RE: Odd typing in MSWord

From: Federated Information Security (FederatedInformationSecurity_at_federatedinv.com)
Date: 03/04/05

  • Next message: Hubbard, Dan: "RE: Global DNS Cache poisoning?" 
    Date: Fri, 4 Mar 2005 15:19:34 -0500
To: <incidents@securityfocus.com>

    Thanks to all who replied, I'm pretty sure it was the microphone, I'm in
    the process of verifying. As a side note, I've seen the press on MS
    root kits, but are they all that common? How often do you run across
    them in a corporate environment, and how good are standard protections
    (antivirus, firewall, non-admin) at preventing them?

    Thanks again!
    sid

    -----Original Message-----
    From: Federated Information Security
    Sent: Friday, March 04, 2005 9:50 AM
    To: incidents@securityfocus.com
    Subject: Odd typing in MSWord

    I ran across something rather odd today I'm hoping someone might have
    thoughts on. One of my users had their XP SP1 laptop on the corporate
    network and was editing a Word document with office 2002. They pasted
    something in a table, and it looked like someone started typing in their
    document. It was slow, typical typing speed, and lasted for about 10
    minutes (I actually got a chance to see it). The text was nonsense
    words, like the kind you often see in spam nowadays.

    The machine's fully patched, up-to-date anti-virus and a personal
    firewall. Don't see any signs of spyware, nothing in the registry. I
    checked all the files modified today hoping to find a keylogger or
    something similar, and the only thing I found was a seemingly encrypted
    file on the root of c:\ called "comply.ini", which isn't normal for our
    config, but may not be related. IE was open at the time this happened.
    I issued a netstat -a command while the typing was going on, but all the
    connections were legit--domain controller, file & print servers. I
    checked the running processes and everything seemed pretty typical,
    although I hit

    Anyone run across anything similar lately, or have any suggestions?

    Thanks!
    sid

  • Next message: Hubbard, Dan: "RE: Global DNS Cache poisoning?"

    Relevant Pages

    • RE: Odd typing in MSWord
      ... Subject: Odd typing in MSWord ... network and was editing a Word document with office 2002. ...
      (Incidents)
    • Re: Return focus to word and Activate
      ... How about activating the Word document itself? ... Word 2007, the Word doc becomes visible and the cursor is visible, but you ... If you start typing before you click with the mouse in the Word doc, ... you are typing on the msAccess form that was on the screen when the ...
      (microsoft.public.word.vba.beginners)
    • Re: I cant view what I pasted into Word document
      ... then you might want to check the website of the manufacturer of your video card/graphics adapter to see if there is an updated driver available. ... software and paste them into a Word document. ... Now when I open any document with screen prints in it, ... Then as soon as I start typing below the image, ...
      (microsoft.public.word.drawing.graphics)
    • Re: Odd typing in MSWord
      ... Are root kits 'that' new or are the bad guys just getting a smidge smarter? ... >Subject: Odd typing in MSWord ... >network and was editing a Word document with office 2002. ... Chapter 4 of The Complete Patch Management Book: ...
      (Incidents)
    • Re: Odd typing in MSWord
      ... each time, much to my feelings of foolishness, it was a key being pressed ... or sticking ... > network and was editing a Word document with office 2002. ... It was slow, typical typing speed, and lasted for about 10 ...
      (Incidents)