strange behaviour of mouse keyboard in MS win 2000 prof

Hello,

from few days in one of the PC which is having win 2000 prof installed having problem of automatic mouse movement, clicks, automatic program openings, closing like it is reapeated our activity on the screen - what can be the reason - i have disconnected pc from internet - network make complete stand alone still same things happening - what can be the reason - very seriuos issue for me and quite new and strange as well

if someone can help me out pls
techsysnetAsked:
Who is Participating?
 
RobinHumanConnect With a Mentor Commented:
This could well be the cause of the problem - it causes instability in the MBR by creating it's own MBR.
Symantec endpoint should clear it, but if it doesn't, here is a link to a removal tool.
http://www.softpedia.com/get/Antivirus/Trojan-Mebroot-Removal-Tool.shtml
hope this helps
0
 
RobinHumanCommented:
Have you tried swapping the mouse for another one?
If not, then do so;
also, delete the mouse from mouse drivers and let windows re-install it;
thirdly, check that you have no remote control software (dameware, etc) running on the machine.
hope this helps
0
 
techsysnetAuthor Commented:
hello robinhuman,

tried swapping mouse - no luck - no remote control software -
then i tried virus scanning - i found trojan.mebroot infection on temp internet file - can that be the cause ?
still virus scanning goin gon and on virus scanner site - they are telling to clean mbr - will symantec endpoint do the mbr scan over the network ?
0
Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

 
torimarConnect With a Mentor Commented:
This trojan sure is the cause of all the strange happenings you observed.

There is a special removal tool by Symantec:
http://www.softpedia.com/get/Antivirus/Trojan-Mebroot-Removal-Tool.shtml

There are also manual removal instructions:
http://www.symantec.com/security_response/writeup.jsp?docid=2008-010718-3448-99&tabid=3

Make sure to read the instructions for the removal tool on that download site.
It may work over the network when copied to the infected machine and started remotely, however for the tool to fully clean the infection it seems to be required that you disconnect said machine both from network and internet.
0
 
techsysnetAuthor Commented:
THANKS
0
 
techsysnetAuthor Commented:
HELLO

I HAVE RUN SYMANTEC ENDPOINT AND RIGHT NOW PC WORKING FINE  - I RAN SCANNER OVER THE NETWORK - LETS HOPE FOR PROPER REMOVAL OTHERWISE WILL DO SOMETHING WITH MBR

THANKS

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.