windows 7 Professional 64-Bit SP1
    CPU
    Intel Core 2 Duo T5600 1.83GHz
    Motherboard
    HP Stock
    Memory
    Hynix/Samsung 4GB DDR2
    Graphics Card(s)
    Intel Express 945
    Sound Card
    SoundMAX
    Monitor(s) Displays
    HP LCD Panel
    Screen Resolution
    1024x768 60Hz
    Hard Drives
    120GB CRUCIAL M4 SSD (Updated Firmware)
    PSU
    HP ED465AA AC Adapter + Stock HP Battery
    Case
    Stock
    Cooling
    Stock
    Keyboard
    Stock
    Mouse
    Microsoft Optical Mouse USB
    Internet Speed
    5-50 Megabits/sec. (Wi-Fi FTTH)
    Browser
    Pale Moon
    Antivirus
    Malwarebytes
    Other Info
    With a Genuine Docking Station.
Quick Update...

I did a scan with Malwarebytes, the only thing it flagged is μTorrent, like most AVs do since they assume I use it for illegal software (Malwarebytes explicitly tries to flag any P2P Software). Nothing else out of the ordinary was detected. Worst part, I dont know if that's good or bad. Now, there are 2 possible things that are happening:
-The Malware (if any) was not detected by Malwarebytes (Weird since definitions have been updated)
-A Windows Glitch (Also Weird and unlikely, I've never ever seen this before.)
 
Last edited:

My Computers My Computers

  • At a glance

    Windows 7 Home Premium 64-bit SP1Intel Core 2 Quad Q9650 (OVERCLOCK 3.8GHz)6GB DDR2 (Kingston)SAPPHRIE ATI HD 3870
    Computer type
    PC/Desktop
    Computer Manufacturer/Model Number
    Custom Build
    OS
    Windows 7 Home Premium 64-bit SP1
    CPU
    Intel Core 2 Quad Q9650 (OVERCLOCK 3.8GHz)
    Motherboard
    GIGABYTE GA-P35-DS3 Rev 2.0
    Memory
    6GB DDR2 (Kingston)
    Graphics Card(s)
    SAPPHRIE ATI HD 3870
    Sound Card
    Creative Sound Blaster Audigy 2 ZS Platinum Pro (SB0360)
    Monitor(s) Displays
    Hyundai U90D 19'' 75Hz 5ms TFT
    Screen Resolution
    1280x1024 75Hz (DVI)
    Hard Drives
    500GB Seagate ST3500413AS 7200 RPM Mechanical Hard Disk (OS DRIVE)
    1TB Western Digital WDC10EARS 5400RPM Mechanical Hard Disk
    PSU
    Be Quiet! 700W ATX PSU
    Case
    Unknown\Generic
    Cooling
    Scythe Samurai Z LGA775 Cooler
    Keyboard
    Microsoft Multimedia Keyboard 1.0A
    Mouse
    Microsoft Wheel Mouse Optical USB-PS/2 Compatible (BLACK)
    Internet Speed
    200Mbit/s FTTH (COSMOTE Fiber Plan)
    Antivirus
    MalwareBytes Free
    Browser
    Pale Moon/Firefox ESR 115
    Other Info
    Additional Expansions:

    SUNIX SUN1989 1x Serial/1x Parallel PCIe x1 Card
    Creative Sound Blaster Audigy 2 ZS Platinum Pro (SB0360) - Sony MHC 3700 Amplifier - KODA 8Ω/30W Speaker
    Pinnacle PCTV 310i PCI TV
    VIA 3x USB/ 2x 1394 PCI Card

    Disk Drives:

    Toshiba/Samsung CDDW SH-S203D DVD-RW (SATA)
    Sony/NEC OptiArc AD-5240S DVD-RW (SATA)
    Sony MPF920 3.5" HD Diskette Drive
    Printers: HP DeskJet 450 (USB)
  • At a glance

    Windows 7 Professional 64-Bit SP1Intel Core 2 Duo T5600 1.83GHzHynix/Samsung 4GB DDR2Intel Express 945
    Computer type
    Laptop
    System Manufacturer/Model Number
    HP Compaq NC4400 SubNotebook
    OS
    Windows 7 Professional 64-Bit SP1
    CPU
    Intel Core 2 Duo T5600 1.83GHz
    Motherboard
    HP Stock
    Memory
    Hynix/Samsung 4GB DDR2
    Graphics Card(s)
    Intel Express 945
    Sound Card
    SoundMAX
    Monitor(s) Displays
    HP LCD Panel
    Screen Resolution
    1024x768 60Hz
    Hard Drives
    120GB CRUCIAL M4 SSD (Updated Firmware)
    PSU
    HP ED465AA AC Adapter + Stock HP Battery
    Case
    Stock
    Cooling
    Stock
    Keyboard
    Stock
    Mouse
    Microsoft Optical Mouse USB
    Internet Speed
    5-50 Megabits/sec. (Wi-Fi FTTH)
    Browser
    Pale Moon
    Antivirus
    Malwarebytes
    Other Info
    With a Genuine Docking Station.
I googled it and it is legit. There are a number of ways windows starts programs automatically. First I'd check services.msc, then msconfig.exe, the startup folder on the start menu, and then task scheduler (not manager). https://www.file.net/process/brs.exe.html By the way you could have booted into safe mode to stop it.
 

My Computers My Computers

  • At a glance

    Windows 7 pro/Windows 10 ProIntel i7 860 Quad core 2.8 ghz8 gbATI Radeon HD 5770 1 gb ram
    Computer type
    PC/Desktop
    Computer Manufacturer/Model Number
    HP Pavillion Elite HPE-250f
    OS
    Windows 7 pro/Windows 10 Pro
    CPU
    Intel i7 860 Quad core 2.8 ghz
    Memory
    8 gb
    Graphics Card(s)
    ATI Radeon HD 5770 1 gb ram
    Monitor(s) Displays
    Alienware 25 AW2521HF & Viewsonic
    Screen Resolution
    1920 x1080 & 1680x1050
    Hard Drives
    WD blue 1 tb & 500 gb.
    Browser
    FF of course.
    Other Info
    https://www.bestbuy.com/site/hp-pavilion-elite-desktop-intel-core-i7-processor-8gb-memory-1tb-hard-drive/9921493.p?skuId=9921493
  • At a glance

    Windows 2012 R2 Data center/Linux Minti3 9100 3.6GHz, 8M cache, 4C/4T8GB 2666MT/s DDR4 ECC UDIMM
    Computer type
    PC/Desktop
    System Manufacturer/Model Number
    Dell Poweredge T140
    OS
    Windows 2012 R2 Data center/Linux Mint
    CPU
    i3 9100 3.6GHz, 8M cache, 4C/4T
    Memory
    8GB 2666MT/s DDR4 ECC UDIMM
    Monitor(s) Displays
    Viewsonic
    Screen Resolution
    1680x1050
    Hard Drives
    1 TB & 750 GB
    Other Info
    https://www.dell.com/en-us/work/shop/productdetailstxn/poweredge-t140?~ck=bt
Greetings all,
This morning I opened my Windows 7 PC, but the cursor was maniacally jumping around, clicking things around. I even tried to physically unplug the mouse but no luck, i immediately assumed i had malware. I managed to open the Task Manager to trace the malware, the only suspicious thing i found is "brs.exe" with description "brs" but i couldn't go on and kill it since the cursor was jumping around like crazy. I hard reset the PC, when i rebooted the cursor was normal, but the brs.exe suspicious process was still there. I killed it, and found its origin in C:\Program Files (x86)\Cyberlink\Shared Files, a folder next to my installation of PowerDVD 9. I later searched things about brs.exe and I found that it's a Blu-Ray service or something like that, which doesnt make sense running like this because, for one I don't have any Blu-Ray capable Hardware, and PowerDVD was never running, and the location of the brs.exe is suspicious and so is the description, and also i've NEVER seen this file before running in the top 5 in Task Manager. It was consuming 900KB of Memory and zero CPU Cycles. Worst part is that it might not even by related to what happened, since i scanned it with VirusTotal and it was considered harmless and safe. I'll do a AV scan, but if u guys know what's happening, let me know!
BIG UPDATE----PROBLEM SOLVED

I found the problem... it was the Serial Mouse Driver. I had enabled it a while earlier to try a old mouse using Serial... But after that i forgot to turnoff the driver.. and plugged my server's null modem connection bacck to the serial port. The driver somehow detected that as a mouse, and all data that came from my server's console were interpreted as mouse signals. Therefore, what I saw was exactly that. As after i disabled that driver this whole thing stopped.
 

My Computers My Computers

  • At a glance

    Windows 7 Home Premium 64-bit SP1Intel Core 2 Quad Q9650 (OVERCLOCK 3.8GHz)6GB DDR2 (Kingston)SAPPHRIE ATI HD 3870
    Computer type
    PC/Desktop
    Computer Manufacturer/Model Number
    Custom Build
    OS
    Windows 7 Home Premium 64-bit SP1
    CPU
    Intel Core 2 Quad Q9650 (OVERCLOCK 3.8GHz)
    Motherboard
    GIGABYTE GA-P35-DS3 Rev 2.0
    Memory
    6GB DDR2 (Kingston)
    Graphics Card(s)
    SAPPHRIE ATI HD 3870
    Sound Card
    Creative Sound Blaster Audigy 2 ZS Platinum Pro (SB0360)
    Monitor(s) Displays
    Hyundai U90D 19'' 75Hz 5ms TFT
    Screen Resolution
    1280x1024 75Hz (DVI)
    Hard Drives
    500GB Seagate ST3500413AS 7200 RPM Mechanical Hard Disk (OS DRIVE)
    1TB Western Digital WDC10EARS 5400RPM Mechanical Hard Disk
    PSU
    Be Quiet! 700W ATX PSU
    Case
    Unknown\Generic
    Cooling
    Scythe Samurai Z LGA775 Cooler
    Keyboard
    Microsoft Multimedia Keyboard 1.0A
    Mouse
    Microsoft Wheel Mouse Optical USB-PS/2 Compatible (BLACK)
    Internet Speed
    200Mbit/s FTTH (COSMOTE Fiber Plan)
    Antivirus
    MalwareBytes Free
    Browser
    Pale Moon/Firefox ESR 115
    Other Info
    Additional Expansions:

    SUNIX SUN1989 1x Serial/1x Parallel PCIe x1 Card
    Creative Sound Blaster Audigy 2 ZS Platinum Pro (SB0360) - Sony MHC 3700 Amplifier - KODA 8Ω/30W Speaker
    Pinnacle PCTV 310i PCI TV
    VIA 3x USB/ 2x 1394 PCI Card

    Disk Drives:

    Toshiba/Samsung CDDW SH-S203D DVD-RW (SATA)
    Sony/NEC OptiArc AD-5240S DVD-RW (SATA)
    Sony MPF920 3.5" HD Diskette Drive
    Printers: HP DeskJet 450 (USB)
  • At a glance

    Windows 7 Professional 64-Bit SP1Intel Core 2 Duo T5600 1.83GHzHynix/Samsung 4GB DDR2Intel Express 945
    Computer type
    Laptop
    System Manufacturer/Model Number
    HP Compaq NC4400 SubNotebook
    OS
    Windows 7 Professional 64-Bit SP1
    CPU
    Intel Core 2 Duo T5600 1.83GHz
    Motherboard
    HP Stock
    Memory
    Hynix/Samsung 4GB DDR2
    Graphics Card(s)
    Intel Express 945
    Sound Card
    SoundMAX
    Monitor(s) Displays
    HP LCD Panel
    Screen Resolution
    1024x768 60Hz
    Hard Drives
    120GB CRUCIAL M4 SSD (Updated Firmware)
    PSU
    HP ED465AA AC Adapter + Stock HP Battery
    Case
    Stock
    Cooling
    Stock
    Keyboard
    Stock
    Mouse
    Microsoft Optical Mouse USB
    Internet Speed
    5-50 Megabits/sec. (Wi-Fi FTTH)
    Browser
    Pale Moon
    Antivirus
    Malwarebytes
    Other Info
    With a Genuine Docking Station.
Back
Top