Ergebnis 1 bis 4 von 4

Thema: Slow mouse response, multiple clicks to activate buttons etc.

  1. #1
    Registriert seit

    Frage Slow mouse response, multiple clicks to activate buttons etc.

    Strange behaviour on my PC.
    I had removed kvg.exe (virus). In fact, I had two instances of that show up in SpySweeper.
    Used these tools in various safe-mode/regular mode scenarios:
    Spybot S&D, CW Shredder, Adaware, Microsoft cumulative fix for Windows XP, Old version of SpySweeper.
    Some viruses keep re-infecting, though.

    I think there is a residual problem relating to virus or trojan.

    Clicking on buttons in dialog boxes, or even clicking on desktop icons gives strange responses. It's like it doesn't understand that its supposed to open, close, insert text into dialog box window etc. Keystrokes are not registering occasionally, especially if they are written into a dialog box window. The right mouse button seems to work better than the left button.
    I've played with the mouse settings a little to try and fix this, but nothing works. Mouse worked just dandy before the kvg.exe take-over.

    Here is my Hijack log:
    Logfile of HijackThis v1.99.1
    Scan saved at 7:14:02 AM, on 12/5/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Running processes:
    C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    C:\Program Files\Webroot\Spy Sweeper\SPYSWE~1.EXE
    c:\Program Files\Microsoft Money\System\urlmap.exe
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://msaps.dll/search.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://msaps.dll/search.html
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R3 - URLSearchHook: (no name) - _{FDE3577A-6254-181C-4E11-339E4F746BD3} - (no file)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - c:\Program Files\Microsoft Money\System\mnyviewer.dll
    O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SPYSWE~1.EXE" /0
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
    Geändert von Ruby (06.12.2005 um 03:28 Uhr) Grund: vb-Code -> BoardRules: Know how - HijackThis

  2. #2
    Supermod a.D. Avatar von Ruby
    Registriert seit
    The Netherlands

    AW: Slow mouse response, multiple clicks to activate buttons etc.

    Welcome to @ KarenM

    Please post your Logfiles in vB Code!

    Make sure you set windows to see the hidden files and folders.

    You have probably a worm with backdoorfunctionality on your system.

    You will want to copy the text from this post and save it as a text file (*.txt) or print it because you will be working offline (in safemode) to resolve your problem and not have access to this forum.

    Follow these STEPS.

    STEP 1
    You must turn off System Restore during this process. You will keep it off until we are done fixing your system.

    STEP 2
    1. Download mwavscan (It is free), if you don't have a zip-tool we suggest zipgenius (It is free).
    2. You MUST Unzip mwavscan to 'C:\bases' (case sensitive, any other folder and it won't work properly)
    3. After installing some systems automatically start up the program, if this happens close it, you don't want to run it now.
    4. Open 'My Computer'
    5. Double click on 'C:'
    6. Double click on the folder 'bases'
    7. Now in that root folder look for 'kavupd.exe' and double click on it. (We are updating mwavscan to the latest definitions.)
    8. NOTE: Occasionally users receive an error that 'signatures are more then 30 days old'. If you receive this keep trying to run kavupd.exe, it means the definition server is busy, but you will eventually get through.

    STEP 3
    1. Now turn off your computer and remove the network cable/phone line from your machine.
    2. Reboot your computer into Safe Mode

    STEP 4
    1. Open 'My Computer'
    2. Double click on 'C:'
    3. Double click on the folder 'bases'
    4. Double click on ''
    5. Now close all other windows, browsers, and programs other then Mwavscan before continuing
    6. Checkmark: Memory, StartUp-Folders, Drives, All Local Drives, Registry and INI Files, System Folders, Services
    7. Now select 'Scan All Files'
    8. Finally, click on 'Scan Clean' (The program will take several hours to run)
    9. When the scan is complete, click 'View Log' and Save it!

    STEP 5
    1. Reconnect your network cable/phone line
    2. Reboot your system into normal mode.

    STEP 6
    1. Open 'My Computer'
    2. Double click on 'C:'
    3. Double click on the folder 'bases'
    4. Find the log file in the directory.
    5. Open it with an editor (Notepad will do fine)
    6. Look for the files which are tagged as "virus" or "infected"
    7. Copy&paste all these files tagged as "virus" or "infected" in a new document and save to your desktop

    STEP 7
    Run Hijackthis again and have it save a new log file.

    Step 8

    Post every file of mwavscan by looking for "infected" and "tagged as" to this thread:

    It looks like this:

    File C:\WINDOWS\sssasasb32.exe infected by "Trojan-Downloader.Win32.Agent.ig" Virus. Action Taken

    File C:\Documents and Settings\Name\Local Settings\Application Data\Wildtangent\0F.dat tagged as not-a-virus:AdWare.WildTangent.b. No Action Taken.

    Also post the total results:

    =>Total Number of Files Scanned:
    =>Total Number of Virus(es) Found:
    =>Total Number of Disinfected Files:
    =>Total Number of Files Renamed:
    =>Total Number of Deleted Files:
    =>Total Number of Errors:
    ***** Scanning complete. *****

    Finally, post the new Hijackthis logfile!

  3. #3

    Re: Slow mouse response, multiple clicks to activate buttons etc.

    Thank you, Ruby-- that worked like a charm!

  4. #4
    Supermod a.D. Avatar von Ruby
    Registriert seit
    The Netherlands

    AW: Slow mouse response, multiple clicks to activate buttons etc.

    You are welcome @ Karen

    May we see the results too? Please?

Aktive Benutzer

Aktive Benutzer

Aktive Benutzer in diesem Thema: 1 (Registrierte Benutzer: 0, Gäste: 1)

Ähnliche Themen

  1. Antworten: 22
    Letzter Beitrag: 07.07.2005, 02:40
  2. Slow Response
    Von HKnoll im Forum Archiv
    Antworten: 8
    Letzter Beitrag: 18.01.2005, 20:31
  3. IE Won't Work -- Multiple Bugs?
    Von lowtide89 im Forum Archiv
    Antworten: 2
    Letzter Beitrag: 05.01.2005, 04:06


  • Neue Themen erstellen: Nein
  • Themen beantworten: Nein
  • Anhänge hochladen: Nein
  • Beiträge bearbeiten: Nein