dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
898
share rss forum feed


cme01

@optonline.net

keyboard malware?

i bought a cheap usb keyboard from a local chinese pc shop...i noticed weird behaviors over the span of 1 month

turns out it was a keylogger somehow in the keyboard...anyway i put in the windows disc and format and deleted the partition and reinstalled.

should i have peace of mind or should i use dban just incase?


siljaline
I'm lovin' that double wide
Premium
join:2002-10-12
Montreal, QC
kudos:17

dave
Premium,MVM
join:2000-05-04
not in ohio
kudos:8
Reviews:
·Verizon FiOS
reply to cme01
You mention the facts that you bought the keylogger from a 'local chinese pc shop' and the keylogger was 'in' the keyboard. This suggests that you believe the keyboard is the disease vector. I can't assess the likelihood of this, but if it's true about the keyboard, nothing you do to the Windows system will remove the problem if you then plug the same keyboard back in.


La Luna
RIP Lisa
Premium
join:2001-07-12
Warwick, NY
kudos:3
reply to cme01
said by cme01 :

turns out it was a keylogger somehow in the keyboard...

"IN" the keyboard? How do you know this?


Dustyn
Premium
join:2003-02-26
Ontario, CAN
kudos:11
reply to cme01
The only thing I could think of was perhaps you installed keyboard drivers for special functionality keys for your keyboard? Perhaps then this was how you became infected... from the provided media.


La Luna
RIP Lisa
Premium
join:2001-07-12
Warwick, NY
kudos:3
said by Dustyn:

The only thing I could think of was perhaps you installed keyboard drivers for special functionality keys for your keyboard? Perhaps then this was how you became infected... from the provided media.

Was thinking that too. OP didn't provide much info.

Could someone please tell me if JUST the keyboard itself could do something like this? It sounds very bizarre to me.
--
The Alien in the White House

20,776 DEADLY TERROR ATTACKS SINCE 9/11

SpHeRe31459
Premium
join:2002-10-09
Sacramento, CA
kudos:2

1 recommendation

I highly doubt this, but ostensibly the keyboard vendor could include a keylogger inside the keyboard, basically wired through the USB interface. Basically taking a USB keylogger dongle and wiring it internally to the keyboard.

BlitzenZeus
Burnt Out Cynic
Premium
join:2000-01-13
kudos:3

1 recommendation

reply to La Luna
There are devices like this, think of one usb plug for multiple devices like a built-in hub. For example I have a single transceiver for a keyboard, and mouse while both show up as separate devices. The transceiver shows up as three devices, it also shows up as a bluetooth transceiver. The keyboard, and mouse work in the bios, along with installing operating systems without any software.

Now I'm not so sure the op's case is true, but it's possible. There's all sort of spy devices like this, and some keyloggers even plug in inline with your keyboard. Through the use of autoplay it's quite possible to include a usb drive/keylogger device, and when that gets launched it could even hide itself. If the person is already running as full admin I highly doubt your standard av solutions would catch it if it's done well.
--
I distrust those people who know so well what god wants them to do because I notice it always coincides with their own desires- Susan B. Anthony
Yesterday we obeyed kings, and bent our necks before emperors. But today we kneel only to the truth- Kahlil G.


La Luna
RIP Lisa
Premium
join:2001-07-12
Warwick, NY
kudos:3
reply to cme01
Thanks for the info guys.


DownTheShore
RIP tmpchaos
Premium
join:2003-12-02
Beautiful NJ
kudos:14
Reviews:
·Verizon Online DSL
reply to cme01
Suggestion:

The next time you want a cheap USB keyboard, go to Walmart. You'll get the cheap Chinese keyboard minus the keylogger.

$6.67:
»www.walmart.com/ip/V7-Standard-U···20434690
--
Patriotism is not waving a flag, it is living the ideals

I want to retire to the Isle of Sodor and ride the trains.


Cartel
Premium
join:2006-09-13
Chilliwack, BC
kudos:2
Reviews:
·TekSavvy DSL
·Shaw
·TELUS
reply to cme01


siljaline
I'm lovin' that double wide
Premium
join:2002-10-12
Montreal, QC
kudos:17
Reviews:
·Bell Sympatico

2 edits
reply to cme01
There was I day when I subscribed to Spyware Groups on Usenet via »www.eternal-september.org/

It was not unusual to read of a keyboard vendor getting flagged for having bundled malware with the driver software.

If you've been able to rid of whatever it was - chuck it and move and to something that's Plug "N Pray.

Also See: Pay-Per-Install

IIRC, the adware software were in Lexmark printers.