Member Avatar for sdemott

This is a new probLem. Whenever I use the "L" key a new browswer window opens and the cursor returns to the home position in the appLication in which I am typing. I downLoaded Highjackthis and am posting my resuLts beLow. Can you heLp?? PLease! I'm suffering trying to fix this beast...

Logfile of HijackThis v1.97.7
Scan saved at 3:52:39 PM, on 5/31/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\drivers\CDAC11BA.EXE
C:\Program Files\Cisco VPN\Harrah's VPN Client\cvpnd.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINNT\system32\regsvc.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
C:\Program Files\2Wire\Gateway\2PortalMon.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Microsoft Office\Office\1033\OLFSNT40.EXE
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Common Files\Symantec Shared\NMain.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\unzipped\hijackthis[1]\HijackThis.exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
O4 - HKLM\..\Run: [2wSysTray] C:\Program Files\2Wire\Gateway\2PortalMon.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [keyman.exe] C:\Program Files\Tavultesoft\Keyman\keyman.exe
O4 - Global Startup: Billminder.lnk = C:\QUICKENW\billmind.exe
O4 - Global Startup: Harrah's Entertainment, Inc. Harrah's Cisco VPN version 3.6.4.lnk = C:\Program Files\Cisco VPN\Harrah's VPN Client\ipsecdialer.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\QUICKENW\bagent.exe
O4 - Global Startup: Quicken Startup.lnk = C:\QUICKENW\QWDLLS.EXE
O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = C:\Program Files\Microsoft Office\Office\1033\OLFSNT40.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O12 - Plugin for .mpg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {072D3F2E-5FB6-11D3-B461-00C04FA35A21} (CFForm Runtime) -
O16 - DPF: {24D1BDCE-D835-11D6-BF84-0050047EA0E7} (BlueStream_Flash Class) -
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} -
O16 - DPF: {4129EA54-F04E-11D3-BF96-00C04F0E7BE2} -
O16 - DPF: {8EDAD21C-3584-4E66-A8AB-EB0E5584767D} -
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) -
O16 - DPF: {A8658086-E6AC-4957-BC8E-7D54A7E8A78E} (SassCln Object) -
O16 - DPF: {B2FCED61-570E-11D3-B160-00A0C9E70E84} (OmniForm Form Control) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DF6A0F17-0B1E-11D4-829D-00C04F6843FE} (Microsoft Office Tools on the Web Control) -

  • 5 Contributors
  • 8 Replies
  • 331 Views
  • 3 Days Discussion Span
  • Latest Post Latest Post by Dani

Dani AI

Generated

Short summary: the symptom described (pressing the "L" key opens a new Internet Explorer window and the caret jumps) was ultimately traced to a faulty keyboard after several helpful suggestions in-thread. noted the HijackThis output showed no obvious malware, correctly raised the possibility of hotkeys, and flagged the Keyman keyboard utility. The final fix reported by was to swap the keyboard.

Why this can happen: failing keyboards or bridged contacts can emit the wrong scancodes or spuriously assert modifier keys (Ctrl/Alt), which can turn a normal letter into a browser shortcut. Software can also create global hotkeys (keyboard utilities, AutoHotkey, IME/key mapping tools), and, more rarely, malware with global hooks can do similar things. Because the causes span hardware and software, a short, methodical isolate-first approach avoids wasted effort.

Practical diagnostic checklist:

  • Try a different keyboard (or plug the suspect keyboard into another PC). Hardware isolation is the fastest test.
  • Test the key outside Windows (enter BIOS or a DOS prompt) or use Notepad/Safe Mode to see whether the wrong action follows.
  • Use the On-Screen Keyboard or an external USB keyboard to continue typing safely while diagnosing.
  • Exit/disable any keyboard utilities (Keyman, language/IME software, hotkey managers) and check accessibility settings (StickyKeys/FilterKeys).
  • Boot to Safe Mode; if the problem disappears, suspect a driver/utility. If it persists, suspect hardware.
  • Run updated antivirus/antispyware scans if software causes are still suspected.

Takeaway: when a single physical key behaves like a command, start with hardware first (swap or test the keyboard) before assuming malware. For laptops, an external keyboard is a quick isolation tool; for desktops, a replacement keyboard is inexpensive and usually conclusive.

Recommended Answers

All 8 Replies

Member Avatar for crunchie

I see nothing bad in your log. Am uncertain as to what your problem could be, but will try to get some information that may be useful.

Member Avatar for Yzk

I think you've maybe hotkeyed your IE.. I don't know what kind of OS your running, but.. try searching in windows help for "hotkeys" and try to figure out how to disable them.

Member Avatar for sdemott

I see nothing bad in your log. Am uncertain as to what your problem could be, but will try to get some information that may be useful.

Thank you... will also review the hot keys to see what may have changed. Will keep all posted!

Member Avatar for caperjack

could it be in this keyboard program you are using .
C:\Program Files\Tavultesoft\Keyman\keyman.exe

Member Avatar for sdemott

could it be in this keyboard program you are using .
C:\Program Files\Tavultesoft\Keyman\keyman.exe

Great question... however I downloaded that program in an effort to verify/change the mapping subsequent the manifestation of the prob. Still having issues and cannot even seem to verify the root keyboard setup. This is driving me nuts... stuck trying to cut/paste the letter "l" to keep from losing my work. Further ideas/suggestions more than welcome.

Keep the ideas coming! Thank you to everyone thus far!!

:(

Member Avatar for sdemott

All... this issues has been resolved!! :lol:

Basic trouble shooting would have suggested changing the keyboard... however, in this day when viruses or so prevalent I assumed I was hacked. Well... I was wrong... my keyboard was the problem. I switched out the keyboard and all is back to normal. I can once again use the "L" key!!

Many thanks to all who commented!

Severn

Member Avatar for sdemott

To the facilitator... please considered this issue closed. Not sure how to tag it!

:cool:

Member Avatar for Dani

Thread is now marked as solved :)

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.