[dba-Tech] keylogger ?

I don't know about detecting and removing it, but you can certainly disable
it from starting in msconfig by unticking the box.

You should also be able to stop bpk.exe from contacting the internet as well
through zonealarm. I'm on the verge of remembering something else, but my
head is still a bit fuzzy from last night's party... I'll come back when
I've remembered :-)

Hope this has helped a bit.


Jon

-----Original Message-----
From: dba-tech-bounces at databaseadvisors.com
[mailto:dba-tech-bounces at databaseadvisors.com]On Behalf Of Mike Tope
Sent: 01 January 2005 16:50
To: Discussion of Hardware and Software issues
Subject: [dba-Tech] keylogger ?


List
A couple of times lately I have discovered BlazingTools Perfect KeyLogger on
our family pc.

Windows 98; I have now disabled Internet Explorer (in ZoneAlarm) but it
wasn't in common use before. Anyone know how the keylogger gets in there ?
And how I can stop it ?

Msconfig shows it up as c:\windows\system\bpk.exe in the startup tab. But we
don't startup very often (for Windows98). That's a legacy of a duff power
supply, that taught us not to switch it off in case we can't switch it on
again. (The power supply has gone, but the habit remains.)

So just because the keylogger files are dated two days ago doesn't
necessarily mean it's running. If you go to their website (BlazingTools are
quite open about it - http://www.blazingtools.com/bpk.html) you learn that
it can run completely invisibly so I can't be sure whether it's been
activated or not.

I just ran Ad-Aware and Spybot S&D and neither detected it.

It's a problem because my wife won't do the shopping if she thinks her
credit card number is being logged.

Any hints anyone ?
Mike Tope

_______________________________________________
dba-Tech mailing list
dba-Tech at databaseadvisors.com
http://databaseadvisors.com/mailman/listinfo/dba-tech
Website: http://www.databaseadvisors.com

--
This email has been verified as Virus free
Virus Protection and more available at http://www.plus.net