Double circumflex accent on Windows 10

Solved/Closed

manuworld Posted messages 25 Status Member -
bazfile Posted messages 58506 Registration date Status Moderator Last intervention - 14 Jan 2021 at 16:29

Hello,
I have a problem with the circumflex accent and diaeresis.
No matter which application I use (Word, Firefox, Thunderbird...), when I type a circumflex accent or a diaeresis using the specific key, I get a double circumflex accent or diaeresis before the letter.
To avoid inappropriate responses, I specify that yes, I know I need to first type the accent using the key next to the P and then type the letter.
For your information, I am on Windows 10 Pro 64-bit.

Thank you in advance for your help.

6 answers

Answer 1 / 6

Best answer
The best answer is the one that has been validated by our teams.
Malekal_morte- Posted messages 178136 Registration date Status Moderator, Security Contributor Last intervention 24 712
Hello,

To check for a keylogger:

Follow the FRST tutorial. ( take the time to read carefully - everything is well explained ).

Download and run the FRST scan, 3 FRST reports will be generated:
- FRST.txt
- Shortcut.txt
- Additional.txt
Send these 3 reports to the website http://pjjoint.malekal.com/ and in return, provide the 3 pjjoint links that lead to the reports here in a new response so that we can review them.

--
Please press any key to continue the disinfection...
2
1. manuworld Posted messages 25 Status Member 1
  
  Hello,
  thank you for your response.
  Just so you know, I'm not sure if I appear as the "author of the topic" because I can't log in. Access to the page is denied to me even when I request to reset my password.
  Anyway, this message is just to say that I'll try to apply your solution despite being really bad at computers. So it will take me some time, especially since my PC has to be sent for repairs to change the power supply.
  Thank you, and I'll keep you updated...
  
  0
2. Malekal_morte- Posted messages 178136 Registration date Status Moderator, Security Contributor Last intervention 24 712 > manuworld Posted messages 25 Status Member
  
  Which page and what password?
  If you're talking about pjjoint, then send the reports by email at: spamhere-@wanadoo.fr
  
  0
Answer 2 / 6
Malekal_morte- Posted messages 178136 Registration date Status Moderator, Security Contributor Last intervention 24 712

Don't feel like the PC is infected.

You should uninstall Spybot, it's not useful.

To see:

Do an online scan with NOD32 and then save the report. Send it to http://pjjoint.malekal.com/ and provide the link here.

--
Please press any key to continue the disinfection...
2
1. manuworld Posted messages 25 Status Member 1
  
  I did the scan with NO32 but I have no report to send you because it found absolutely nothing.
  Why do we need to uninstall Spybot?
  What can I do to get rid of this accent ^e problem?
  
  Thank you for your help and your patience.
  
  0
2. Malekal_morte- Posted messages 178136 Registration date Status Moderator, Security Contributor Last intervention 24 712 > manuworld Posted messages 25 Status Member
  
  Spybot is not very effective.
  Personally, I don't see the point.
  
  How long have you been having this keyboard problem?
  
  0
3. manuworld Posted messages 25 Status Member 1 > Malekal_morte- Posted messages 178136 Registration date Status Moderator, Security Contributor Last intervention
  
  Hello,
  my issue has been going on for about a month. Just to clarify, the PC is like new, as I bought it at the end of July and it has already spent 2 weeks in customer service due to a noisy power supply.
  
  As for Spybot, I will take note. But do you have an equivalent you could recommend?
  Thanks in advance for your valuable help.
  (For your information, my PC is going back to customer service this afternoon, still for the power supply. So I won’t be able to respond for a while).
  
  0
4. Malekal_morte- Posted messages 178136 Registration date Status Moderator, Security Contributor Last intervention 24 712 > manuworld Posted messages 25 Status Member
  
  You need to test with a Live CD to see if it does the same thing
  if so, it's hardware.
  
  0
5. manuworld > Malekal_morte- Posted messages 178136 Registration date Status Moderator, Security Contributor Last intervention
  
  Hi! I'm finally back.
  Actually, the customer service of my PC changed the hard drive. So I no longer have any accent problems.
  The proof: ê or ë
  The only regret I have is that I will never know what happened while hoping it doesn't happen again.
  In any case, thank you for your patience and your valuable help.
  
  0
Answer 3 / 6
lou55220 Posted messages 2 Status Member

Hello,

I have a problem with double circumflex accents and I noticed on some forums that it could be a malicious program.
Here are my three reports.
shortcut.txt :

https://pjjoint.malekal.com/files.php?id=20170613_y5t5p611j13

Addition.txt :

https://pjjoint.malekal.com/files.php?id=20170613_z14n5s13c9f13

FRST.txt

https://pjjoint.malekal.com/files.php?id=FRST_20170613_k10v11x12k13p13

Thank you in advance for any help you can provide!

Lou
0
1. Malekal_morte- Posted messages 178136 Registration date Status Moderator, Security Contributor Last intervention 24 712
  
  1/
  Here is the correction to be made with FRST. You can refer to this explanatory note with screenshots.
  
  Open Notepad: Windows key + R,
  In the "Run" field, type notepad and press OK.
  Copy/Paste the following into it:
  
  CreateRestorePoint:
  CloseProcesses:
  C:\Program Files (x86)\Common Files\Wondershare
  HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2072928 2014-10-31] (Wondershare)
  Hosts:
  EmptyTemp:
  RemoveProxy:
  Reboot:
  
  Once the text is pasted in Notepad,
  Go to the "File" menu and then "Save As",
  On the left, select Desktop,
  In the field at the bottom, file name enter: fixlist.txt
  Click on "Save", this will create fixlist.txt on the Desktop.
  
  Restart FRST and click on the "Fix" button
  A restart may be necessary ( not mandatory )
  A text file will appear, copy/paste the content here in a new message.
  
  Restart the computer.
  
  2/
  Perform a NOD32 online scan and save the report. Send it to https://pjjoint.malekal.com/ and provide the link here.
  
  0
Answer 4 / 6
lou55220 Posted messages 2 Status Member

Hello,

Thank you for the quick response. I followed your instructions to the letter and nothing has changed. Additionally, I had already run AdwCleaner, CCleaner, my antivirus, and last night two online antivirus scans found nothing (could this come from Windows?).

Here is the fix log:

Results of the Farbar Recovery Scan Tool (x64) Version: 12-06-2017
Executed by asus (13-06-2017 23:08:43) Run:1
Executed from C:\Users\asus\Desktop
Profiles loaded: asus (Available profiles: asus & Administrator)
Boot mode: Normal
==============================================

fixlist content:
CreateRestorePoint:
CloseProcesses:
C:\Program Files (x86)\Common Files\Wondershare
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2072928 2014-10-31] (Wondershare)
Hosts:
EmptyTemp:
RemoveProxy:
Reboot:

The Restore Point was successfully created.
Processes closed successfully.
C:\Program Files (x86)\Common Files\Wondershare => moved successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Wondershare Helper Compact.exe => value removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

========= RemoveProxy: =========

HKU\S-1-5-21-2265434244-1428446104-2262842104-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\S-1-5-21-2265434244-1428446104-2262842104-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully

========= End of RemoveProxy: =========

=========== EmptyTemp: ==========

BITS transfer queue => 6053888 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 12762140 B
Java, Flash, Steam htmlcache => 541451551 B
Windows/system/drivers => 82016 B
Edge => 3590 B
Chrome => 76947237 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 12426 B
asus => 12465187 B
Administrateur => 15035 B

RecycleBin => 414 B
EmptyTemp: => 619.7 MB temporary data deleted.

================================

The system had to restart.
End of Fixlog 23:10:02
....

I do not have the report from the NOD32 antivirus yet as it could not finish last night but it was almost complete and it found nothing (re-running it today)

Have a nice day and thank you,

Lou
0
1. Malekal_morte- Posted messages 178136 Registration date Status Moderator, Security Contributor Last intervention 24 712
  
  ok as mentioned above, I don't think the computer is infected.
  What does it do in safe mode?
  
  0
Answer 5 / 6
Layz

Hello!
I have the s^^ame (...) problem and really don't know how to analyze the reports resulting from this FRST analysis. Could you help me as well? Here are the three links:

https://pjjoint.malekal.com/files.php?id=20190523_c6m8w6z9y6

https://pjjoint.malekal.com/files.php?id=FRST_20190523_b10l13p11c15s13

https://pjjoint.malekal.com/files.php?id=20190523_z5z11w8e10r14

I hope I did this correctly...
Also, is there really a risk regarding the data saved on my PC with this virus?
Thank you in advance and have a great day!
0
1. Malekal_morte- Posted messages 178136 Registration date Status Moderator, Security Contributor Last intervention 24 712
  
  Hi,
  
  Yeah, infected by a trojan,
  
  You have programs that were installed when the computer was purchased or installed later that are not necessarily useful.
  They clutter Windows and can slow it down.
  You can therefore uninstall them.
  Go to the Control Panel
  then to Programs and Features.
  Uninstall:
  
  App Explorer
  iCloud
  McAfee WebAdvisor (useless)
  Web Companion (spyware)
  
  PS: CCleaner is not really useful, even if it's recommended everywhere.
  If you want to keep it, disable the monitoring of CCleaner, unnecessary, as it starts up with Windows and slows it down with its constant cleanups, see: https://www.malekal.com/supprimer-ccleaner-demarrage-windows/
  
  Here is the fix to perform with FRST. You can refer to this explanatory note with screenshots.
  Restart FRST and then press CTRL + Y on your keyboard.
  The notepad will open, copy/paste this.
  
  Start
  CloseProcesses:
  CreateRestorePoint:
  HKU\S-1-5-21-880212356-1352285994-680412756-1001\...\Run: [WinW] => "C:\Users\hoffl\AppData\Roaming\Microsoft\AutoIt3.exe" "C:\Users\hoffl\AppData\Roaming\Microsoft\WinW"
  2019-05-20 23:15 - 2019-05-23 09:04 - 000000000 ____D C:\Users\hoffl\AppData\Roaming\WinF
  HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [298296 2018-03-25] (Apple Inc. -> Apple Inc.)
  2019-05-21 17:33 - 2018-09-07 00:35 - 000567192 _____ C:\Users\hoffl\Desktop\cacaoweb.exe
  2019-05-20 23:12 - 2019-05-20 23:12 - 000893608 _____ (AutoIt Team) C:\Users\hoffl\AppData\Roaming\Microsoft\AutoIt3.exe
  2019-05-20 23:12 - 2019-05-20 23:12 - 000186112 _____ () C:\Users\hoffl\AppData\Roaming\Microsoft\WinW
  EmptyTemp:
  RemoveProxy:
  Reboot:
  End
  
  Save the content via the file menu and then save.
  
  Close the notepad, return to FRST and click the "Fix" button
  A restart may be necessary and automatic.
  A text file will appear, copy/paste the content here in a new message.
  
  Restart the computer.
  
  0
Answer 6 / 6
mejuko Posted messages 2 Status Member

Hi!

I've also fallen into the maze of ^^ ...

I followed your tutorials but I admit I didn't quite understand the part about cleaning the trojan.

Could you lend me a hand?

Here are my files:

FRST: https://pjjoint.malekal.com/files.php?id=FRST_20200421_z13r8o6m13v9
Addition: https://pjjoint.malekal.com/files.php?id=20200421_s12v7z13t13o15
Shortcut: https://pjjoint.malekal.com/files.php?id=20200421_k10k10b6r7v12

Thank you for your help!
0
1. Malekal_morte- Posted messages 178136 Registration date Status Moderator, Security Contributor Last intervention 24 712
  
  Hi,
  
  Yep infected.
  
  If you can, send C:\Users\Nico\svchook.exe to https://upload.malekal.com
  
  then:
  
  Here is the FRST fix to execute.
  You can use this explanatory note with screenshots.
  
  1- Open FRST -
  2 - Copy the entire script from the box below:
  Start:
  CloseProcesses:
  CreateRestorePoint:
  Task: {3E900A02-0D40-447F-9F03-12CEE9474543} - System32\Tasks\ZLCK2QZ7 => C:\Users\Nico\svchook.exe [1013928 2020-02-20] (AutoIt Consulting Ltd -> AutoIt Team)
  Task: {41D4D599-0FCA-4FE6-B26B-7F301F92F506} - System32\Tasks\0XEYA5RD => C:\Users\Nico\svchook.exe [1013928 2020-02-20] (AutoIt Consulting Ltd -> AutoIt Team)
  Startup: C:\Users\Nico\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Jarvee.lnk [2019-05-27]
  ShortcutTarget: Jarvee.lnk -> C:\Users\Nico\AppData\Roaming\Jarvee\Jarvee.exe (File not found)
  2020-04-19 10:18 - 2020-04-21 09:25 - 000000000 ____D C:\Users\Nico\AppData\Roaming\news
  2020-02-20 15:12 - 2020-02-20 15:12 - 001013928 _____ (AutoIt Team) C:\Users\Nico\svchook.exe
  EmptyTemp:
  RemoveProxy:
  Reboot:
  End::
  
  3- Once the script is copied, click on Fix.
  
  Let the fix complete, once it’s done you will be asked to restart your PC, do it as soon as prompted, see below.
  Then once your computer has restarted:
  4- You will have a Fixlog file on your desktop, send it via https://pjjoint.malekal.com/ then put the link generated by Pjoint in your next message.
  5- CHECK AND LET ME KNOW IF YOUR ISSUE IS STILL PRESENT.
  
  0
  1. mejuko Posted messages 2 Status Member > Malekal_morte- Posted messages 178136 Registration date Status Moderator, Security Contributor Last intervention
    
    Problem solved, thank you very much!
    
    0
  2. Malekal_morte- Posted messages 178136 Registration date Status Moderator, Security Contributor Last intervention 24 712 > mejuko Posted messages 2 Status Member
    
    You're welcome,
    
    Delete C:\FRST
    
    Change your passwords and follow the guidelines for proper conduct to avoid getting infected again.
    
    Finish with an MBAM cleanup:
    Download Malwarebytes
    Malwarebytes Anti-Malware Free Version Tutorial
    
    Avoid regular scans and cleanups with ZHPCleaner, AdwCleaner, not useful.
    
    To avoid viruses, you need to know how hackers infect computers: How computer viruses are distributed
    Finally, to protect and secure your PC:
    How to protect your PC from viruses and hackers?
    Securing your PC against viruses
    
    0
  3. Skyrocket > Malekal_morte- Posted messages 178136 Registration date Status Moderator, Security Contributor Last intervention
    
    Hello,
    
    I have the same problem and nothing works...
    
    So I tried a FRST scan, hoping to find a solution.
    Thank you in advance if you can look into it ;)
    
    FRST: https://pjjoint.malekal.com/files.php?id=FRST_20210114_q5x12d5l8o6
    ADDITION: https://pjjoint.malekal.com/files.php?id=20210114_j15k10u5p9i5
    
    0
  4. bazfile Posted messages 58506 Registration date Status Moderator Last intervention 20 273 > Skyrocket
    
    Post from 2016, too many different messages, it's confusing. Create your own thread and ask your question by describing your problem precisely https://forums.commentcamarche.net/forum/virus-securite-7/new
    I'm closing this post.
    
    0

Double circumflex accent on Windows 10

6 answers

End of Fixlog 23:10:02

Color of visited links in firefox 153

How to tell if i can upgrade the ram on my pc?

Windows security

E.tre456.worm.windows

Broken logitech g915 keyboard key (original part)

Computer stuck at boot menu on startup page

Texture issues in enshrouded

Printer uninstalled

Pc audio connection: jack ports, hi-fi chain

Recording and reading issue for jpg files