keyboard won't work

[murat63]

hi,

i am on windows 7, 64 bits, and for a week, my keyboard doesn't work. the key p, return, tab, and some others won't work. ma visual keyboard works fine - except the question mark - . i tried the pilots, and the computer says no need to update. i don't know where it comes from, but then, after a windows update, my keyboard came back to normal. it worked fine for three days and then, again, it screwed up. it's always the same keys that don't work, so i don't think my keyboard is worn out, as i was told. my computer is only one year old. it's a sony vaio laptop. each time i press the p key, for example, the start button -physical one- blinks. same for the other buttons. when i press the return key, the start button blinks the very same i press.
and while i am having this problem, my computer has trouble loading. sometimes it freezes and i have to unplug it and remove the battery to reboot.

in the bios, the same keys of my keyboard don't work either.

can anyone help

 

[ripbox]

Hi murat63

My 1st thought would be that the Keyboard is actually failing though i noted that you say that it came back after a windows update....
I read on to your other symptoms this suggests to me a bigger problem..... though i can not pin point the actual problem, experience of Sony Vaio's tells me that it is the motherboard failing....
you say that it is a year old? I would advise checking whether it is still in warranty and to make a full backup of your important files.... if it is out of warranty then i would consider part changing it for a new Laptop as the repair costs will be uneconomical

 

[rubyrubyroo]

if there's a MOB issue, like a loose solder point or component of poor quality, the intermittent functionality of the keyboard is probably due to its orientation so closely over the "hypothetical" problem coupled with the nature of a keyboard - basically a repetitively tapped/pressed sheet.

and on a side note, ripbox, I purchased a Sony vaio for $249 at BB, it was one of those models that had some type issues and they quickly abandoned! Well, nearly 6 years later, plenty of abuse, even being completely submerged while on in tap water, it is one of my favorite computers! You weren't saying anything bad about them or anything, I just thought it was pertinent, they (at least can be) a great machine.

i guess it could technically just as easily be a corroded connector pin to the keyboard ribbon line, or the likes. but if ripbox has had a lot of experience with similar vaio keyboards and found it to be the MOB, I'd bet on the experience.

mike

 

[ripbox]

no you right rubyrubyroo they are fantastic machines and i dont mean to give them bad rep.
If murat63 is confordant enough to pull it to bits and check the connection then it could be a very easy fix should it be a loose connection, however if like you say its a bad joint a re-flow might work but its only a sort term fix however and im my opinion a waste of money
I cant say 100% that im correcting the mobo failing, however after spending several days on one alone to diagnose the problem and not coming up trumps with specific hardware and again with several more with the same problems i am betting that it is a failing motherboard once again
I would however like for someone to come along a prove my diagnostic wrong because despite their faults they are cracking machines and hate seeing them go for scrap

 

[rubyrubyroo]

like i said i am betting on your answer because of the prior experience (making it statistically most likely) And I wasn't meaning to sound defensive just a notable case study i guess. It's obviously low level if BIOS setup has the issue, as no code/MBR,etc has even begun execution, I'd agree w/u in burning an image to a new computer then I'd keep the Sony as a mini computer that simply required a USB KB, either using the laptops lcd/led or adding one like a micro tower.

I wonder what the specifics of the mainboard issue truly is....and i wish i could get everyone with similar problems to "recycle" their flawed one to me for 10 bucks!! ha

good diagnosis...

game on,
mike

 

[murat63]

motherboard failing

Thanks for the reply.
the computer is still under warranty and hopefully they are not gonna stick only with the keyboard issue but check also the motherboard.

Question: isn't a motherboard failing after one year only extremely rare? And do you have any idea of what the message - sync.exe:error failed to load branding configuration- is when I start the computer?

 

[rubyrubyroo]

wait....sync.exe, alright until we figure this outyou need to be sure not to type ANYTHING even remotely "sensitive", no usernames, passwords, account #'s, or manually enter friends email addresses, etc.

What type of anti-malware (a.k.a. antivirus, spyware,etc) protection do you have, and is it a.) BELIEVED to be running currently, I await your reply, as this may be a type of keylogger malware, so it may be serious, and you should treat it as such until we work out what it is or is not!

just answer Q's to the fullest extent of yor knowledge.

awaiting your reply,
mike

 

[murat63]

avast free edition and malwarebyte. both of them didn't detect anything wrong

 

[rubyrubyroo]

have you run a FULL malwarebytes scan since the scan.exe appeared

do you use file sharing or torrent type software of any type

does avast have the resident sheild active, and has it run a full scan lately

 

[murat63]

yes, i did, a full malware scan, nothing detected and i run a full avast scan a few hours ago no virus detected, but it's the free avast edition. i also a torrent type software like miro

 

[rubyrubyroo]

okay, the free edition is fine, do you keep it updated, either manually or automatically, or are you unsure?

is windows updated fully and the firewall activated? or else avast's firewall?

Am I to assume you do not use any of Mark's SYSINTERNAL tools - PSTools, you would it know if you have?

next we'll look for the existance of the file and it's location, if it is the malware sync.exe (as win7 has no file with that name I am quite certian), it will almost certianly be in one of 3 places,


Mike

 

[murat63]

avast is automatically updated, firewall is on, windows updated and never heard of SYSINTERNAL tools and of PST Tools. i could never find the location of sync.exe in the computer.

 

[rubyrubyroo]

well look for the "process"

click (START) : and type "taskmgr.exe" in the searchbox, press (enter)

after a potential delay, you'll see windows task manager window appear.

it will have around 6 "tabs", simply click on the one labeled "processes"

a list of all the current processes will be displayed, there will be a button at the bottom of the list that reads (Show Processes from ALL Users).... click it and the list will fill up with more entrys (althogh you may not notice it if the list is already long. that's okay.

now UNDER the tabs where you selected "processes" before, there is a list header, which gives the title of each COLUMN (i.e. Image Name, User Name, CPU, etc.), click Image Name once and the list which has been moving fluidly up until this point should freeze and be in alphebetic order (or reverese "z" to "a"), eather way your going to make use of the scroll bars at the right side of the list and locate a process named similarly "sync.exe", it will be in alphebetic order so finding it should just take singing the ABC song! If it is there, stop and tell me, prior to taking any further actions, if it is not,... double and triple check. and likewise let meknow


if anything is not clear ask before continuing the steps above. (take it one step at a time)


Mike

 

[murat63]

after tripple check, sync.exe is not there

 

[rubyrubyroo]

great, and you did it with ease

now for a file search, it should be in the programs, windows or system folder, but to be thou rough well check the whole drive, and while windows search is capable, command prompt is just as capable, with less potential for hazards.

Now go back to (start) and type cmd.exe, but instead of pressing enter, move up to the black icon with the same name"cmd.exe" and right click it

A drop-down menu will appear with one option reading "run as administrator" with a shield icon at its right side, you should left click this option. then a pop up will confirm your request click (yes) and the command prompt window will open w/ administrative privileges active.

type the following into the black window prompt: "cd..\.." (no quotes), this should place you in the c:\ drive root directory

now to do the search for "any file, in all directory's and subdirectories, including hidden and system files" type the following command: "dir sync.exe /a:sh-s-h /s /p" followed by (enter) BE SURE TO TYPE IT EXACTLY spaces and all and wait for a while as it searches your drive for the file, the /p flag tells it to show you the results "one-page-at-a-time" so you can use space or enter to move down any listed results line by line or page by page. you will have plenty of time to look at any potential results, if any are produced, since you control the page movement as i just mentioned, so look carefully for the file that is causing the error "sync.exe" in any of the results and report back to me.

please.

thanks,
mike

 

[murat63]

after “dir sync.exe /a:sh-s-h /s /p, i have the following message: the volume in drive c has no name . the serial number is...
can't go further

 

[murat63]

it aslo says can't find the file which is ... good?

 

[rubyrubyroo]

yes there would be the volume id, drive name (which it must be unnamed) then a long search before in your case coming up empty the file appears to not be present. I did a bit of research and i was correct that no win7 system files have that name, only that "tech tool" by sys internals which i am sure you do not have and the similarly named ssync.exe. There is however, depending on the source a keylogger type malware, as well as a spyware type of program that watches your browsing habits and sends whatever they see fit to their server for analysis/or sale. Both are harmful from a security standpoint, but the file has no virus/worm/rootkit type of behavior (and any file could have introduced it to your system from mira or any similar torrents, I recommend not using such apps, although the decision is personal, just be fully aware of the risk, and make your own judgment call, no one can stop you is basically what I'm saying, but the risks far outweight the benefits, unless your uber-rich!

I was expecting to see a keylogger since they can be poorly written and cause issues including ones like you have (I just don't get why the KB is just as flawed in BIOS setup, without a hardware issue.

Do you have the original install disc(s) or did you make system restore discs to be able to reinstall windows?

if so, that might be your best option, a full wipe and reinstall (after copying your important files to another storage medium)

I'll look it up and see what I can learn about its specifics, I know it (apparently trys unsuccessfully) to load the file a boot time, executing a process which changes a few registry keys to be sure it loads at startup again, then transmits some sort of data to a server out there! I guess windows defender does have a startup program checker/disabler as part of its mini tool suite (the gear shaped icon) You could look for the sync.exe file there and if removed/disabled the registry entry will not reload it at each boot-time.

hopefully you have the discs at least as a safety-net if nothing else. I'll see what i can dig up and get back with you tommo....well today, since it is 4:57am here. If I come up empty or unsure, I'll ask one of the security experts, probably will either way. Just be careful just incase it does log your typing not to volunteer private info, or run much in the meantime!

I wish i could do more, but we'll see tomorrow.

Mike

(oh and the name of one of the malware is "AdShooter.SearchForIt" the other potential one i don't have a name for yet)

EDIT: even a old fashion hijack this log would likely locate this type of beast

 

[murat63]

ok thanks. just one last question. does it have anything to do with my keyboard problem?

 

[rubyrubyroo]

it is unlikely two problems at once, so one is likely casued by the other and the s/w if malicious could not be CAUSED by a H/W issue, so Best bet is the keyboard issue is caused by the software carried in as a trojan with your torrent s/w or some other route (email, driveby, etc).... try BIOS setup again unless you are absolutely certian that it acted identially (the keyboard) while in that enviromnet (prior to ANY code execution or even the Master Boot Record (MBR), short of a nasty rootkit, that type of malware just couldn't bypass windows x64 security (yet)

got it...
mike