RE: Odd typing in MSWord

From: Tom Baker (tbaker_at_accessway.net)
Date: 03/04/05

  • Next message: Randy: "Re: Odd typing in MSWord" 
    To: "Federated Information Security" <FederatedInformationSecurity@federatedinv.com>, <incidents@securityfocus.com>
Date: Fri, 4 Mar 2005 13:44:38 -0500

    comply.ini could be from ISS's BlackIce product, is that installed on the
    machine?

    -----Original Message-----
    From: Federated Information Security
    [mailto:FederatedInformationSecurity@federatedinv.com]
    Sent: Friday, March 04, 2005 9:50 AM
    To: incidents@securityfocus.com
    Subject: Odd typing in MSWord

    I ran across something rather odd today I'm hoping someone might have
    thoughts on. One of my users had their XP SP1 laptop on the corporate
    network and was editing a Word document with office 2002. They pasted
    something in a table, and it looked like someone started typing in their
    document. It was slow, typical typing speed, and lasted for about 10
    minutes (I actually got a chance to see it). The text was nonsense
    words, like the kind you often see in spam nowadays.

    The machine's fully patched, up-to-date anti-virus and a personal
    firewall. Don't see any signs of spyware, nothing in the registry. I
    checked all the files modified today hoping to find a keylogger or
    something similar, and the only thing I found was a seemingly encrypted
    file on the root of c:\ called "comply.ini", which isn't normal for our
    config, but may not be related. IE was open at the time this happened.
    I issued a netstat -a command while the typing was going on, but all the
    connections were legit--domain controller, file & print servers. I
    checked the running processes and everything seemed pretty typical,
    although I hit

    Anyone run across anything similar lately, or have any suggestions?

    Thanks!
    sid

  • Next message: Randy: "Re: Odd typing in MSWord"

    Relevant Pages

    • RE: Odd typing in MSWord
      ... Subject: Odd typing in MSWord ... network and was editing a Word document with office 2002. ...
      (Incidents)
    • Re: Return focus to word and Activate
      ... How about activating the Word document itself? ... Word 2007, the Word doc becomes visible and the cursor is visible, but you ... If you start typing before you click with the mouse in the Word doc, ... you are typing on the msAccess form that was on the screen when the ...
      (microsoft.public.word.vba.beginners)
    • Re: Entire line selected with click on the right end - normal view
      ... Word MVP FAQ site: http://word.mvps.org ... > start typing new text immediately. ... Now, however, since MSWord 2003 ... > layout" or "web layout" views. ...
      (microsoft.public.word.docmanagement)
    • Re: I cant view what I pasted into Word document
      ... then you might want to check the website of the manufacturer of your video card/graphics adapter to see if there is an updated driver available. ... software and paste them into a Word document. ... Now when I open any document with screen prints in it, ... Then as soon as I start typing below the image, ...
      (microsoft.public.word.drawing.graphics)
    • Re: Odd typing in MSWord
      ... Are root kits 'that' new or are the bad guys just getting a smidge smarter? ... >Subject: Odd typing in MSWord ... >network and was editing a Word document with office 2002. ... Chapter 4 of The Complete Patch Management Book: ...
      (Incidents)
    • Quantcast