CSA alarms

[6rlopez_2]

I receive this two alarms:

1) The program 'C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE' (as user DEFENSOR\sgarcia) is trying to capture all keystrokes.

2)'C:\WINNT\explorer.exe' (as user DEFENSOR\mmartinez) tried to open/read the file 'C:\WINNT\regedit.exe'.

Is this the normal behaviur of these applications or it is an attack?

[travis-dennis_2]

Without knowing more about the programs it is hard to say for sure BUT...generally speaking you do not want programs capturing all your keystrokes and you do not want programs writing to the registry. There are always exceptions. For example HP has a program that monitors all keystrokes so that when you press certain hotkeys it will invoke a certain action. If you wanted to allow this to heppen then ok but most spyware will also monitor and capture all keystrokes. You need to find out what that Archivos program is and if it really neds to capture your keystrokes. I did a google search and didn't come up with much. In most cases you don't want Internet Exploiter reading your registry either. Again, you have to check your environment and see what is actually happening to trigger these events.

Hope this helps.

Please remember to rate all replies