Computing.Net > Forums > Security and Virus > mouse.exe removal question

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

mouse.exe removal question

Reply to Message Icon

Original Message
Name: robber2
Date: November 6, 2005 at 08:46:31 Pacific
Subject: mouse.exe removal question
OS: w xp
CPU/Ram: 2 gig celeron, 256 MB
Comment:

http://www.bleepingcomputer.com/startups/mouse.exe-11146.html

I saw a process running (mouse.exe), saw my computer sending LOTS of data out every time I was connected to the internet, did a google search, found the page at top and followed the removal link on the page, downloaded Autoruns, deleted startup item, mouse.exe, ran Spyware Doctor (scan only) after and still found the registry entry at
HKLM\Software\Microsoft\Windows\Current version\RunServices##mouse. Did a regedit from run and it's still there. Here's my question:
through regedit, should I delete this entry in the registry? Another question: could this kill my network? I can access files on the client comp, but can't access host computer from client...
Thx for the help.


Report Offensive Message For Removal


Response Number 1
Name: jabuck
Date: November 6, 2005 at 10:42:29 Pacific
Reply:

robber2, download Ewido's trial version from this link Ewido Security Suite (not the beta version at the bottom left of the page) then set it up this way Ewido Setup Instructions then reboot into Safe Mode

Or you can use killbox as I posted to the wrong poster(which was suppossed to be you) at this link in response #2 ooops


Report Offensive Follow Up For Removal

Response Number 2
Name: robber2
Date: November 6, 2005 at 20:40:17 Pacific
Reply:

so while i'm in regedit can i just right click delete that ##mouse entry?


Report Offensive Follow Up For Removal

Response Number 3
Name: jabuck
Date: November 6, 2005 at 21:04:48 Pacific
Reply:

You should run ewido to make sure that mouse.exe is actually a virus, it will identify it.You can delete the entry in the registry but if it is a virus that will not remove it,and will probably ony remove it from the registry for a few minutes, and should it be legit your mouse may fail next time you start the computer.



Report Offensive Follow Up For Removal

Response Number 4
Name: robber2
Date: November 7, 2005 at 17:48:08 Pacific
Reply:

ran ewido - couldn't find mouse.exe in registry (or didn't think it was a virus/trojan), but it's certainly in the place that
http://www.bleepingcomputer.com/startups/mouse.exe-11146.html
indicates it would be, i was just wondering if it's NOT UNSAFE to leave it there or if i should delete that registry entry. i'll see if more advice comes in. thank to all for your help so far.


Report Offensive Follow Up For Removal

Response Number 5
Name: robber2
Date: November 7, 2005 at 17:52:28 Pacific
Reply:

p.s.
ran Spyware Doctor (scan only) after and still found the registry entry at
HKLM\Software\Microsoft\Windows\Current version\RunServices##mouse. Did a regedit from run and it's still there, too.
hmmm...


Report Offensive Follow Up For Removal


Response Number 6
Name: jabuck
Date: November 7, 2005 at 22:03:20 Pacific
Reply:

robber2,You can use Hijack This to get rid of it. You can download Hijack This at this link http://www.tomcoyote.org/hjt/ then place it into a folder of it's on, such as C:\HJT, so that back up copies can be made and not clutter your desktop or other folders and the backup copies of deleted items can be easily located if needed.

Once saved double click HijackThis.exe, and press "Scan". When the scan is finished,close all windows and browsers (except HT) then place a check in the box to the left of the following item and press "fix checked":

O4 - HKLM\..\Run: [mouse] mouse.exe

Remember, HT is a powerful tool so use it carefully.


Report Offensive Follow Up For Removal

Response Number 7
Name: robber2
Date: November 8, 2005 at 08:44:22 Pacific
Reply:

thank you, jabuck. ran the scan, found the entry, will post the log at Hijack this site (for the sake of second opinion) before I fix checked. Thanks for your help on this. I think this insidious little mouse may have killed my network (can access client comp, but now have no permission to access host comp), workin' this one - not been easy to fix yet. (see post # 27059)


Report Offensive Follow Up For Removal






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home



Results for: mouse.exe removal question

trojan h91746.exe removal help
    Summary: I also ran the HJT log anaylsis tool. It pointed out several bad and questionable files. I just do not know what to do next. Here is the HJT Log: Logfile of HijackThis v1.99.1 Scan saved at 11:00:50...
www.computing.net/answers/security/trojan-h91746exe-removal-help/17979.html

jabuck please help
    Summary: StartupList report, 07-01-07, 20:53:40 StartupList version: 1.52.2 Started from : C:\HijackThis\HijackThis.EXE Detected: Windows XP (WinNT 5.01.2600) Detected: Internet Explorer v6.00 (6.00.2600.0000...
www.computing.net/answers/security/jabuck-please-help/20157.html

Hbinst.exe removal
    Summary: My NIS/NAV 2004 is telling me that I have an adware threat "Adware.Hotbar" and the file "Hbinst.exe" in my System32 and Temp files. NAV won't delete it. I don't have Hotbar on my Add/Remove programs...
www.computing.net/answers/security/hbinstexe-removal/11630.html








Which MP3 player do you have?

iPod/iPhone
Zune
Something Else
None


View Results

Poll Finishes Today.
Discuss in The Lounge
Poll History






Data Recovery Software