Re: Spyware which tracks keystrokes?

From: sponge (yosponge_at_yahoo.com)
Date: 03/26/04 

Date: 25 Mar 2004 22:27:31 -0800

On 23 Mar 2004 08:26:18 -0800, pasirochma@hotmail.com (dulcie) wrote:

>Have just read an unnerving article about something called 'EBlaster'
>which is sold at http://www.spectorsoft.com/ this program can be
>loaded onto your computer and can track all your keystrokes: all
your
>emails from any email address, incoming and outgoing + send a copy of
>it all to another person. Presumeably that would include passwords
>too! Someone would have to get this software onto your machine in
the
>first place, but that's not difficult if they have physical access to
>it - and (apparently) it's undetectable - if you look in your
>files/programs list you won't find it. does anyone know how you
might
>(a) prevent this being put on the first place, and (b)detect it if
>it's already there? I've now been totally put off setting up an
>internet bank account!
>
>Thanks.
>Dulcie

Keyloggers are a dime a dozen. They are extremely easy to write.
SpectorSoft's is one of two dozen I can name right off the top of my
head, and there are many more that I cannot or don't even know about.
They are even found in many trojans and worms.

Preventive: Do not use Internet Explorer or Outlook, and block them
from connecting to the Internet with a firewall. IE Both are extremely
bug-ridden, and, more importantly, are common vehicles to allow
applications to connect to the net. Since all Windows machines ship
with them installed, and the vast majority of Windows users use them
and give them blanket permission through their firewall, they are an
ideal choice for any kind of malware to gain access through the
firewall. Use IE solely for Windows Updates, and add
*.windowsupdate.microsoft.com and *.windowsupdate.com to your Trusted
Sites zone, and set your Internet Zone to the Highest security.

Also, be careful about what email you open even if you do use another
email program. Never open an email from somebody you don't know,
period, finish. Even email that IS from somebody you know, do not open
if it has an attachment unless you've made prior arrangements with the
sender and you are expecting it. Even then, a virus scan of the
attachment is necessary.

Be careful about what you download. If you download from the web,
consider anything coming from MP3 and file-sharing sites suspect. Use
Yahoo to search around for (program name) and "spyware". Download.com
also has user feedback on applications, and the "user reviews" often
can tell you about this. Keyloggers don't come in the form of
shareware or freeware so much, but other kinds of spyware commonly do.
About half the stuff downloaded from IRC and nearly all software
downloaded using P2P or file-sharing is trojaned in some way.

Corrective: Use SpyBot, Ad-Aware, CWShredder, and SpywareBlaster. The
first two do identify SpecterSoft and some other keyloggers as well as
advertising spyware (on and off -- SpecterSoft occasionally changes
its product just enough to evade detection programs). But thee four
should be in every computer user's toolbox and use their built-in
updaters regularly.

There are a few specific anti-keylogger programs. Jammer and
Who'sWatchingMe are two. Feel free to invest in them if you like,
although a good anti-virus scanner is pretty effective too and those
are pretty much a must these days. I recommend McAfee, NOD32, or even
Avast! if you want something free.

Sponge
Sponge's Secure Solutions
www.geocities.com/yosponge
My new email: yosponge2 att yahoo dott com

Relevant Pages

  • Re: Downloads and Spyware
    ... >> Microsoft, either from a CD or the internet ... >> it better to download these to my desktop in order to ... >> spyware applications before the actual install on my ... >> them are identified as Temp Internet files which I am ...
    (microsoft.public.windowsxp.general)
  • Re: Downloads and Spyware
    ... >>> Microsoft, either from a CD or the internet ... >>> 1) Should I disable my anti-virus and spyware ... >>> it better to download these to my desktop in order to ... >>> them are identified as Temp Internet files which I am ...
    (microsoft.public.windowsxp.general)
  • Re: trend-micro
    ... Is it safe for you to uninstall Trend Micro and install the Antivirus ... I'll mainly work around Windows XP, as that is what the bulk of this ... Empty your Temporary Internet Files and shrink the size it stores to a ... and some you can only download if you are registered - but it is best ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Downloads and Spyware
    ... > it better to download these to my desktop in order to ... > spyware applications before the actual install on my stem? ... > them are identified as Temp Internet files which I am ... of the Microsoft Powertoys - TweakUI in particular: ...
    (microsoft.public.windowsxp.basics)
  • Re: dialer pops up..help!!
    ... If I download spyware blaster, will that solve my current dilema? ... Sure do appreciate your help and advice. ... >> I have xp pro on my computer and high speed cable internet, ...
    (microsoft.public.windowsxp.perform_maintain)