Double circumflex accent " ^^ " Closed

Question

Hello everyone,for a few days now, I haven't been able to type the circumflex accent on my PC connected to the internet. Every time I try to use this accent, it doubles; for example: t^^ete, m^^eme.What could be the cause of the problem?Thank you.

kitkatminou · Accepted Answer

I managed to remove the infamous ^^ double accent by using AD-AWARE, you just need to download it and perform a "Perform full system scan". It goes very fast... if it slows down and the files stop scrolling, check if it's a file: C:\System Volume Information\_restore *with numbers or letters after* just follow these steps:

1- right-click on the My Computer icon

2- properties

3- go to the system restore tab

4- check the box "disable system restore" and confirm that this is what you want to do

5- restart

6- perform another full system scan using AD-AWARE

AD-AWARE should find several critical files, once finished delete them and remove the quarantine.

And there you go!!! everything is resolved! you can check for more double accents!

And now you can redo steps 1 to 4 to uncheck the option "disable system restore" and indicate that you want to enable system restore option... (it's preferable)

Your computer is now in perfect condition!

BmV · Answer

Hi. Well, it seems to me, without wanting to alarm you (I might be wrong), that this is a symptom of a virus ....:-S Not sure, just going from memory ... Your antivirus hasn't flagged anything for you? Just in case, run an online antivirus scan: http://www.secuser.com/outils/antivirus.htm  -=O(_BmV_)O=-  Love as a sword,       ||       ||       humor as a shield.

Mister BeeGee · Answer

Bugbear Virus (or Badtrans B)!

cf · Answer

And in the case where it’s neither Badtrans nor Bugbear? I'm currently facing the ^^ problem, but neither Norton 2003 nor the anti-Bugbear or Badtrans utilities detect anything. Any ideas? Thanks

Mister BeeGee · Answer

http://www.secuser.com/antivirus

geotin · Answer

Hi,  A friend had the same problem, and we solved it thanks to the AVG antivirus and its latest UPDATE from two days ago (January 8, 2004). That's the only thing that worked. The "free edition" is enough.

startouf · Answer

I have exactly the same problem. The patches didn't do anything. I tried to download AVG but I can't. So if you have a patch, please help me. Thank you.

balltrap34 · Answer

Hello Do an online scan and paste the report here in the post use the following online antivirus: http://www.ravantivirus.com/scan/ Click on "To continue without subscribing click here" and wait a few minutes.  When "Ready" is displayed in "status," check the "Autoclean" box and then click on "Scan my PC" At the end of the scan, copy/paste the report here.

startouf · Answer

Hello, thanks to your help, I realized that I was infected by a TROJAN. While searching, I saw that Norton firewall had blocked it. It turns out that Norton did not eliminate it. Perhaps you have a solution. In any case, thank you for your help.      Scan started at 08/04/2004 18:21:29  Scanning memory... Scanning boot sectors... Scanning files... C:\WINDOWS\dl.exe - Trojan:Win32/Harnig.B -> Infected C:\WINDOWS\dl.html->(SCRIPT0000) - JS/Lamedon.A* -> Suspicious C:\WINDOWS\dlm.exe - Trojan:Win32/Harnig.B -> Infected  Scanned ============================  Objects: 45226  Directories: 5414  Archives: 6137  Size(Kb): 1891076  Infected files: 2  Found ============================  Viruses found: 1  Suspicious files: 1  Disinfected files: 0  Mail files: 116

balltrap34 · Answer

hi try this anti-trojan anti-trojan http://www.emsisoft.net/fr/ remember to update it before scanning your pc with if it doesn't work, we'll remove them manually

startouf · Answer

So the antivirus you recommended seems to have worked since it detected a contaminated file. I then selected that file and clicked on "delete"; it seems that this "malware file" was correctly removed. However, the double circumflex accent persists. Thank you.

balltrap34 · Answer

It is necessary to know which one he removed; if you don't remember, do an online scan again to see where we stand.

startouf · Answer

I just reanalyzed it and it turns out that the report is exactly the same. Otherwise, just for information, what are the effects of a trojan? Thank you for this help.

balltrap34 · Answer

We will remove them manually you click on start/run you type msconfig then startup tab you check if anything is related to this C:\WINDOWS\dl.exe C:\WINDOWS\dl.html C:\WINDOWS\dlm.exe if so you uncheck and apply now you press ctrl alt delete and on the processes tab you do the same as before but this time you check and end the process then you click start/search you click on all files and folders you paste one of the lines above in turn and search once found you click on it once and press the shift key and delete without releasing the shift key you do this for each line you restart and check with an online scan

startouf · Answer

No, Once again it didn't work, I just made the report with the RAV antivirus site. Apparently I'm still contaminated but the virus has changed files. Here it is Scan started at 09/04/2004 16:47:14  Scanning memory... Scanning boot sectors... Scanning files... C:\RECYCLER\S-1-5-21-3622405071-3599831338-910857677-1007\Dc101.exe - Trojan:Win32/Harnig.B -> Infected C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP38\A0006776.exe - Trojan:Win32/Harnig.B -> Infected C:\WINDOWS\dl.html->(SCRIPT0000) - JS/Lamedon.A* -> Suspicious  Scanned ============================  Objects: 43432  Directories: 4461  Archives: 6122  Size(Kb): 1919690  Infected files: 2  Found ============================  Viruses found: 1  Suspicious files: 1  Disinfected files: 0  Mail files: 119

balltrap34 · Answer

It worked, this one is in your recycle bin C:\RECYCLER\S-1-5-21-3622405071-3599831338-910857677-1007\Dc101.exe - Trojan:Win32/Harnig.B -> Infected empty it, if it doesn't want to, press shift and delete  this one is in your restore it needs to be disabled C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP38\A0006776.exe - Trojan:Win32/Harnig.B -> Infected  it needs to be disabled for that, right-click on "My Computer" properties. click on the system restore tab check the box to disable restore and apply restart do an online scan here to verify and if all is well, re-enable your restore by following the same path, but this time uncheck the box and restart the third one C:\WINDOWS\dl.html it's a suspicion, I need to do some research run the scan again

startouf · Answer

Hello, first of all, I thank you for this help which I hope did not take too much of your time. Now there is this suspicious file left, but the most important thing is accomplished. However, the problem with the circumflex accent persists. Is there a link between the suspicious file and this problem? It would be good at least I would have this lead. Thanks again and see you soon. Here is the report you requested to proceed.  Scanning memory... Scanning boot sectors... Scanning files... C:\WINDOWS\dl.html->(SCRIPT0000) - JS/Lamedon.A* -> Suspicious  Scanned ============================  Objects: 42875  Directories: 4441  Archives: 6117  Size(Kb): 1714564  Infected files: 0  Found ============================  Viruses found: 0  Suspicious files: 1  Disinfected files: 0  Mail files: 76

balltrap34 · Answer

I'm a bit stuck  haven't you downloaded a movie recently?

startouf · Answer

Yes, I downloaded several videos with Kazaa, but since I learned that I had a virus, I uninstalled Kazaa and removed all the videos.

balltrap34 · Answer

I think it has to do with the video files  but for now I'm stuck.

Romsy · Answer

I finally found the solution to my double circumflex accents! The problem comes from a virus called: Bug Bear-B. If you are in the same situation, like Frédéric for example, the only way to remove it (I've tried several methods without success) is to download the following free cleaning antivirus: Avast Cleaner. Here is the link: http://www.avast.com It's amazing, it works and it's the only one!  From G. on the u-blog.net site

U1 · Answer

I would like to know which version of "avast" you used because they offer several on the site, and the one I randomly picked does not work. Thank you.

isa · Answer

Hello everyone, I also had the problem with the circumflex accent, and I panicked at the thought of not being able to solve it. I applied everything you did, and I ended up managing to fix it. The solution can be found in the magazine "L'Ordinateur Individuel" from April 2004, p. 84: Type "bitdefender.com/scan/licence.php Then on the page that appears, click on "I agree" If a window titled "Security Warning" appears, click "yes" Wait for the antivirus window to appear. In the "Real Time Virus Reporting..." window, select "France" and press "OK". In "Target selection," select all hard drives and in the "Scan options" window, check all boxes except "Autoclean". Press "Start Scanning". If your PC is infected, you will see an alert message: choose a treatment from those proposed (delete, ignore, etc...) and confirm by clicking "OK". I had 32 viruses (while AVG and Secuser.com found 0!) Good luck to everyone!

Axl Virus-Killer · Answer

Rimouveur is the solution, I don't remember the name of the virus but I know I added the files of that virus in it!   The rimouveur runs in safe mode!   MCP 70-270 | http://www.renonce.com ftp://www.renonce.com/pub/renonce/RimouveXPFr.exe

HH · Answer

I had that when I got a Nuker, it's weird :s but after a while it went away by itself :D

Axl Virus-Killer · Answer

it's dumb like a virus, plus I don't even remember its name, I wonder if it's dlucas? or wintrim?  MCP 70-270 | http://www.renonce.com ftp://www.renonce.com/pub/renonce/RimouveXPFr.exe

claudie · Answer

Hello   Thank you to Isa for her very explanatory message and the link  my problem on this page: I had no option to correct as you said: "If your PC is infected, you will see an alert message: choose a treatment from those proposed (delete, ignore, etc...) and confirm by clicking on "OK"."   on my screen everything was stuck on "ignore" I had to remove everything manually! that's not normal, right?  :-(

cribiche · Answer

Hello everyone! I just ran a scan with ravantivirus again, which this time detected a virus on my PC, but I'm unable to remove it! I'm sending you the report, hoping that someone can guide me on what to do next! Thanks everyone!! Scan started at 03/06/2004 20:28:53  Scanning memory... Scanning boot sectors... Scanning files... C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O3MD87EJ\WksPatch[2].exe - Win32/HLLW.Nachi.B.dam#2 -> Infected  Scanned ============================  Objects: 36154  Directories: 2394  Archives: 6019  Size(Kb): -471378  Infected files: 1  Found ============================  Viruses found: 1  Suspicious files: 0  Disinfected files: 0  Mail files: 82

balltrap34 · Answer

Hi you have nothing to worry about, the infected file is neutralized just delete it if you can't find it, do this Show all files and folders: click on start/control panel/folder options/view Check show hidden files  Uncheck the box "Hide protected operating system files (recommended)" Then click "Ok" to apply the changes. Uncheck hide extensions for known file types and start the search again

Stiring · Answer

Recurrent problem Double circumflex accent " ^^ " all antivirus and anti-trojan analyses have been done with no results. Does anyone have any additional ideas?? Thanks in advance

cribiche · Answer

Hello everyone, it's me again, I'm still a victim of this virus, if it really is a virus!, that prevents me from properly using my circumflex accent! It's not Bugbear anyway. Plus now, I have issues with acute accents! The little tilde next to it automatically registers when I type the acute accent! Can anyone help me? Thank you so much in advance!

laurent · Answer

it's me again, I tried the procedure recommended by isa (04/17/2004 at 5:49 PM GMT+1 - message 23) and it worked.

stéphane · Answer

Hello everyone!   I also struggled with this double circumflex accent problem, but I think I've found a solution. It's Balltrap34 who put me on the right track.   Thanks to MSConfig, I suspended the programs launched at startup of Windows XP. By reactivating them one by one, I noticed that the keyboard bug was related to SVNHOST.exe, which was not detected by the antivirus I tried (including online ones).   InoculateIT 6.0 found 2 files on my disk but couldn't repair them.   This crap installs itself in a Windows\system32\Xor directory  and creates a _keys.log file where I could find a trace of all my keystrokes.   Since it wasn't running, I was able to delete it, but is that enough? We'll see.   I hope someone can dig into this issue and help us get rid of this pest!   How beautiful a circumflex accent is. You could almost use it everywhere :0)   Good luck to everyone!

Stéphane · Answer

Re-hello everyone  If the solutions proposed here didn't work, you might have, like me, stumbled upon a variant... I identified one of the little bugs that doesn't like circumflex accents:  Mine was called W32/Agobot-GZ (rest in peace!) It's a Trojan that creates an IRC backdoor on the computer. It's also a network worm that spreads on machines with bogus passwords...  Here's my procedure:  I deleted the program svnhost.exe (BE CAREFUL not to confuse it with svchost.exe which is a Windows 2000/XP task) in the directory c:\windows\system32\XOR.  In the registry, I wiped out the keys related to svnhost.exe  I exterminated the log file that had been monitoring my keyboard.  Finally, I smashed 2 suspicious dlls: auigg.dll and adarros.dll  To fine-tune everything, I uninstalled Internet Explorer (which no longer worked, unlike Firefox which was doing just fine) and replaced it with the latest version of MSIE.  Final touch: installation of all available XP patches. Just in case...  Long live everyone and death to keyloggers!  PS: the real-time monitor of InoculateIT 6 doesn't work under XP (pro). Does anyone know the URL of the patch to enable it under this system? Thanks

fdtornado80 · Answer

Hi everyone Despite all the comments and having followed the various suggested steps, I still have the same problem... What can I do? Will a complete restore allow me to get my PC back to normal without this keyboard bug? I also want to ask what BIOS flashing is? It's the first time I've heard of it... Thank you again Bye

koumou_ccm · Answer

Hello, Don't despair because this silly thing escapes if you first press the "Ctrl" +^^ key and it gives bete... Hehe, it doesn't work anymore! And yet it works with a Word document.

yves · Answer

Hello everyone, I managed to get rid of the virus (ê), proof of it. And I did this by going to the site www.emsisoft.net/fr/sotware, scanning my disk and deleting the affected files.

francois · Answer

For your information, I exhibited this behavior after a keylogger I had installed expired. Specifically: Advanced Keylogger, which is quite good otherwise. To uninstall it, you need to look for the directory that contains kmonitor.exe; there's an uninstall option. As soon as it was removed, it was restored: ôêâîûöïüëäñãõ For the nostalgic, by pressing ^ twice, you always get ^^ Good luck!

Hamid Nice · Answer

Ah Ah Ah .... typical symptom of a logger especially Family key logger Advance key logger Do a search on txt files to see if any of them are logs (journals that record all keystrokes). Also, search your drive for a specific file cisv.txt !!!  Thank you, who !!!!!!!!!!!!!!!!

STARTOUF · Answer

Hello everyone I have a big problem on my PC running Windows, Email box is blocked AZERTY keyboard is in QWERTY Norton deactivation and a bug that forces me to go in 'mode sans échec'  In short, it's a nightmare and I can only access the internet very rarely  Even if I don’t have precise analyses, please help me, thank you.

Philou · Answer

Good evening everyone  After trying some of the proposed solutions to resolve this issue with the circumflex accent, I finally solved it by remembering that some time ago I installed a software (SYNERGY) that allows you to manage multiple screens/keyboards on multiple machines. All you need to do, if you want to keep this software, is not to launch the service "synergys.exe" at startup. Now I can even write to Saïd ...... ;.)

alain babar · Answer

Hello everyone,   I was infected by the infamous double circumflex accent virus "^^". I've tried all the tricks and antivirus software suggested in the forum, but none of them worked! However, my PC had been infected by a Trojan.   After noticing that the problem didn’t occur in safe mode, I went through all the active processes (via the task manager). I am using Windows 2000.   I then found that my PC had two "SVCHOST.exe" files, the first one in C:\winnt\system with a size of 37 KB, and the second one in C:\winnt\system32 with a size of 8 KB. After a security check, only the original version of 8 KB was recognized by the Microsoft site.   So, I deleted the 37 KB file and replaced it with the original Microsoft version of 8 KB.   The issue of the double "^^" then disappeared, and I was able to get back my favorite circumflex and umlauts... so great! :)   The only downside is that no antivirus detected anything! I even had the 37 KB version checked by KASPERSKY's antivirus site, which found nothing!!! So it’s quite a nasty piece of work.   In short, here is the procedure I used that worked. However, I am not sure that the virus only targets svchost.exe!!! So make sure to check all your active processes one by one.   Good work and screw the Trojans, viruses, keyloggers, and other nasty stuff... :))

Jeffel · Answer

Hello everyone!  I would like to leave my contribution here as well for those who might encounter this problem.  Thanks to everyone who responded earlier, and the solution is not necessarily applicable in all cases since the virus or trojan can have very different variants!  As for me, I was affected!  The name of the little bug:  bpk.exe with two dlls in the directory c:\windows\system32  See here: http://www.pestpatrol.com/PestInfo/p/personal_antispy.asp#Overview  I eradicated the bug with a small software that you can download in a trial version valid for 10 days!  Personal Antispy which you can find here:   http://www.antispy.biz/downloads.html  download it here: http://www.antispy.biz/downloads/inst_antispy.exe (327KB)  install it and run it: eradicate the bug, reboot, do a search: bpk*.* because of the dlls and resident files that the software does not find!  Delete these dlls manually. (if it still blocks... we continue)  Go to the registry at: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run  and there delete the bpk key or msconfig or any other suspicious ones related to this trojan!  Reboot, do a new scan with Personal Antispy check the dlls and the registry...  That should be enough!  Thanks to everyone for all your advice!

eric · Answer

Hello, I currently have the same issue,   I have run: fix-badtrans.exe, FixDadtr.exe, FixBugb.exe, FxBgbear.exe and AntiBugBear.exe   I have run the Officescan Trend Micro and AVG antivirus   but no virus is detected and my problem persists.   If anyone has another idea, I'm all ears   See you soon   Eric

Paci · Answer

Hello.   I found that I had the same problem, which I was able to solve thanks to Jeffel's message (message no. 50).  For me, it was a file called 'ppscv.exe' in C:/WINDOWS/system32.  I’m reposting the link previously provided by Jeffel: http://www.antispy.biz/downloads/inst_antispy.exe,  to download PersonalAntispy. It will show you all the .exe files from your infected processes, and you will have to figure out which one is the right one.   That's it, and I hope I can help you ;)   Bye

guerob · Answer

Hello,  I confirm that I solved my double accent problem `` ^^ etc thanks to Personal Antispy recommended right here by Jeffel see his post http://www.commentcamarche.net/forum/affich-516039-Double-accent-circonflexe-^^#50  http://www.antispy.biz/downloads/inst_antispy.exe (327KB)   In my case, the culprit was: spsvc.exe   Thank you very much!

guerob · Answer

In my case, the culprit was: spsvc.exe

It is worth noting that the creation date of this faulty module was the same date as the installation of Warcraft on the computer... the search indicates no other installation than Warcraft on that same date.

êêêêêë · Answer

For me, the virus was indeed a bugbear and it can be removed with:  http://www.avast.com/eng/down_cleaner.html  êêêêê !

FUrIous · Answer

Hi, so I just read all your messages but I think my case is really hopeless. I've tried practically everything you suggested but nothing works, it still persists, except in safe mode. I ran scans with my antivirus, with Hitman Pro 2, Anti Bugbear B, Anti Badtrans, Avast Cleaner, I wonder if I'm just unlucky?

Freddy · Answer

Hi everyone!

I encountered the same problem. When you press ^ once, two accents appear, and there's no way to type ô for example.

The issue is related to a virus installation. To find it, I installed the Kerio software. Then I configured it this way:
- Intrusions
- Enable application behavioral blocking
- Advanced...
- When the application is about to start: use existing blocking rules or prompt me.

Then restart your PC and the first application that starts is as follows: aclrdrvs.exe. Click on "Deny". Then, once you have granted access to the other applications, delete the file located at C://Windows/System32/aclrdrvs.exe.

Test your accents and normally, it should be fine!

++

Freddy

le serial klaxonneur · Answer

Hello everyone!
So here's the deal, I've had the same problem for about a week now, and my keyboard immediately types ^^, ¨¨, ~~ and ``... It's really annoying, even though charmap helps me out a lot! But I also noticed yesterday that my ASCII code is completely messed up (for example, alt+144 for uppercase é: ♀ )... And since I use it often, the back and forth on charmap is a bit frustrating!
I've tried all sorts of scans (Avast, BitDefender, Panda, Norton...) and no virus has been found, let alone BugBear... I also tried reinstalling drivers but nothing works! The only hint is that I think I know how the problem was triggered (I'm even sure): I tried to install a keylogger not long ago, and it's the kind of practice that's a bit dangerous... I think the problematic software is Ghost Keylogger. It's no longer on my computer but the issue persists...
Does anyone have any ideas? Thanks in advance anyway!

Joseth · Answer

I have the same problem, it's frustrating, I don't know what to do!

fredouille · Answer

Here is the translated text:

There you go, I’ve done everything you suggested but nothing works. This afternoon by chance, everything was back to normal and now it’s acting up again: will I have to call in a technician?   Here’s what HijackThis gives me:   Logfile of HijackThis v1.99.1  Scan saved at 17:08:21, on 20/02/2007  Platform: Windows XP SP2 (WinNT 5.01.2600)  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)   Running processes:  C:\WINDOWS\System32\smss.exe  C:\WINDOWS\system32\winlogon.exe  C:\WINDOWS\system32\services.exe  C:\WINDOWS\system32\lsass.exe  C:\WINDOWS\system32\svchost.exe  C:\WINDOWS\System32\svchost.exe  C:\WINDOWS\system32\spoolsv.exe  C:\WINDOWS\Explorer.EXE  C:\WINDOWS\csrss.exe  C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe  C:\Program Files\Softwin\BitDefender9\bdoesrv.exe  C:\progra~1\softwin\bitdef~1\bdnagent.exe  C:\progra~1\softwin\bitdef~1\bdswitch.exe  C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe  C:\progra~1\softwin\bitdef~1\bdmcon.exe  C:\WINDOWS\system32\RunDLL32.exe  C:\Program Files\MessengerPlus! 3\MsgPlus.exe  C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe  C:\Program Files\Creative\Shared Files\CamTray.exe  C:\PROGRA~1\MI3AA1~1\wcescomm.exe  C:\PROGRA~1\MI3AA1~1\rapimgr.exe  C:\PROGRA~1\INCRED~1\bin\IMApp.exe  C:\WINDOWS\system32\svchost.exe  C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe  C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe  C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe  C:\Program Files\Softwin\BitDefender9\vsserv.exe  C:\WINDOWS\system32\wuauclt.exe  C:\Documents and Settings\Christian\Mes documents\HijackThis.exe   R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://tchatpassion.com/  R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://portail.free.fr/  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens  O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program   Files\Yahoo!\Companion\Installs\cpn\yt.dll  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program   Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program   Files\Java\jre1.5.0_06\bin\ssv.dll  O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program   Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll  O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program   Files\Yahoo!\Companion\Installs\cpn\yt.dll  O4 - HKLM\..\Run: [schedule] C:\Program Files\InterVideo\Backup\Schedule.exe  O4 - HKLM\..\Run: [WINCINEMAMGR] "C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe"  O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe  O4 - HKLM\..\Run: [BDOESRV] "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe"  O4 - HKLM\..\Run: [BDNewsAgent] "C:\progra~1\softwin\bitdef~1\bdnagent.exe"  O4 - HKLM\..\Run: [BDSwitchAgent] "C:\progra~1\softwin\bitdef~1\bdswitch.exe"  O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe  O4 - HKLM\..\Run: [BDMCon] c:\progra~1\softwin\bitdef~1\bdmcon.exe  O4 - HKLM\..\Run: [PD0630 STISvc] RunDLL32.exe P0630Pin.dll,RunDLL32EP 513  O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"  O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe  O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k  O4 - HKCU\..\Run: [Creative WebCam Tray] "C:\Program Files\Creative\Shared Files\CamTray.exe"  O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c  O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MI3AA1~1\wcescomm.exe"  O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma   Loader.exe  O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program   Files\InterVideo\Common\Bin\WinCinemaMgr.exe  O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE  O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} -   C:\PROGRA~1\MI3AA1~1\INetRepl.dll  O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} -   C:\PROGRA~1\MI3AA1~1\INetRepl.dll  O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} -   C:\PROGRA~1\MI3AA1~1\INetRepl.dll  O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program   Files\Messenger\MSMSGS.EXE  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -   C:\Program Files\Messenger\MSMSGS.EXE  O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) -   http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -   http://update.microsoft.com/...   0  O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -   https://www.trendmicro.com/en_us/forHome/products/housecall.html  O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) -   http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab  O20 - Winlogon Notify: rpcc - C:\WINDOWS\  O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll  O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems   Shared\Service\Adobelmsvc.exe  O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers   communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)  O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program   Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)  O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program   Files\Softwin\BitDefender9\vsserv.exe" /service (file missing)  O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers   communs\Softwin\

KOKOUN · Answer

The problem is probably from a keylogger like qpanel

go to "start", "run", and type "qpanel" then press enter, if a software launches or asks for a password that's it, otherwise it might be another keylogger.

ps: once you're in qpanel, if it doesn't ask you for a password, there's a button at the top "uninstall" to uninstall it.

good luck

kokoun

fredouille · Answer

Thank you very much for your response, but no program starts when I follow the indicated procedure. Given my low level of computer skills, all the methods I've already tried, and my impatience with this unsolvable problem, I've opted for the drastic solution: to bring in a computer technician and learn to reformat my PC. However, I prefer that the technician does it the first time, especially since he charges a very reasonable rate. Thank you for your help, but I give up.

Good luck to all those who find the strength to keep searching for a solution lol.

Iznogood · Answer

I don't understand... This problem is really frustrating... Like all of you, I've tried countless antivirus/antispyware/antitrojan programs... online (or not) but nothing worked... My job requires me to be able to use my accents as I wish... So, I decided to attempt the radical solution of formatting... Everything was going well until I did the online updates of my OS (Windows XP Pro) where this problem (which seems recurrent) reared its head again... Is it some kind of bad joke from Billy...? If I have the courage, I will try to format again without doing the updates this time, and I will keep you posted. But honestly, I've never seen a virus (if that's what it is?) hold me at bay like this... If I get my hands on the jerk who created it, I'll give him a piece of my mind :p

Patoch' · Answer

Hello everyone, I just encountered the problem "^^". I scanned my computer with Spybot. Nothing. With Norton. Not much either. My salvation came thanks to Ad-Aware. After a scan, it offers to restart the operation on boot. Say yes (that's not every day) and restart. Normally, it will find the same issues but can solve them.

Sergio · Answer

To solve the problem: Ad-Aware SE personal ....;o)

zelmir · Answer

Hello, I have the same problem, my accents ^ and ¨¨ no longer work, it doesn't come from my keyboard, I've tried many solutions found on the web but nothing works. I can't figure out what this problem is related to. So I'm posting my hijackthis log here and I would be grateful if you could take a look and let me know if something seems off, I don't know what else to do to fix this issue. I have tried a bunch of online antivirus tools and I can't find anything, I'm currently using Avast but that doesn't help either. I should mention that if I switch to safe mode, both accents work    Logfile of HijackThis v1.99.1 Scan saved at 11:55:30, on 07.07.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)  Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Analog Devices\SoundMAX\SMTray.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe C:\Program Files\Logitech\G-series Software\LGDCore.exe C:\Program Files\Logitech\G-series Software\LCDMon.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Wallpaper\Wallpaper.exe C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe C:\Program Files\VIA\RAIDaid_tool.exe C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe C:\WINDOWS\system32
vsvc32.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\PROGRA~1\Mozilla Firefox\firefox.exe C:\Documents and Settings\Zelmir\Desktop\New folder\hijackthis_hijackthis_1.99.1_english_17891.exe  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.ch... R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Links R3 - Default URLSearchHook is missing O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe" O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [Wallpaper] "C:\Program Files\Wallpaper\Wallpaper.exe" Starter O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: hp psc 1000 series.lnk = ? O4 - Global Startup: hpoddt01.exe.lnk = ? O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAIDaid_tool.exe O8 - Extra context menu item: E&xporter to Microsoft Excel - C:PROGRA~1MICROS~2Office12EXCEL.EXE... O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11D3-9307-00C04FAE2D4F} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll O9 - Extra 'Tools' menuitem: Create a Mobile Device Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11D2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - messenger.zone.msn.com... O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - update.microsoft.com... O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - a840.g.akamai.net... O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - acs.pandasoftware.com... O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - messenger.zone.msn.com... O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe Edited on 07/07/2007 at 12:40

zelmir · Answer

Is there really nobody to help me with this problem?
I'm discouraged by this issue; something is preventing my keyboard from functioning properly. When I press the circumflex accent and then the "e", nothing appears. The accent only works when I press it twice, and this is what happens ^^. In safe mode, it works correctly, but in normal mode, nothing at all. There must be something blocking the accent, but I don't see what.

Please, if someone can help me, I would be grateful.

kokoun · Answer

try Spyware Doctor which is much more effective and even detects keyloggers

kokoun · Answer

You don't have emule, or torrent, or access to newsgroups? ;-)  kokoun@wanadoo.fr

Paimp · Answer

Hi everyone, I have exactly the same problem as Zelmir...  Help help help  Eric

charl2302 · Answer

Hello, who has the code to uninstall OfficeScan antivirus because I'm being bothered.

kokoun · Answer

on google in 5 seconds ...    http://www.lge.ens-cachan.fr/technique/antivirus/anti_virus_trend.htm

Double circumflex accent " ^^ "

65 answers

Batch modify mp3 file properties

Place htmlspecialchars in php script

Hp windows 11 startup slow?

Https://www.commentcamarche.net/applis-sites/bureautique/389

Nvidia shield tv: update to 9.2.4 impossible

Secure boot issue

Conversion to msqli

Cannot send files from mac to iphone via airdrop

Problem with vibrator

Nvidia gtx 1660 super driver