Malicious Script has locked my keyboard

My keyboard has locked up on me and i have no way of typing in text. Norton A-V has detected a malicious script and tried to fix it but it didn't work. I tried spybot to fix it but no good either. I also tried to use XP recovery console, but wouldn't install, and even if it did, i thought to myself i couldn't use my keybboard to type in what is required for selection of OS or deleting of partition. With no way to use my keyboard, how do i solve this problem? Would appreciate it greatly if someone could help me, i would do the same. Thanks to all.

 

Does the kbd lock survive a reboot? If so, is there any point during the boot process where it does respond? The f8 for safe mode maybe?

Did Norton give any details about the script?

 

Wow! I've never heard of such a thing. Can you tell us the name of this malicious script?

*edit*
Well, that will teach me to go grab a coffee in the middle of a post Newtness Sorry about that.

Edit Note - no problems dear lady. Newt

 

I could reboot my computer at any time with my mouse since it is not affected and im able to move around with it. But i am not able to move my cursor keys, or any keys on the keyboard of that matter, so i wouldn't be able to scroll up to safe mode, or the other options that are listed. So basically I can only use the shut down button or by pointing my mouse to restart/shutdown. Im sure it has to be a tool to fix this, otherwise a lot of computers would be thrown away. Also, the malicious script exclamation ! showed up twice, in two different forms, but i only wrote down the second one.

Norton A-V HIGH RISK message:

Object: FileSystem Object
Activity: GetSpamFolder
File: MSIExec.exe

 

Just so we don't overlook the obvious, have you tried using a different keyboard? Plug one in, reboot and let XP "find" it.

Johanna

 

See if this helps. Start > run > msconfig > services tab > uncheck "script blocker" then save. Reboot.


EDIT
DUH! You can't type msconfig. If you have before, it may be in the run history. Click the arrow.

 

Can you get online with it and run a scan with RAV and Housecall? Maybe download HijackThis from the CWShredder link in my signature. Place it in a permanent, empty folder. Open and hit scan, then save log. Once it is saved it will open in notepad. Select all from the edit button, copy and paste the results here. No typing involved.
Oh, and if you can get online, you could copy/paste msconfig into the run box. Also, if I remember right, you can get into msconfig through help.

 

Would using the on screen keyboard help?

 

Ok, i just put myself in more trouble. I have a dual boot with Windows 2000 server/XP on my laptop, (no keyboard malfunction for sure and answr. to Johanna's question). I was trying find a solution when i went into the System Icon in control panel and changed my startup operating system to W2k server/ fast detect hoping that i would be able to use my keyboard from that OS, but i forgot that i would have to do a CTRL + ALT + DELETE to log on. But oops! too late. Now im definetely stuck! I can't log on with Server and i can't switch back to XP. I was about to try your advice Dave, but i guess i can't now. What should i do now? Thanks.

 

I'm guessing that you posted this from another PC. If so, is it possibly networked to the problem PC?

If so you could do some remote control of the problem machine and edit c:\boot.ini on the problem machine to reset the defalut to XP.

 

Don't even need remote control software, perhaps. If you can connect via network, map a drive as an admin user to \c$ on the machine and edit the file that way.

 

Much too risky to log onto local network and try and edit from there. It might infect my others computers, it has already dramatically slowed down my infected computer, and bound to spread to others.

 

I was under the impression that it was in a no boot situation. Did you get it up and running? Still without a keyboard I'm assuming? Time for online scans?

 

I don't know what to do, so i put back in my old 6 gb hard drive. Thats pretty lame compared to the 60 gb infected one. I have an infected hard drive that i can't log on to because it boots up in w2k server and i need to do a ctrl/alt/delete in order to log on. So i'll keep the infected hard drive until i can find a way to fix this problem.