Re: Boot sector virus from USB flashdrive?


"Scott" <fcctech@xxxxxxxxx> wrote in message
news:uAxhRFjtHHA.3356@xxxxxxxxxxxxxxxxxxxxxxx
XP sp2- Zone Alarm Security Suite said
"not-a-virus:Porn-Dialer.Win32.Agent.aw
found in
Quicken\qw.exe
Quicken\RestartExe.exe "
At the same time I had another virus alert about ".Ardamax." and
"backdoor.blackhole.2004". During the infection the firewall said my
computer was trying to send out ARP requests periodically. It could not be
removed completely and I reformatted the drive, clean XP install and had
similar spyware problems. Installed new harddrive, clean install, scanned
several times before downloading and installing Quicken Basic again.

Now I am running SnoopFree and when I restored my Quicken backup,
SnoopFree says "QW.exe is trying to hook the keyboard" on password prompt
and "QW.exe is trying to capture the screen" which I denied, of course.
Quicken works fine when I disallowed qw.exe to hook the keyboard and
capture the screen.

Now I am concerned that possibly this virus problem is now in my Quicken
backup file or the boot sector on my USB flashdrive. Right now there is no
spyware or virus detected on my computer, but SnoopFree log shows that
QW.exe tried to hook the keyboard over 100 times when I logged into
Quicken and tried to capture the screen too. Is this normal for qw.exe to
try and hook the keyboard and capture the screen? I am afraid I may have
to reformat again and build a new Quicken file instead of using the
backup. Any help about this is very much appreciated. Scary stuff.
Thank you. PS My backup file is stored on a USB flashdrive. Before the
reinstall, ZoneAlarm gave errors while trying to scan files in the Boot
Sector of my harddrive. Is it possible with XP for a virus to encrypt its'
own files to make it undetectable? During the infection I booted to DOS
only using and EZ OS Installation program and was unable to view some
files and folders that were encrypted. I also posted to a forum at Quicken
and awaiting a reply. Thanks very much. Scott

After searching this I found this unrelated but similar article regarding
Quicken having a backdoor in it.
http://computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=privacy&articleId=9025436&taxonomyId=84
Thanks for your help and information. Scott


.

Relevant Pages

  • Boot sector virus from USB flashdrive?
    ... Installed new harddrive, clean install, scanned ... fine when I disallowed qw.exe to hook the keyboard and capture the screen. ... Now I am concerned that possibly this virus problem is now in my Quicken ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Boot sector virus from USB flashdrive?
    ... Installed new harddrive, clean install, scanned ... | fine when I disallowed qw.exe to hook the keyboard and capture the screen. ... | Now I am concerned that possibly this virus problem is now in my Quicken ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Boot sector virus from USB flashdrive?
    ... Installed new harddrive, clean install, ... | is trying to capture the screen" which I denied, ... | fine when I disallowed qw.exe to hook the keyboard and capture the ... | Now I am concerned that possibly this virus problem is now in my Quicken ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Boot sector virus from USB flashdrive?
    ... | is trying to capture the screen" which I denied, ... | fine when I disallowed qw.exe to hook the keyboard and capture the ... | Now I am concerned that possibly this virus problem is now in my Quicken ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Win XP RPC Service Failure Reboot Rant Help - the story of a ruined weekend!
    ... "Virus Alert About the Blaster Worm and Its Variants" ... | of Windows ME to XP Home Edition and install Symantec Internet Security ... | mucked up Zone Alarm so uninstall it and switch on the XP firewall. ...
    (microsoft.public.windowsxp.general)