Boot sector virus from USB flashdrive?



XP sp2- Zone Alarm Security Suite said
"not-a-virus:Porn-Dialer.Win32.Agent.aw
found in
Quicken\qw.exe
Quicken\RestartExe.exe "
At the same time I had another virus alert about ".Ardamax." and
"backdoor.blackhole.2004". During the infection the firewall said my
computer was trying to send out ARP requests periodically. It could not be
removed completely and I reformatted the drive, clean XP install and had
similar spyware problems. Installed new harddrive, clean install, scanned
several times before downloading and installing Quicken Basic again.

Now I am running SnoopFree and when I restored my Quicken backup, SnoopFree
says "QW.exe is trying to hook the keyboard" on password prompt and "QW.exe
is trying to capture the screen" which I denied, of course. Quicken works
fine when I disallowed qw.exe to hook the keyboard and capture the screen.

Now I am concerned that possibly this virus problem is now in my Quicken
backup file or the boot sector on my USB flashdrive. Right now there is no
spyware or virus detected on my computer, but SnoopFree log shows that
QW.exe tried to hook the keyboard over 100 times when I logged into Quicken
and tried to capture the screen too. Is this normal for qw.exe to try and
hook the keyboard and capture the screen? I am afraid I may have to reformat
again and build a new Quicken file instead of using the backup. Any help
about this is very much appreciated. Scary stuff. Thank you. PS My backup
file is stored on a USB flashdrive. Before the reinstall, ZoneAlarm gave
errors while trying to scan files in the Boot Sector of my harddrive. Is it
possible with XP for a virus to encrypt its' own files to make it
undetectable? During the infection I booted to DOS only using and EZ OS
Installation program and was unable to view some files and folders that were
encrypted. I also posted to a forum at Quicken and awaiting a reply. Thanks
very much. Scott


.



Relevant Pages

  • Re: Boot sector virus from USB flashdrive?
    ... Installed new harddrive, clean install, scanned ... SnoopFree says "QW.exe is trying to hook the keyboard" on password prompt ... and "QW.exe is trying to capture the screen" which I denied, ... Now I am concerned that possibly this virus problem is now in my Quicken ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Boot sector virus from USB flashdrive?
    ... Installed new harddrive, clean install, scanned ... | fine when I disallowed qw.exe to hook the keyboard and capture the screen. ... | Now I am concerned that possibly this virus problem is now in my Quicken ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Boot sector virus from USB flashdrive?
    ... Installed new harddrive, clean install, ... | is trying to capture the screen" which I denied, ... | fine when I disallowed qw.exe to hook the keyboard and capture the ... | Now I am concerned that possibly this virus problem is now in my Quicken ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Boot sector virus from USB flashdrive?
    ... | is trying to capture the screen" which I denied, ... | fine when I disallowed qw.exe to hook the keyboard and capture the ... | Now I am concerned that possibly this virus problem is now in my Quicken ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Win XP RPC Service Failure Reboot Rant Help - the story of a ruined weekend!
    ... "Virus Alert About the Blaster Worm and Its Variants" ... | of Windows ME to XP Home Edition and install Symantec Internet Security ... | mucked up Zone Alarm so uninstall it and switch on the XP firewall. ...
    (microsoft.public.windowsxp.general)