I am fairly experienced with computers, but made the mistake of trusting google and friends when I found a file called kbdcap.sys throwing out errors in my event log and googling for answers finding many many people saying it was kido worm and not a legit extremely important file. I'm not 100% sure this is the issue but now that I seen a file saying it controls your input devices, I'm fairly positive that is the file I need to restore.
Long story short, I deleted the file from C:\Windows\SysWOW64\drivers. I also installed malwarebytes and did scans and found my system to be fairly clean, which is odd considering it takes 10 minutes to boot with selective boot enabled and many things turned off. I guess that's just Windows for you eh?
I need some help getting this file back, either through means of un-delete, or download. I am looking through my hard drive's temp files and firefox cache because I had uploaded it to a site to scan it, so I'm hoping a copy might still exist somewhere. It is doubtful though. :/
As per test, I was able to use cmd in windows recovery area to rename the install directory of Malwarebytes to something else, to prevent it from being allowed to boot anymore. This did not fix the issue, which is the reason I think this .sys file is my only hope now. System restores do not work, they are all corrupted or deleted, as it says each time. Can anyone help me?
I just need that original file again so I can put it back and my system will work again. Right now I'm running Ubuntu in memory.
Long story short, I deleted the file from C:\Windows\SysWOW64\drivers. I also installed malwarebytes and did scans and found my system to be fairly clean, which is odd considering it takes 10 minutes to boot with selective boot enabled and many things turned off. I guess that's just Windows for you eh?
I need some help getting this file back, either through means of un-delete, or download. I am looking through my hard drive's temp files and firefox cache because I had uploaded it to a site to scan it, so I'm hoping a copy might still exist somewhere. It is doubtful though. :/
As per test, I was able to use cmd in windows recovery area to rename the install directory of Malwarebytes to something else, to prevent it from being allowed to boot anymore. This did not fix the issue, which is the reason I think this .sys file is my only hope now. System restores do not work, they are all corrupted or deleted, as it says each time. Can anyone help me?
I just need that original file again so I can put it back and my system will work again. Right now I'm running Ubuntu in memory.