Mouse hijacked? What to do?

B

Benny

I have a Toshiba laptop using XP Pro. Problem- when I click the start
button, the list of programs appears above it, but the list vanishes as soon
as I move the inbuilt mouse over it. If I open Internet Explorer from the
desktop icon, web pages will not scroll down- if I move the slide on the
right hand side of a webpage down,
it immediately jumps back to the top- and I can't select Favourites,
although all the other drop boxes in IE work OK. Also, if there are two
windows open, moving the mouse over a window or desktop icon make it active
(Snap-to) without selecting it,
but the mouse properties are NOT set for this.
I have reinstalled the mouse driver, and the computer tells me the mouse is
working properly (HA!).
I have installed all current Windows updates via the Microsoft update page,
and I can't see any viruses or spyware after running NAV, Bazooka and
AdAware with
up-to-date defs. I also ran the sasser removal tool from Microsoft with
nothing found. I ran CWshredder 1.57 , it said nothing found, but its scan
report, attached below, has a couple of nasty looking entries (I don't have
the faintest idea what to do about these).
If I go to the mouse hardware >properties>advanced settings box, the
sampling rate flips down to 20 as I open the box. Resetting this to default,
then rebooting the computer, fixes the problem, but it comes back next time
I start the computer.
Is this some kind of crazed spyware program gone wrong, or should I be
looking for something else?
Benny

********
Windows system dir: C:\WINDOWS\system32
AppData folder: C:\Documents and Settings\Benny\Application Data
Username: Benny

Found Hosts file: C:\WINDOWS\system32\drivers\etc\hosts (734 bytes, A)
Shell Registry value: HKLM\..\WinLogon [Shell] Explorer.exe
UserInit Registry value: HKLM\..\WinLogon [UserInit]
C:\WINDOWS\system32\userinit.exe,
CWS.Oslogo (if value is 2) Registry value: Domains: *.coolwebsearch.com [*]
dword:4
CWS.Oslogo (if value is 2) Registry value: Domains: *.coolwwwsearch.com [*]
dword:4
CWS.Googlems.2 (if value is 2) Registry value: Domains: *.xxxtoolbar.com [*]
dword:4
CWS.Googlems.4 (if value is 2) Registry value: Domains: *.teensguru.com [*]
dword:4
Registry value: DefaultPrefix (should be http://) [] http://
Registry value: WWW Prefix (should be http://) [www] http://
Registry value: Mosaic Prefix (should be http://) [mosaic] http://
Registry value: Home Prefix (should be http://) [home] http://
Found Win.ini file: C:\WINDOWS\win.ini (605 bytes, A)
Found System.ini file: C:\WINDOWS\system.ini (231 bytes, A)

- END OF REPORT
 
W

Will Denny

Hi

Try the following programs to see what spyware your system has on it:

Ad-Aware - www.lavasoftusa.com
Spybot - http://www.safer-networking.org/
CWShredder - http://www.spywareinfo.com/~merijn/downloads.html

Also see the following link:

http://mvps.org/winhelp2002/unwanted.htm

--

Will Denny
MS-MVP Windows - Shell/User


| I have a Toshiba laptop using XP Pro. Problem- when I click the start
| button, the list of programs appears above it, but the list vanishes as
soon
| as I move the inbuilt mouse over it. If I open Internet Explorer from the
| desktop icon, web pages will not scroll down- if I move the slide on the
| right hand side of a webpage down,
| it immediately jumps back to the top- and I can't select Favourites,
| although all the other drop boxes in IE work OK. Also, if there are two
| windows open, moving the mouse over a window or desktop icon make it
active
| (Snap-to) without selecting it,
| but the mouse properties are NOT set for this.
| I have reinstalled the mouse driver, and the computer tells me the mouse
is
| working properly (HA!).
| I have installed all current Windows updates via the Microsoft update
page,
| and I can't see any viruses or spyware after running NAV, Bazooka and
| AdAware with
| up-to-date defs. I also ran the sasser removal tool from Microsoft with
| nothing found. I ran CWshredder 1.57 , it said nothing found, but its
scan
| report, attached below, has a couple of nasty looking entries (I don't
have
| the faintest idea what to do about these).
| If I go to the mouse hardware >properties>advanced settings box, the
| sampling rate flips down to 20 as I open the box. Resetting this to
default,
| then rebooting the computer, fixes the problem, but it comes back next
time
| I start the computer.
| Is this some kind of crazed spyware program gone wrong, or should I be
| looking for something else?
| Benny
|
| ********
| Windows system dir: C:\WINDOWS\system32
| AppData folder: C:\Documents and Settings\Benny\Application Data
| Username: Benny
|
| Found Hosts file: C:\WINDOWS\system32\drivers\etc\hosts (734 bytes, A)
| Shell Registry value: HKLM\..\WinLogon [Shell] Explorer.exe
| UserInit Registry value: HKLM\..\WinLogon [UserInit]
| C:\WINDOWS\system32\userinit.exe,
| CWS.Oslogo (if value is 2) Registry value: Domains: *.coolwebsearch.com
[*]
| dword:4
| CWS.Oslogo (if value is 2) Registry value: Domains: *.coolwwwsearch.com
[*]
| dword:4
| CWS.Googlems.2 (if value is 2) Registry value: Domains: *.xxxtoolbar.com
[*]
| dword:4
| CWS.Googlems.4 (if value is 2) Registry value: Domains: *.teensguru.com
[*]
| dword:4
| Registry value: DefaultPrefix (should be http://) [] http://
| Registry value: WWW Prefix (should be http://) [www] http://
| Registry value: Mosaic Prefix (should be http://) [mosaic] http://
| Registry value: Home Prefix (should be http://) [home] http://
| Found Win.ini file: C:\WINDOWS\win.ini (605 bytes, A)
| Found System.ini file: C:\WINDOWS\system.ini (231 bytes, A)
|
| - END OF REPORT
|
|
|
 
M

Mike

Have you gone to the mouse manufacturer's website to see if there may be a
driver or utility update for your mouse? Sometimes these updates may solve
problems.

--Mike

Benny said:
I have a Toshiba laptop using XP Pro. Problem- when I click the start
button, the list of programs appears above it, but the list vanishes as soon
as I move the inbuilt mouse over it. If I open Internet Explorer from the
desktop icon, web pages will not scroll down- if I move the slide on the
right hand side of a webpage down,
it immediately jumps back to the top- and I can't select Favourites,
although all the other drop boxes in IE work OK. Also, if there are two
windows open, moving the mouse over a window or desktop icon make it active
(Snap-to) without selecting it,
but the mouse properties are NOT set for this.
I have reinstalled the mouse driver, and the computer tells me the mouse is
working properly (HA!).
I have installed all current Windows updates via the Microsoft update page,
and I can't see any viruses or spyware after running NAV, Bazooka and
AdAware with
up-to-date defs. I also ran the sasser removal tool from Microsoft with
nothing found. I ran CWshredder 1.57 , it said nothing found, but its scan
report, attached below, has a couple of nasty looking entries (I don't have
the faintest idea what to do about these).
If I go to the mouse hardware >properties>advanced settings box, the
sampling rate flips down to 20 as I open the box. Resetting this to default,
then rebooting the computer, fixes the problem, but it comes back next time
I start the computer.
Is this some kind of crazed spyware program gone wrong, or should I be
looking for something else?
Benny

********
Windows system dir: C:\WINDOWS\system32
AppData folder: C:\Documents and Settings\Benny\Application Data
Username: Benny

Found Hosts file: C:\WINDOWS\system32\drivers\etc\hosts (734 bytes, A)
Shell Registry value: HKLM\..\WinLogon [Shell] Explorer.exe
UserInit Registry value: HKLM\..\WinLogon [UserInit]
C:\WINDOWS\system32\userinit.exe,
CWS.Oslogo (if value is 2) Registry value: Domains: *.coolwebsearch.com [*]
dword:4
CWS.Oslogo (if value is 2) Registry value: Domains: *.coolwwwsearch.com [*]
dword:4
CWS.Googlems.2 (if value is 2) Registry value: Domains: *.xxxtoolbar.com [*]
dword:4
CWS.Googlems.4 (if value is 2) Registry value: Domains: *.teensguru.com [*]
dword:4
Registry value: DefaultPrefix (should be http://) [] http://
Registry value: WWW Prefix (should be http://) [www] http://
Registry value: Mosaic Prefix (should be http://) [mosaic] http://
Registry value: Home Prefix (should be http://) [home] http://
Found Win.ini file: C:\WINDOWS\win.ini (605 bytes, A)
Found System.ini file: C:\WINDOWS\system.ini (231 bytes, A)

- END OF REPORT
Click to expand...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

CW Shredder 7
Window XP: How to eliminate the "about:blank" homepage 6
Windows 10 Hide Edge button in Internet Explorer 0
Remote Procedure Call Service Terminated Unexpectedly 2
Hey can somone help me WITH getting a keylogger out of my computer 4
Long PAUSE during Vista Startup 5
hijacked 1
My Computer folder automatically opens every time... 3

Top