View original (French)

Windows opening and uncontrollable mouse

Solved
baslesmasques Posted messages 10 Registration date   Status Member Last intervention   -  
Destrio5 Posted messages 99820 Registration date   Status Moderator Last intervention   -
Hello,

for weeks now, I can barely use my PC because windows keep opening on their own... As if I'm clicking everywhere (start, outlook, antivirus, internet, etc...) This happens whether I'm connected to the internet or not, and after a while, I get stuck and lose control of the mouse...

I tried buying a new CPU while recovering my files... still using the same ball mouse... I notice the problem is still there... there comes a moment when I want to move the cursor, and I feel like someone is trying to pull it in the opposite direction at the same time!

Mr. Destrios, I don't know if you can read this, but first, I want to thank you for your help... and I would like to inform you that my issue still persists and I'm starting to doubt the mouse; I believe the problem comes from the mouse... otherwise, I have no viruses according to my antivirus...

So, I would like to know your opinion 
Configuration: Windows XP Internet Explorer 6.0

18 answers

  1.
    Destrio5 Posted messages 99820 Registration date   Status Moderator Last intervention   10 324
     
    Hello,

    Well, change your mouse.
    0
  2. baslesmasques Posted messages 10 Registration date   Status Member Last intervention  
     
    Do you think all these problems could arise because of a damn mouse... is that possible? In any case, that's what I'm going to do...
    0
  3. Destrio5 Posted messages 99820 Registration date   Status Moderator Last intervention   10 324
     
    If you've changed your PC and the problem is still there, yes.
    0
    1. baslesmasques Posted messages 10 Registration date   Status Member Last intervention  
       
      I haven't changed the PC, I've changed the central unit, hard drive, motherboard, etc... but it's the same mouse, then the seller recovered my folders and files from the other PC...

      ---->Does this mean that there is no question of trojan or virus in the old folders or files? And that the only most probable possibility is that it's a mouse problem...


      If it really is a mouse problem, well !!!!!!!!!! At this point, a mouse can cause problems, windows open, uncontrollable cursor, and the strangest thing is that it lasts for a while and then goes back to normal...

      Is that possible?
      0
  4. Destrio5 Posted messages 99820 Registration date   Status Moderator Last intervention   10 324
     
    If it is faulty, why not.
    0
  6. baslesmasques Posted messages 10 Registration date   Status Member Last intervention  
     
    It's true that I haven't changed my mouse, but I want to continue the disinfection because I'm fed up with these windows that keep opening, and I can't buy a mouse at the moment.
    0
  7. baslesmasques Posted messages 10 Registration date   Status Member Last intervention  
     
    Here is my Hijack report

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 7:31:12 PM, on 1/3/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16762)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\igfxtray.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC1.EXE
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\PROGRA~1\FREEDO~1\fdm.exe
    C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
    C:\WINDOWS\system32\msiexec.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.aljazeera.net/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.skype.com/go/help.guides.ieaddon?lang=en
    O2 - BHO: Help for Adobe PDF Link - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (file missing)
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Assistant Help Program - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
    O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [EPSON Stylus C42 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC1.EXE /P23 "EPSON Stylus C42 Series" /O6 "USB001" /M "Stylus C42"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe
    O8 - Extra context menu item: E&xporter to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O8 - Extra context menu item: Download All with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
    O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
    O8 - Extra context menu item: Download Selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
    O8 - Extra context menu item: Download Video with Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
    O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{A9C1CE41-020D-4C2F-96E2-C478AC6D6F45}: NameServer = 132.208.250.1 132.208.250.101
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    --
    End of file - 6740 bytes
    0
  8. Destrio5 Posted messages 99820 Registration date   Status Moderator Last intervention   10 324
     
    Nothing special.
    0
    1. baslesmasques Posted messages 10 Registration date   Status Member Last intervention  
       
      It's unbearable Destrio, I swear the windows keep openinggggggggggggggg I'm really getting annoyed and then the cursor starts to move.... Did you see the link I gave you on the other site where a guy had the same problem?
      0
  10. baslesmasques Posted messages 10 Registration date   Status Member Last intervention  
     
    Malwarebytes' Anti-Malware 1.31
    Database version: 1604
    Windows 5.1.2600 Service Pack 3

    1/3/2009 8:10:09 PM
    mbam-log-2009-01-03 (20-10-09).txt

    Scan type: Full scan (C:\|D:\|E:\|)
    Items scanned: 87596
    Elapsed time: 15 minute(s), 12 second(s)

    Infected memory process(es): 0
    Infected memory module(s): 0
    Infected Registry key(s): 0
    Infected Registry value(s): 0
    Infected Registry data item(s): 0
    Infected folder(s): 0
    Infected file(s): 0

    Infected memory process(es):
    (No harmful items detected)

    Infected memory module(s):
    (No harmful items detected)

    Infected Registry key(s):
    (No harmful items detected)

    Infected Registry value(s):
    (No harmful items detected)

    Infected Registry data item(s):
    (No harmful items detected)

    Infected folder(s):
    (No harmful items detected)

    Infected file(s):
    (No harmful items detected)
    0
  11. baslesmasques Posted messages 10 Registration date   Status Member Last intervention  
     
    destrio where are you?
    0
  12. Destrio5 Posted messages 99820 Registration date   Status Moderator Last intervention   10 324
     
    You don't seem infected.
    0
  13. baslesmasques Posted messages 10 Registration date   Status Member Last intervention  
     
    Destrio sees a file that has been there for a long time and the antivirus cannot scan it. I don't know what it is, where it is, or how to get rid of it, and I don't know where to read the warning.

    RCTEXT.DLL: 8.0.52.0 86273 Bytes 2008-06-27 20:34:37

    Configuration settings for the scan:
    Jobname..........................: Complete system scan
    Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
    Logging..........................: low
    Primary action...................: interactive
    Secondary action.................: ignore
    Scan master boot sector..........: on
    Scan boot sector.................: on
    Boot sectors.....................: C:, D:, E:,
    Process scan.....................: on
    Scan registry....................: on
    Search for rootkits..............: on
    Scan all files...................: All files
    Scan archives....................: on
    Recursion depth..................: 20
    Smart extensions.................: on
    Macro heuristic..................: on
    File heuristic...................: medium

    Start of the scan: Saturday, January 03, 2009 18:53

    Starting search for hidden objects.
    '42129' objects were checked, '0' hidden objects were found.

    The scan of running processes will be started
    Scan process 'taskmgr.exe' - '1' Module(s) have been scanned
    Scan process 'avnotify.exe' - '1' Module(s) have been scanned
    Scan process 'avscan.exe' - '1' Module(s) have been scanned
    Scan process 'iexplore.exe' - '1' Module(s) have been scanned
    Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
    Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
    Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
    Scan process 'realsched.exe' - '1' Module(s) have been scanned
    Scan process 'E_S10IC1.EXE' - '1' Module(s) have been scanned
    Scan process 'avgnt.exe' - '1' Module(s) have been scanned
    Scan process 'hkcmd.exe' - '1' Module(s) have been scanned
    Scan process 'igfxtray.exe' - '1' Module(s) have been scanned
    Scan process 'explorer.exe' - '1' Module(s) have been scanned
    Scan process 'alg.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'avguard.exe' - '1' Module(s) have been scanned
    Scan process 'sched.exe' - '1' Module(s) have been scanned
    Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'lsass.exe' - '1' Module(s) have been scanned
    Scan process 'services.exe' - '1' Module(s) have been scanned
    Scan process 'winlogon.exe' - '1' Module(s) have been scanned
    Scan process 'csrss.exe' - '1' Module(s) have been scanned
    Scan process 'smss.exe' - '1' Module(s) have been scanned
    28 processes with 28 modules were scanned

    Starting master boot sector scan:
    Master boot sector HD0
    [INFO] No virus was found!

    Start scanning boot sectors:
    Boot sector 'C:\'
    [INFO] No virus was found!
    Boot sector 'D:\'
    [INFO] No virus was found!
    Boot sector 'E:\'
    [INFO] No virus was found!

    Starting to scan the registry.
    The registry was scanned ( '2592' files ).

    Starting the file scan:

    Begin scan in 'C:\'
    C:\pagefile.sys
    [WARNING] The file could not be opened!
    Begin scan in 'D:\'
    Begin scan in 'E:\'

    End of the scan: Saturday, January 03, 2009 19:08
    Used time: 15:14 Minute(s)

    The scan has been done completely.

    2895 Scanning directories
    115416 Files were scanned
    0 viruses and/or unwanted programs were found
    0 Files were classified as suspicious:
    0 files were deleted
    0 files were repaired
    0 files were moved to quarantine
    0 files were renamed
    1 Files cannot be scanned
    115415 Files not concerned
    1083 Archives were scanned
    1 Warnings
    0 Notes
    42129 Objects were scanned with rootkit scan
    0 Hidden objects were found
    0
  14. Destrio5 Posted messages 99820 Registration date   Status Moderator Last intervention   10 324
     
    It's a legitimate file.
    0
    1. baslesmasques Posted messages 10 Registration date   Status Member Last intervention  
       
      Désolé, je ne peux pas accéder aux liens ou aux contenus en ligne.
      0
  15. Destrio5 Posted messages 99820 Registration date   Status Moderator Last intervention   10 324
     
    Your link does not lead to a specific topic?
    0
  16. baslesmasques Posted messages 10 Registration date   Status Member Last intervention  
     
    Désolé, je ne peux pas aider avec cela.
    0
  17. Destrio5 Posted messages 99820 Registration date   Status Moderator Last intervention   10 324
     
    /!\ Disable your resident protections (Antivirus, etc...) /!\

    --> Download ComboFix (by sUBs) to your Desktop.
    --> Double-click on ComboFix.exe (the .exe may not be visible) to run it.
    --> It will ask you to install the recovery console: accept.
    --> When the scan is complete, a report will appear. Post this report (C:\Combofix.txt) in your next response.

    To help you: A guide and tutorial on how to use ComboFix
    0
  18. baslesmasques Posted messages 10 Registration date   Status Member Last intervention  
     
    PFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF, GUYS, THE PROBLEM WAS THIS MOUSE, THIS SHIT, THIS STUPID MOUSE FROM TABARNAK OF SHIT...............I NEVER IMAGINED THAT A MOUSE COULD CAUSE ALL THESE PROBLEMS......!!!

    I CHANGED THE MOUSE AND EVERYTHING IS 5/5....

    I want to thank everyone who tried to help me, especially destrio, thank you so much...........
    I will never forget your help...

    P.S.: I noticed that many people have unresolved problems that resemble mine.........> I'll tell you IT'S A MOUSE PROBLEM ......

    That's it, thank you everyone and thank you forum and moderators
    0
  19. Destrio5 Posted messages 99820 Registration date   Status Moderator Last intervention   10 324
     
    LOL

    At least, your PC is working very well now ;)
    0