AcroRdWin weird problem/question

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I'm running xp pro/sp2. also running Iambigbrother parental monitoring
software to keep an eye on my kids. the bigbrother program records all
keystrokes entered. here's my question: 'AcroRdWin' shows up on this keyboard
stroke list dozens of times a day. it even shows up as being entered when i'm
using the pc. even though i'm def. not keying it in. it even turns up as
keystrokes entered at 4am when my scheduled antivirus scan starts when nobody
is at the pc. An internet search ties this AcroRdWin.exe file to these 2
other Microsoft files, lssas.exe and qttask.exe. the rub here is that a
search of my pc, including sys and hidden files and folders cant find any of
these 3 files listed. I recently reloaded my xp op system. prior to the op
system reload, i ran this same pc, same hardware, same iambigbrother programs
for years and never saw this acrordwin deal before. no new programs,
hardware, etc. anyone have any ideas what this file is? and how its acting
like keystroke entries on my pc? is this a remote access virus or somthing
similar?
why doesnt my norton av 2007 scans find and identify it if it is indeed a
virus?
 
On Wed, 10 Oct 2007 22:07:01 -0700, Glen H <Glen
I'm running xp pro/sp2. also running Iambigbrother parental monitoring
software to keep an eye on my kids. the bigbrother program records all
keystrokes entered. here's my question: 'AcroRdWin' shows up on this keyboard
stroke list dozens of times a day. it even shows up as being entered when i'm
using the pc. even though i'm def. not keying it in. it even turns up as
keystrokes entered at 4am when my scheduled antivirus scan starts when nobody
is at the pc. An internet search ties this AcroRdWin.exe file to these 2
other Microsoft files, lssas.exe and qttask.exe. the rub here is that a
search of my pc, including sys and hidden files and folders cant find any of
these 3 files listed. I recently reloaded my xp op system. prior to the op
system reload, i ran this same pc, same hardware, same iambigbrother programs
for years and never saw this acrordwin deal before. no new programs,
hardware, etc. anyone have any ideas what this file is? and how its acting
like keystroke entries on my pc? is this a remote access virus or somthing
similar?
why doesnt my norton av 2007 scans find and identify it if it is indeed a
virus?
Click to expand...

My *suggestion* would be disable bigbrother for a week and see what
happens .
And Norton - say no more .
 
qttask.exe is Apple Quick Time not an MS file
lssas.exe is MS Local Security Policy though can be associated with a virus
infection

If a search did'nt find the files then you used incorrect search criteria
 
I think AcroRdWin.exe is acrobat reader, as to why it should show up in the
log I've no idea.
Neil
 
I see why you asked now after I have just done a google search. Most seem to
be equally confused. Seems very strange though that it's not part of acrobat
reader although one thread seems to be on an aol forum so now I'm not sure
if it could be aol based.

Neil
 
if i stop bigbrother, i cant see the keystroke log. i re-did all my searches,
and these 3 files are not on my pc. so how can acrordwin show up as
keystrokes entered 20 times a day if nobody is pressing any keys? i am also
not a big fan of the norton antivirus bloatware. can an external source
access my pc and enter keystrokes like this thru a worm/virus? and if so, how
do i find out who/what/where so i can get rid of it?
 
i also saw that the '32' file was for adobe reader. but, nobody seems to know
what the acrordwin file is for. i must tell you guys that i'm very
uncomfortable with a program showing up as keystrokes on my pc without me
actually typing them in. and the fact that i cant find the darn file on my
pc is equally frustrating.
 
more info: i did a registry search for acrordwin and found one listing in the
search history folder of my outlook express. prob got there when i did a
search of all my stored emails to see if this file was listed anywhere. i
deleted the entry in the registry, did a reboot, and i'll let u know if it
shows up as keystrokes again.
 
Glen said:
more info: i did a registry search for acrordwin and found one listing in the
search history folder of my outlook express. prob got there when i did a
search of all my stored emails to see if this file was listed anywhere. i
deleted the entry in the registry, did a reboot, and i'll let u know if it
shows up as keystrokes again.
Click to expand...

According to this: http://www.file.net/process/lssas.exe.html, lssas.exe
is the product of the worm agobot.dl, and "The process uses ports to
connect to LAN or Internet. lssas.exe is able to hide itself, connect to
Internet, monitor applications. Therefore the technical security rating
is 90% dangerous, however also read the users reviews."

It appears to be a botnet worm:
http://www.symantec.com/avcenter/attack_sigs/s20665.html
 
I also have "I am Big Brother" running in the back ground, and I am also
seeing the "AcroRdWin" keystrokes comming up on the key stroke
recorder.... I think it might me "CONTROL-ALT-DELETE". Please do a
CONTROL-ALT-DELETE on your computer and tell me if "AcroRdWin comes up
on your keystroke registry at the same time that you pressed those same
3 keys.

Also, some how my daughter is erasing the internet history, but ONLY
the web sights that she goes to, and how she is erasing the history IS
NOT showing up on "I am Big Brother", but of course the websights she
goes to and the screenshots do...... HOW IS SHE DOING THAT????

As far as "NORTON"..... dump it! I suggest "AVG" for your virus
protection & firewall

Any help will be greatly appreciated. Thanks.
 
not the greatest program


I also have "I am Big Brother" running in the back ground, and I am also
seeing the "AcroRdWin" keystrokes comming up on the key stroke
recorder.... I think it might me "CONTROL-ALT-DELETE". Please do a
CONTROL-ALT-DELETE on your computer and tell me if "AcroRdWin comes up
on your keystroke registry at the same time that you pressed those same
3 keys.

Also, some how my daughter is erasing the internet history, but ONLY
the web sights that she goes to, and how she is erasing the history IS
NOT showing up on "I am Big Brother", but of course the websights she
goes to and the screenshots do...... HOW IS SHE DOING THAT????

As far as "NORTON"..... dump it! I suggest "AVG" for your virus
protection & firewall

Any help will be greatly appreciated. Thanks.
​
AcroRdWin only shows up after installing IamBigBrother and seems to be what the keylogger itself is called, Isass.exe is the Windows file, Issas.exe is an IamBigBrother file that attempts to fool those who look in the Task Manager (though the regular, needed, Isass.exe is running as well).

As for IamBigBrother, it is a horid program that steals way too much processor time (making your computer slow), leaving the intended target/victum aware there is a problem, which shows up as a problem on most anti-vitus and anti-spyware scans, and which stores all information as non-encrypted plain-text files and non-encryped image files, which means your targets can easily view those files without opening the IamBigBrother software, and make any changes, or browse the file for your IamBigBrother password to change any settings you might have in place. It is an inferior product you should not be paying for (I've noticed it on 3 of my friend's computers, and every time I change things to give them hassles, and to erase the times I've used it). I don't have a replacement in mind, but I'm sure Something has to be better than IamBigBrother!
 
Back
Top