ziceman
asked on
Error Code 19 - Mouse & Keyboard, Win7 Pro unuseable
One of my customers has a Win7 Pro machine that has recently become physically untouchable. This is because both the mouse and keyboard hardware device configs are porked in the registry. The two interface devices are entirely unresponsive - even when booting in safe mode.
It is not a hardware issue, as no replacement mouse or keybd make a difference. Also, hitting F8 and starting a system repair will allow the existing mouse & keybd to work just fine while selecting a System Restore point. Speaking of which, I have picked one as far as 3 months ago - the results are still the same.
The only way I can access this machine is via RDP. Everything else looks good except for the Code 19s in the Device Manager.
Uninstalled the devices, scanned for new hardware, pointed to new drivers, etc - no dice.
After doing some Google searching, I tried looking for Upperfilters or Lowerfilters in the associated device GUIDs in the registry. They were not there.
My first though on this was malware - so I ran complete scans with Kaspersky, Malwarebytes and few other tools. They all came up clean.
Anyone seen something like this before?
It is not a hardware issue, as no replacement mouse or keybd make a difference. Also, hitting F8 and starting a system repair will allow the existing mouse & keybd to work just fine while selecting a System Restore point. Speaking of which, I have picked one as far as 3 months ago - the results are still the same.
The only way I can access this machine is via RDP. Everything else looks good except for the Code 19s in the Device Manager.
Uninstalled the devices, scanned for new hardware, pointed to new drivers, etc - no dice.
After doing some Google searching, I tried looking for Upperfilters or Lowerfilters in the associated device GUIDs in the registry. They were not there.
My first though on this was malware - so I ran complete scans with Kaspersky, Malwarebytes and few other tools. They all came up clean.
Anyone seen something like this before?
what type are these mouse and keyboard? wireless?
anyhow, if possible, check what drivers they are (from RDP) and disconnect the keyboard & mouse, then remove the drivers
reboot without them - and see what happens
if they are USB devices, connect them now, and check if they are identified properly
post results
anyhow, if possible, check what drivers they are (from RDP) and disconnect the keyboard & mouse, then remove the drivers
reboot without them - and see what happens
if they are USB devices, connect them now, and check if they are identified properly
post results
ASKER
As I said in the submission, the devices do not work in Safe Mode.
I have uninstalled the devices and rebooted. Not detection notifications are given during startup, the but the devices are back in the Device Manager with the Code 19 Error.
I have physically removed the driver files referenced in the properties, but it must pull them out again from one of the cab files.
Rebooting without them just shows no keyboard or mouse in the Device Manager.
I have run sfc /scannow, and it did not fix the problem.
I have uninstalled the devices and rebooted. Not detection notifications are given during startup, the but the devices are back in the Device Manager with the Code 19 Error.
I have physically removed the driver files referenced in the properties, but it must pull them out again from one of the cab files.
Rebooting without them just shows no keyboard or mouse in the Device Manager.
I have run sfc /scannow, and it did not fix the problem.
Check the UpperFilters to ensure that kbdclass is correctly assigned as the Data source.
Navigate to HKLM\SYSTEM\CurrentControl Set\Contro l\Class\{4 D36E96C-E3 25-11CE-BF C1-08002BE 10318}
You should now see the key UpperFilters which should contain at least one entry kbdclass. If there are more entries there you should delete all but kbdclass.
It should be a Multi-String Value and look like this:
UpperFilters REG_MULTI_SZ kbdclass
Restart Windows to see if the problem has been fixed.
Navigate to HKLM\SYSTEM\CurrentControl
You should now see the key UpperFilters which should contain at least one entry kbdclass. If there are more entries there you should delete all but kbdclass.
It should be a Multi-String Value and look like this:
UpperFilters REG_MULTI_SZ kbdclass
Restart Windows to see if the problem has been fixed.
ASKER
From my original post - "After doing some Google searching, I tried looking for Upperfilters or Lowerfilters in the associated device GUIDs in the registry. They were not there."
I assume you might have found the same link: http://pcsupport.about.com/od/driverssupport/ht/upperfilters-lowerfilters.htm
Near the bottom of that page it states:
Note: If you don't see either registry values listed, this solution isn't for you.
I assume you might have found the same link: http://pcsupport.about.com/od/driverssupport/ht/upperfilters-lowerfilters.htm
Near the bottom of that page it states:
Note: If you don't see either registry values listed, this solution isn't for you.
Sorry, I posted the wrong Key
Navigate to HKLM\SYSTEM\CurrentControl Set\Contro l\Class\{4 D36E96B-E3 25-11CE-BF C1-08002BE 10318}
It should be a Multi-String Value and look like this:
UpperFilters REG_MULTI_SZ kbdclass
If it's not there create the Key - in the right hand pane, right mouse click and select New Key, select Multi String Value, name it UpperFilters and press the Enter key twice. For it's value type in kbdclass
Restart Windows to see if the problem has been fixed.
If it's still not working follow the previous steps and rename kbdclass to ksthunk
Restart Windows to see if the problem has been fixed.
edit to add
You may have to change the settings in HKLM\SYSTEM\CurrentControl Set001\Con trol\Class \{4D36E96B -E325-11CE -BFC1-0800 2BE10318} as well.
Navigate to HKLM\SYSTEM\CurrentControl
It should be a Multi-String Value and look like this:
UpperFilters REG_MULTI_SZ kbdclass
If it's not there create the Key - in the right hand pane, right mouse click and select New Key, select Multi String Value, name it UpperFilters and press the Enter key twice. For it's value type in kbdclass
Restart Windows to see if the problem has been fixed.
If it's still not working follow the previous steps and rename kbdclass to ksthunk
Restart Windows to see if the problem has been fixed.
edit to add
You may have to change the settings in HKLM\SYSTEM\CurrentControl
can you answer my question? what type are these mouse and keyboard? wireless? usb..
and did you follow the process for uninstaling i posted?
and did you follow the process for uninstaling i posted?
ASKER
Apologies - it is Microsoft mouse and and keyboard. USB attached - not wireless.
Yes.I did follow the instructions. The problem still exists.
Yes.I did follow the instructions. The problem still exists.
did you ever test them on another pc? could be a weird problem
you can also try this fixit : http://support.microsoft.com/mats/Program_Install_and_Uninstall
you can also try this fixit : http://support.microsoft.com/mats/Program_Install_and_Uninstall
ASKER
Yes. The mouse and keyboard do work on other machines. Also, devices other than mice and keyboard do work on this particular machine. Yes, it is a very weird problem indeed.
It is as if the registry setup two primary human interface devices have been targeted and damaged. This is why I was suspecting malware.
I will try the Fixit utility, but it seems to be associated application install/removal.
It is as if the registry setup two primary human interface devices have been targeted and damaged. This is why I was suspecting malware.
I will try the Fixit utility, but it seems to be associated application install/removal.
is there any MS install software for the mouse and keyboard? uninstall that with the fixit
ASKER
I will definitely look for that when the fixit is run. But USB devices are typically not associated with Add/Remove programs.
Also, they do appear to get removed when uninstalled through the Device Manager. It is just that when they are added back, the relevant portion of the registry seems to be porked.
Also, they do appear to get removed when uninstalled through the Device Manager. It is just that when they are added back, the relevant portion of the registry seems to be porked.
that is because the drivers are not removed (deleted) from th disk - and reinstall again
ASKER
Actually, they are - I have gone location & names specified in the properties information for the device and physically deleted the driver files. It ends up pulling them out of the driver .cab repository and putting them back.
Since they are coming out of the .cab, and I have already run a sfc /scannow to replace all the files - it does not seem likely that the drivers are the problem. It must be a registry issue.
Since they are coming out of the .cab, and I have already run a sfc /scannow to replace all the files - it does not seem likely that the drivers are the problem. It must be a registry issue.
i won't argue; but it starts looking like a fresh install is the way to solve this
AFTER a backup!
AFTER a backup!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
It was the only thing that fixed the problem.
how do you actually find and import the mouse registry entries from a working PC?
I know this thread is 10 years old, but I wanted to say thank you Rob Miners. I am running Windows 11, so this problem is still coming up. Your answer saved me from having to do a reset.
Making sure that there was an UpperFilter with kdbclass in both the CurrentControlSet and the CurrentControlSet001.
Then deleting the keyboard driver in the device manager, and restarting!
This fixed my problems.
You already tried to uninstall the devices. Instead of doing what you have done after uninstalling, I would have rebooted the system and let it find/select the appropriate drivers himself.
Did you consider SFC in order to check system files integrity?