Shift key virus

[829]

I have a customer that says his IT department says there is a new threat and can be checked by pressing the shift key 5 times, it pulls up a command prompt instead of the sticky keys. I told him I have not read any information about this, but he is persistent.

Has anyone else heard of this?

[DavidR]

I would start by searching virus myths vmyths.com or google but too me it has the whiff of myth/hoax/practical joke about it regardless of what your customers IT department said.

If they knew so much about it, being able to test for it (pressing the shift key 5 times) you would have thought they would have known the name of this virus

[829]

I had searched google before posting here, but I will check the vmyths website.

[DavidR]

My personal feeling would be to get back to your customer and ask him for the virus name this iffy shift key check is supposed to detect. That would be much more usefull, you would be able to get information on the supposed virus to be able to protect and or remove, etc.

Welcome to the forums.

[829]

I have already done that and he said it has something to do with replacing the sethc.exe file to gain domain access to the machine. I have been reading up on this exploit and will chack back later.

[CharleyO]

***

Perhaps the below has some reference to what you are talking about:

http://seclists.org/lists/pen-test/2005/Jan/0157.html


***

[829]

I have been to that site already and moved a few links down to a better page.

Thank you though.

[CharleyO]

***

Sorry, but after 30 mins of searching, that was as close as I could come ... nothing with shift key virus.   

BTW ... welcome to the forums, 829!   


***