Spyware, viruses, & security forum: supposed keylogger from geeksquad

is related to wireless internet connection if you are using wireless so
I would leave that program alone. The Ask Toolbar should not be required for that software nor ZA to function.

with further info needed.

With Ask NOT showing in Add/Delete Programs it needs different approach.

I found the following "cures".

I would FIRST try the Ask removal Tool listed below (since I don't trust Ask, we'll do some follow ups to ensure it's all gone).

"From Ask themselves:

Peter, Im a Product Manager at Ask. Changing your default search settings is simple with some browsers and more complex with others. We created a tool to simplify the process of removing Ask as the default search engine in your browser address bar. Please click on the URL listed below and run the file to remove Ask from your address bar."

Link to the executable file:
http://media.ask.com/media/toolbar/tools/AskSearchUtility.exe

******************** IF Above Fails then try **************

Manual removal of Ask as search engine in Vista:

For Firefox to change Main Search Engine to Google:

In the top Address bar, type in about:config into the url (without http://) enter/go whatever & scan down to
search for keyword.URL


for Google change it to: http://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=

http://forums.comodo.com/safesurf/ask-toolbar-firefoxsolved-t29751.0.html;msg215439

For IE removal in Vista:

# Uninstall Ask Toolbar in Windows Vista
Step1. From Start, click on the Start Search box.
Step2. Type in appwiz.cpl, and then click OK.
Step3. In the installed programs list, locate and click Ask Toolbar.
Step4. Click on Uninstall button to completely uninstall Ask Toolbar.
Step5: Restart Internet Explorer for the change to take effect.

http://www.uninstalltips.com/uninstall-ask-toolbar/

*************

Once it seems to be gone, Run Hijack This once more and see IF still found/listed as before. If NOT there any more, I would run a Search for All Files & Folders looking for : ask*

I don't have Vista but there is usually in (XP) Folder Options a check box for something like "show all hidden Files & Folders" to check & in my case a box to un-check "Hide system operating files". You should cover these first or the ask* may not show up in the search.

You can manually delete those that you can tell belong to ask. Check properties on the files if not sure looking for publisher ID etc.

You can look in the Program Files folder to see if folder remains to delete.

You can at this point likely re-check the registry key you described and see if it's there. If so, first "export" it to a convenient place
like my documents before deleting. There IF necessary to re-enter it for whatever reason.

After a re-boot, check by going on net w/ FF & IE to confirm you're no longer Hijacked. If all seems OK, create a new system restore point manually, and label it such that you won't restore further back for awhile, while you use normally for a couple of days to confirm all OK.
You can run MBAM again just for peace of mind.

Then I would disable System Restore to remove ALL the old points which would contain the ask info to prevent re-install attempts and then turn SR back on & create a point or 2 of new clean ones.

Yes, I believe that the stuttering space bar could be caused by ask or other infections/conflicts. Above MAY clear it up as some of these 3rd party things can cause weird behaviors. You might also run a System
File Check (SFC) to correct any corrupt system files:
How 2 run SFC in Vista:
http://support.microsoft.com/kb/929833

Please post back with results (good or bad) &/or for further help as need be. I or someone else will try to help. Patience helpful!Good Luck !

The Ask Tool should remove ask altogether beyond the tool itself. Hopefully it finds nothing to remove. Might explain quick close?
Or is Vista preventing it's running (Admin permissions)? Possibly better if run from "Safe Mode"?

Have you checked with the manual un-install/reset for BOTH your browsers as posted above?
This is important to confirm both are clean now & not routing to Ask.

Does Hijack This still list any Ask? If not: Good! If yes then maybe time to put check mark in the box to left of ask entry and let HJT remove/fix it.

The browser re-direct from ask OR ANOTHER TOOLBAR would affect space bar particularly when on the net, as that's it's prime function area.

The next important question is DO you have ANY OTHER toolbars installed?? If so please list them in reply.

The registry key: DO NOT just copy & paste! When in Reg Editor, at the top, there should be a drop down list that includes "Export" function, which will send the highlighted item you want to remove to where you say (like My Documents) as a .regfile rather that as a .txt. The regfile is special type that will replace itself back in correct registry location when double clicked (if need be). a .txt file can't do that! In fact it's possible to "export" the whole registry also but that 1 item should do. Catastrophic failure should NOT be a factor but all can be reversed as need be. Don't worry.

Be aware that IF Zone Alarm (which includes the ask toolbar) was OEM
installed by the factory (rather than by you later) then a original re-install of the OS & it's software & drivers would likely re-install Ask as well!

Try Updating your Spybot & running a new scan. I would fully expect S&D to find and label Ask as a "potentially unwanted program" and offer to fix it. I'm shocked it didn't find it before!!

One hint I found worked on my HP laptop: I normally use it by mouse & keyboard (very rarely using touch pad). On it there is a switch on/off button, located on the keyboard just above the touch pad & I found it helpful to turn the touch pad OFF when not needing it. It seemed to help with some minor oddities like space bar & cursor movements (likely me gently grazing it w/ heel of my hand without meaning to).

I also found some foistware/spyware/ hiding in the desktop mgr of the
supplied software for the keyboard/mouse/touchpad drivers. I could disable w/ Spybot S&D BUT you had to disable the "check for updates" section as the company would immediately re-install their report home ware when auto checking for updates (which has never been necessary). This was found when running S&D in "Advanced Mode" (upper left of Main page: Mode) and checking "System Start-up" list.

Sounds like it's getting better!!

HJT does not list any entries for ask. The registry lists the following as the target for the ask entry: C:\Program Files (x86)\Atheros Client Installation Program. I can't find any evidence of the ask toolbar in firefox or on the computer other than the registry entry. I installed zonealarm myself and I am pretty sure I unchecked the box to install ask, since I try to avoid all that stuff. When I ran spybot, I had updated it before running it (within the last month). It didn't find anything wrong. I think it was the panda software from Geek Squad that found the initial supposed problem. I just have a hard time believing that this is the issue, and I was just very annoyed that the Geek Squad focused on it and did not claim to find anything else. In fact, while typing this, it seems like the spacebar is working better. Is it possible that just repeated use can allow it to loosen up and get better? I doubt there is anything under the keyboard since it is so new and I have kept it really clean. Thanks again for your continued help; I really appreciate it.

Tarkava..

I think you had every right to feel "skeptical", from the start.

I found it (more than) peculiar, you were told traces of a virus or keylogger, was the cause of your spacebar issues. It seems as though, other's have experienced the same problem. Have a look at the below two page thread.

"SAMSUNG R480 keyboard HELP!!"

For all I know, it may not be a problem, inherent to Samsung R480 laptop's. With a little research, you'll find it also happening with various other brands.

Only to clarify one other thing. You wrote, "So, after they told me about this problem, I ran the following programs (yes, I uninstalled the other one before proceeding): AVG, Avira, Avast, Ad-aware, Webroot, MB antimalware, MS Security Essentials, and Spybot S&D without anything more than 3 tracking cookies being discovered."

When writing "yes, I uninstalled the other one" ", does this mean you installed AVG, Avira, Avast and MSE separtely? Then uninstalled each one after scanning? Or in saying "I uninstalled the other one", were you referring to something else?

And lastly, you also wrote, "Can I just erase the entire registry entry for ask without it causing any problems? I ran a Hijack This program and have no idea what to do with the results."

It's not my intention to interfere with the advice you're being given, but I would suggest against "erasing" any registry entries OR using HJT, unless you know exactly what you're doing. IF you feel the toolbar exists, and IF in time, you're unable to rid yourself of it, I would suggest posting at a dedicated forum which analyzes HJT logs and utilizes tools which will find it. It shouldn't take more than a few minutes to get rid of it. Personally, I feel it's unrelated to your spacebar.

Best of luck..
Carol

ONLY as a point of interest. Here is a user who was also running Windows7, on a new Samsung laptop. And also had a problem with ASK. If tempted, the ONLY advice I would follow is what I've already suggested. Post a log.

Carol,

Thank you very much for those links. I think it re-affirms my thought that there was no keylogger to begin with. I wonder if the folks at Best Buy will believe me and actually do some testing. I was a little reassured with the guy who popped off the spacebar and then put it back, but I think that may void my warranty. To answer your previous questions, I uninstalled each virus checker before installing the next one to prevent false positives, and I updated each one after install. It is weird that I have never been able to get the same results as they did. None of my programs found the supposed issue. I wonder if Best Buy would run their program on a brand new Samsung and see if that shows the same issue. You are right; I am going to call Samsung. A new laptop would be nice if it works well, but just really annoying to reinstall everything. Thanks again.

Thanks to everyone for their very insightful posts and all of the help. I contacted the Geek Squad with all this new information and they have agreed to run their virus scan and "repair" at no charge. If there is still an issue with the spacebar, they will send it for repairs. I am not sure if they believe me about the false positive, and they have not answered my request to run their scan on a brand new laptop, but they are not charging the $130 for this service. Hoping to get this resolved since I really like the computer (compact, lightweight, Blu-ray player, good speed, good resolution, low price, etc). I will keep everyone posted, and Best Buy is back in my good graces. Thanks again!

Just to update those of you who were very helpful to me, I am typing this with my new Samsung laptop, and I am hoping there are no space-bar issues. I brought the computer back and they "cleaned" it for free; it then still had the issue with the space-bar, so I think they believed me. Then, they told me it had to go to Samsung for repairs, but later said that since this is Samsung's first year of making laptops, they are replacing them instead of repairing them. Well, they had to replace it with a dual core Pentium instead of the i3 chip (Samsung quit making the laptops with an i3), but I wound up with about 60 bucks back (the newer model is cheaper) and another laptop. I am not using it for really high end stuff, so I think I will be fine with the slower processor. Thanks again to everyone for your help, and the space-bar worked every time I hit it with this post! Hooray!!

likely come thru and that Samsung played their part is encouraging to hear. Thanks for Update & Enjoy!