Windows xp Win32 worm malware unable to work with keybord

roxmate · 01 Feb 2012

Hello there, i was surfing the internet and i turned off my firewall

and a virus entered my system. It's calledd internet security and it come's with several infeccions such as win32 worm that doesn't allow me to open .exe files. I have entered in safe mode and dowloaded Avast antivirus and i scaned the system and found out the infeccions so i selected them and placed them in quaranteene, then i rebooted my pc and it worked fine but the internet was not working it said it was something to do with the DNS. So i rebooted the computer a few times again but than when i was trying to put my password in, the keybord just stopped working (but it does work before windows start) so i am unable to work with my computer any advices? i have read the post of someone who had the same problem with the win32 worm but his keybord hasn't stopped working

I would really apreciate any help because i don't want to format my computer because i have several programs and works that i use daily.
Kind regards,
roxmate

dreamer · 02 Feb 2012

Download and install Malwarebytes Anti Malware from here Malwarebytes : Malwarebytes Anti-Malware PRO removes malware including viruses, spyware, worms and trojans, plus it protects your computer in safe mode with networking.Do the full scan of your system and delete whatever rogue viruses it finds out.Reboot your system and check if the keyboard is working or not.

Try to get another keyboard if possible and check if it works.
If after scan internet is not working.Do the following steps
Open notepad and copy paste the code written below:

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

save the notepad and rename it as FlushDNS.bat
right click on the bat file and click on run as administrator.
Your system will reboot automatically.

Let us know how it goes

roxmate · 02 Feb 2012

Hello dreamer thank you for giving me this tips but for now on the main problem is the keyboard not working. Even though if i ran the computer in safe mode the keybord does not work at all i have tryied another keybord and nothing seems to change... I was wondering if there is any way to remove my password before windows start( like while in booting) if i could take my pass out i could see what was causing the keyboard malfunction. Plus my hands are tided because i dont have any windows software and i only have a flash pen drive with 14 Gb

roxmate · 03 Feb 2012

well actually i have been able to enter my windows i plugged in another keyboard and i could put my pass in but the thing is that i don't know why my Laptop keyboard just Stopped working is it because of the virus?

dreamer · 03 Feb 2012

roxmate said:

well actually i have been able to enter my windows i plugged in another keyboard and i could put my pass in but the thing is that i don't know why my Laptop keyboard just Stopped working is it because of the virus?

Is that a laptop or desktop??Better be safe and scan your system like i said in my previous post.

roxmate · 03 Feb 2012

hello i have a laptop and i did all what you said in safe mode but unfortunatly the keyboard does still ot work and the internet conection has the same issue, it says that the DNS search failed, but in network connections it says that is connected.And when i run the batch file, in the console says that was unable to retrieve information for example if i try to do "ipconfig" i dont get any results.

Borg 386 · 04 Feb 2012

You could try to run this program to see if that solves the problem.

Unhide.exe is a program that will revert many of the changes on your computer caused by the FakeHDD family of rogue anti-spyware programs.

Unhide.exe - A introduction as to what this program does

The virus has probably damaged some files, so you may need to do a repair install.

Repair Install

Also, if you can boot into safe mode, or safe mode with command prompt and your KB works on that, you can run a SFC /Scannow to see if this can restore some of the files. Make sure to run it 3X as SFC doesn't always get everything on the 1st pass

SFC /SCANNOW Command - System File Checker

Another option, can you do a system restore 2 or 3 points past the time of infection? If you can, this may solve the problem, although a full system scan after doing so would be advisable.