Author Topic: avast moved file to chest - now no keyboard. Can't login  (Read 3107 times)

0 Members and 1 Guest are viewing this topic.

Offline arjay

  • Jr. Member
  • **
  • Posts: 23
avast moved file to chest - now no keyboard. Can't login
« on: February 08, 2012, 02:02:28 PM »
Hi

A friend asked me to clean  an infected notebook running win vista.  I installed Avast and ran a boot scan first.  There were about a dozen infected files.  I moved them to chest.  After the reboot, the keyboard was unresponsive and I could not log in.  Same goes for safe mode. 

I use linux myself and can mount the win vista HD using a linux Live CD.  However, the chest folder just numbers the files 00000001, 00000002 etc.  I want to be able to id the files and restore likely keyboard files if possible.  Is there a way to see which file is which?  If so, can I rename it and drag it back to its original location?  I appreciate that might reinfect the PC but if I can't get into it at all I am stuffed anyway.

Thanks for any help people can give
« Last Edit: February 08, 2012, 02:11:00 PM by arjay »

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5564
  • Spartan Warrior
Re: avast moved file to chest - now no keyboard. Can't login
« Reply #1 on: February 08, 2012, 08:40:09 PM »
arjay,

You don't say what type keyboard, i.e., USB or PS2, or onboard.

Does keyboard work in linux?

Keyboard should work in BIOS, but not in windows.  Switching keyboards may work for you, then maybe can login into vista.

Be sure to turn off computer before switching to a PS2 keyboard, turn on, and start as normal.

You may have some sort of rootkit, and one of those files prevents windows from booting when quarantined.

Worst case, use linux to copy and paste files important to you. 

EDIT:
Windows 10 Home 64-bit 22H2 Avast Premier Security version 24.1.6099 (build 24.1.88821.762)  UI version 1.0.797
 UI version 1.0.788.  Windows 11 Home 23H2 - Windows 11 Pro 23H2 Avast Premier Security version 24.2.6105 (build 24.1.8918.827) UI version 1.0.801

Offline arjay

  • Jr. Member
  • **
  • Posts: 23
Re: avast moved file to chest - now no keyboard. Can't login
« Reply #2 on: February 08, 2012, 11:33:00 PM »
Thanks so much for replying.  Just as you say, the keyboard works OK in BIOS but not when I want to log into Win Vista.  The K/B is the one on the actual notebook.  I didn't think of trying an external one - I'll try tomorrow afternoon and report back.  I am pretty sure that one of the quarantined files is required for the K/B but it isn't obvious which one - all the usual ones like keyboard.sys etc are still there.  Problem is i can't log into windows to fire up Avast and have a look at the Chest.  Ah well ....

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: avast moved file to chest - now no keyboard. Can't login
« Reply #3 on: February 09, 2012, 12:10:50 AM »
It may be keyboard system file that was infected - plug in a usb keyboard and you should have access

DonZ63

  • Guest
Re: avast moved file to chest - now no keyboard. Can't login
« Reply #4 on: February 09, 2012, 12:39:47 AM »
You should be able to get into device manager using only you mouse unless you use a logon password. Check for a yellow explanation point under keyboard and just reinstall it's driver.

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5564
  • Spartan Warrior
Re: avast moved file to chest - now no keyboard. Can't login
« Reply #5 on: February 10, 2012, 06:23:41 AM »
Glad to hear K/B works in BIOS.

Did you try an USB K/B?

Another workaround is to use F8 to access safe mode when you get a K/B that works, and choose Administrator.  Most of the time, Admin does not have a password, just hit enter, and you are in.

Follow DonZ63's advice and repair using driver reinstall via device manager.

Failing that, go here for a copy of the keyboard driver you need and paste into the system folder using linux:  WINDOWS\Service Pack Files\i386

There are three files on my XP system: 
  • Keyboard.sys
  • Keyboard.inf
  • Keyboard.drv
 
Only two of the files actually go into the WINDOWS\System32 folder:
  • Keyboard.sys
  • Keyboard.drv
I do not know what files there should be on Vista, however.  An .inf file is actually an installation file for the driver, so...  (Using this .inf file may take care of having to register these files as merely copying and pasting the needed files may not work.  Double-clicking the .inf file should get it to run.)

I have not done this before, so am not sure if this is a needed step.

I do not recommend searching on the internet for a copy of the file(s) you may need, as some are not clean, depending on the reputation and integrity of the site you are visiting.
Windows 10 Home 64-bit 22H2 Avast Premier Security version 24.1.6099 (build 24.1.88821.762)  UI version 1.0.797
 UI version 1.0.788.  Windows 11 Home 23H2 - Windows 11 Pro 23H2 Avast Premier Security version 24.2.6105 (build 24.1.8918.827) UI version 1.0.801