Re: Odd typing in MSWord

From: Jeff Garrett (jgarrett_at_home.highvision.net)
Date: 03/04/05

  • Next message: Russell Guthrie: "Global DNS Cache poisoning?"
    Date: Fri, 4 Mar 2005 14:06:29 -0500 (EST)
    To: Federated Information Security <FederatedInformationSecurity@federatedinv.com>
    
    

    i've seen this before, several times, and thought exactly as you

    each time, much to my feelings of foolishness, it was a key being pressed
    or sticking (key or keys)

    On Fri, 4 Mar 2005, Federated Information Security wrote:

    > I ran across something rather odd today I'm hoping someone might have
    > thoughts on. One of my users had their XP SP1 laptop on the corporate
    > network and was editing a Word document with office 2002. They pasted
    > something in a table, and it looked like someone started typing in their
    > document. It was slow, typical typing speed, and lasted for about 10
    > minutes (I actually got a chance to see it). The text was nonsense
    > words, like the kind you often see in spam nowadays.
    >
    > The machine's fully patched, up-to-date anti-virus and a personal
    > firewall. Don't see any signs of spyware, nothing in the registry. I
    > checked all the files modified today hoping to find a keylogger or
    > something similar, and the only thing I found was a seemingly encrypted
    > file on the root of c:\ called "comply.ini", which isn't normal for our
    > config, but may not be related. IE was open at the time this happened.
    > I issued a netstat -a command while the typing was going on, but all the
    > connections were legit--domain controller, file & print servers. I
    > checked the running processes and everything seemed pretty typical,
    > although I hit
    >
    > Anyone run across anything similar lately, or have any suggestions?
    >
    > Thanks!
    > sid
    >


  • Next message: Russell Guthrie: "Global DNS Cache poisoning?"