Hello to all of you, great people from the Security forum,

It would be nice from you if you would not mind helping me on this problem that I currently have. I run Windows 95 and there is nearly no help available anymore on the Internet due to the fact that Windows 95 is so old.

I am having a hard time with my very old computer running Windows 95. It got a spyware and/or Trojan and/or probably a keylogger too I believe.
Sometimes at boot time I got the message:
"keyboard is locked ... Please unlock it." It is not a hardware problem because when I used my boot disk to be allowed inside Windows 95, my mouse was acting wild, uncontrollable from time to time and basically I did not have control of my computer anymore (even when I was not logged on). I then installed Spybot S&D and it seems to block the action of this spyware. However, as the time went, the action of this spyware seems to improve with time (!) and Spybot S&D could not control it anymore when I decided to uninstall Spybot S&D and reinstalled it later.
That is why I decided to reformat my first partitions using format drive: formatting c, d, e and f (that were on my first hard disk) and I left alone the other partitions (g, h, i, j) because they were on the second hard disk.
When I installed again Windows 95, I saw a program that was obviously running during the reinstallation of Windows 95 (!!) , as the mouse sometimes was changing its appearance to the symbol of running a programme. Hence, after reinstallation of Windows 95 from scratch with a full format c:, this spyware reinstalled the problem I originally had with this "keyboard is locked ... Please unlock it." This spyware affects my mouse and I cannot use my mouse normally anymore, as the mouse moves crazily in different directions, sometimes accomplish nasty things such as delete folders or moving folders from one place to another (!!) and I do not have any control of this mouse anymore. At the beginning, the mouse was acting from time to time like that but over time, it was nearly all the time hence the need I felt to do a full format of c and the other partitions that were on the first hard disk. I cannot delete the partition on the second hard disk because these partitions contain data that I want to back up later on.

I read that I cannot do fdisk /mbr because it cannot be done with more than 4 partitions (one of the warnings given by Microsoft support site) and I have more than 4 partitions. I did not format the other partitions because I have my data on them.

Previously when I still had control of the mouse (when the spyware was not as nasty as it is now) I had run AVG free antivirus and avast (both working with Windows 95) and they could not spot at all this very nasty spyware (they are antivirus programs, not antispyware I believe).
As I have Windows 95, it is nearly impossible to get any help of any kind from other anti-spyware tools because they do not support Windows 95 anymore.

I have to say that the program acted midly at the beginning and as I kept connected to the Internet, it seems to increase its nastiness over time. It might be Trojan I believe and probably a keylogger. I saw files in C: that were records of my activity on the computer such as the number of times I was in contact with the Internet and the actions that I did on my computer and the program then seems to be improved by getting nastier!

I read that one can check for spyware online spyware and antivirus tools but I cannot even do that because I have no more logging on capability due to my formatting of C and I cannot even use the mouse when I reinstalled Windows 95 to reinstall the basic things because the mouse acts wildly!

Would you mind helping me out? Thanks a lot for your help in advance to all of you, great people out there.

I will be following your messages in the coming days, hoping to read your expert suggestions. I am at a level of beginner user I could say, so bear in mind this point in your feedback. Thanks.

I read at this link http://www.invircible.com/iv_tools.php that suggest, among other programs, IVINIT - Boot Virus & Worm-Trojan Remover. I do not know if it is safe to use this program at all. Your comments on this maybe. Thanks.

Again, thanks a lot for your coming help.

Michael

Hi MichaelIsGreat the boot sector is a part of the operating system..so a format would wipe all from the drive including malware.

Hello dvk01

Thanks for your feedback.

When you say:
"as you have formatted already then there cannot be any malware involved & it will be a hardware/drivers/software/user issue"
When it is a boot sector virus or spyware, the program reloads after you have done a full format c: !!!!
Moreover, the behaviour of my mouse doing things like cutting and pasting at other places folders showed me that it is not a hardware problem at all but a very malicious program, be it spyware or virus.

Yes, you are right, it is worth waiting to see if someone by luck has some knowledge on this matter.

Again, thanks for your feedback.

Hello dvk01

Thanks for your feedback but I thought that the strategies to solve this kind of problem might be applicable to Windows 95, as I am sure this problem occured on later Operating systems?

In particular, there are I think strategies to use MS-DOS to deal with this problem that would be applicable with Windows 95.

And I am still hoping that someone might tell me if it is safe to use at http://www.invircible.com/iv_tools.php that suggest, among other programs, IVINIT - Boot Virus & Worm-Trojan Remover?

Well, it does not sound great but I want to keep hope!