Tech Team: In the Trenches

September 2005 Volume 3 Issue 9

Table of Contents


I kinda feel like, somebody’s watchin’ me

Imagine going to your bank and, while talking to a teller, a man leans over your shoulder and jots down the account number on your checks. He notes your home address, home phone number, Social Security number, credit card number, credit card PIN and other financial data. Of course, he then uses that information any way he wants to steal your money, your credit, even your identity. 

That man is out there. His name is Srv.SSA-KeyLogger. And he's not physically standing at your bank—he's looking over your shoulder as you conduct business over the Internet. Of course, you can't tell he's there. He's not only jotting things down, he's invisible. 

KeyLogger software runs unseen on your computer and you probably downloaded it through the Internet simultaneously with some other type of software that you actually wanted. KeyLogger does what its name says: When you visit some types of Web sites, such as online banking, it logs each key you hit. As you enter your Social Security number, credit card number or PIN, the software sends the information via the Internet to whatever party created the software in the first place, effectively giving them enough information to steal your money or even your identity. 

While spyware is not new, Srv.SSA-KeyLogger learned from previous mistakes and is a more formidable opponent than those in the past. Unpatched Windows computers remain the primary target, and the software not only installs itself invisibly, it somehow can remain operational despite repeated attempts to remove it. 

This KeyLogger even sleeps most of the time, awaking only when you visit a type of Web site that could give it the information it needs. That's a key change from earlier KeyLoggers that recorded everything. Now the thieves not only get the data they want, but they receive it in a succinct, easy-to-use format. 

What's a low-tech computer user to do? Be vigilant. Create a schedule for updating your security systems and stick to it. Problems are easier to deal with if averted, harder after they've infected your computer. 

• Make sure your spyware removal tool is updated, and used on a regular schedule.

• Make sure your anti-virus program is current and running before you try to remove any spyware—the spyware may have a booby trap virus that is activated when you try to remove the spyware.

• Install all Microsoft Windows updates and Security Patches for your version of Windows. (http://www.microsoft.com/)


Copyright 2005 FAR