Help - Search - Members - Calendar
Full Version: Keyboard Stopped Working In Xp
Suggest A Fix PC Support Forums > Operating Systems > Windows XP
chenlc03
I have a WinXP Pro system. I used to run ThreatFire on it but decided to uninstall it. Everything went smoothly but when I restarted my computer the keyboard stopped working (under XP, it worked before XP was loaded).

I tried F8/Safe mode/Last Known configuration but none worked.

Fortunately, I was able to use remote desktop to login.

I tried system restore but it could not proceed.

I looked at device manager and it reported code 39 (corrupted driver). I uninstalled the driver and rescanned for hardware. Same problem.

I copied kbdclass.sys and i8042prt.sys from another Xp computer to System32\drivers. Nothing changed.

Finally, I decided to do an XP repair install (big mistake!)
Everything went well but then it asked for product key to finalize installation and the keyboard was not working.

I contacted the custom service from PCtools and I was told to look for TFkbmon in the registry.

I have UBCD4win available so I was able to search the registry but did not find one. Furthermore, UpperFilters value looks correct. HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}:UpperFilters = "kbdclass"

I am running out of ideas. Since the keyboard works find under BIOS/Live CD but stops working once "Windows setup (repair install)" is loaded, I would guess the culprit is an old file not updated during the repair process, but I just could not pinpoint it. Is there any other thing I should try?
Surfer
if the keyboard is usb or wireless shutdown the computer and connect a ps2 keyboard.
chenlc03
QUOTE(Surfer @ Jul 31 2008, 10:20 PM) *

if the keyboard is usb or wireless shutdown the computer and connect a ps2 keyboard.


It's a PS/2.
Surfer
try this reg file. it's all the upper filter entries.

CODE
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
"UpperFilters"=hex(7):6b,00,62,00,64,00,63,00,6c,00,61,00,73,00,73,00,00,00,00,\
  00
  
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CriticalDeviceDatabase\root#rdp_kbd]
"UpperFilters"=hex(7):6b,00,62,00,64,00,63,00,6c,00,61,00,73,00,73,00,00,00,00,\
  00
  
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\RDP_KBD\0000]
"UpperFilters"=hex(7):6b,00,62,00,64,00,63,00,6c,00,61,00,73,00,73,00,00,00,00,\
  00
  
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
"UpperFilters"=hex(7):6b,00,62,00,64,00,63,00,6c,00,61,00,73,00,73,00,00,00,00,\
  00
  
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\CriticalDeviceDatabase\root#rdp_kbd]
"UpperFilters"=hex(7):6b,00,62,00,64,00,63,00,6c,00,61,00,73,00,73,00,00,00,00,\
  00
  
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\RDP_KBD\0000]
"UpperFilters"=hex(7):6b,00,62,00,64,00,63,00,6c,00,61,00,73,00,73,00,00,00,00,\
  00
  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
"UpperFilters"=hex(7):6b,00,62,00,64,00,63,00,6c,00,61,00,73,00,73,00,00,00,00,\
  00
  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\root#rdp_kbd]
"UpperFilters"=hex(7):6b,00,62,00,64,00,63,00,6c,00,61,00,73,00,73,00,00,00,00,\
  00
  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\RDP_KBD\0000]
"UpperFilters"=hex(7):6b,00,62,00,64,00,63,00,6c,00,61,00,73,00,73,00,00,00,00,\
  00

chenlc03
[quote name='Surfer' date='Jul 31 2008, 11:04 PM' post='216180']
try this reg file. it's all the upper filter entries.

Hi, Surfer, Thanks a lot for helping. I think I now know what went wrong but I don't know how to fix it.

When ThreatFire was uninstalled, somehow its registry values were not removed. Specifically, the program left a TfkbMon value in the "UpperFilters" item. The value was loaded into Windows setup and since the TFkbmon was gone, the keyboard stopped responding.

Any ideas on how to let Windows Setup load the correct value?
Surfer
well no ideas how to get tbfkmon into the windows install routine. the only fix i've found is to copy tbfkmon.sys into windows\system32. it appears the registry value is hidden and that's why y'all can't find it. there is a removal tool for this problem but i have no idea how to run it in windows with no mouse or keyboard.

http://www.threatfire.com/files/RemoveThreatFire(3.0).zip
chenlc03
QUOTE(Surfer @ Aug 1 2008, 03:40 PM) *

well no ideas how to get tbfkmon into the windows install routine. the only fix i've found is to copy tbfkmon.sys into windows\system32. it appears the registry value is hidden and that's why y'all can't find it. there is a removal tool for this problem but i have no idea how to run it in windows with no mouse or keyboard.

http://www.threatfire.com/files/RemoveThreatFire(3.0).zip


I did that and it worked! Thank you very much!
Surfer
uzi.gif THUMP THUMP THUMP...another one bites the dust, THUMP THUMP THUMP...Another one bites the dust....another one's gone another one's gone, another one bites the dust, HEY HEY!!
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.