Trojan virus can exploit programs that store personal data
By JOHN TORRO
Published September 19, 2005
Q. I downloaded and ran Protected Storage PassView. I was shocked to see all the passwords, credit card numbers (which are never saved), and various personal data on-screen. Some of the information shown must have transferred over from my old PC to the new one, such as passwords for AOL e-mail accounts. After perusing the ReadMe, I think I can clear out all the data and disable my autocomplete to keep much of my private information off the PC. However, it will be an inconvenience to have to type in every ID and password for each log-in to a message board. I keep my antivirus and firewall up to date and use SpywareBlaster, Spybot, Ad-aware and CounterSpy. As long as there are no kids or guests using the PC, is there really a need to delete all this information? If so, what are the downsides to deleting the info? Should the PC ever need to go to a repair shop, is there a way to delete as much of this personal information as possible?
A. That is definitely an eye-opener. The Protected Storage Area is used by Windows XP to record sensitive information, including the autocomplete histories for Web addresses and passwords. The new Trojan Srv.SSA-KeyLogger exploits this. As the PC World article you read states, Windows XP Service Pack 2 users are less likely to be infected with this Trojan. Meanwhile, you need to make sure all your antivirus and antispyware programs are updated. This virus runs only on Windows 2000 and Windows XP. You can clean out the protected storage area by disabling autocomplete (through Internet Explorer, Tools, Internet Options, Content, Auto Complete, clear Forms) and then uncheck the Use Autocomplete options. That will come at the price of inconvenience of entering passwords and data each time they are required, but that is an individual call. If you have SP2, if all antivirus and antispyware is updated, you are careful and responsible in your browsing and e-mail and have an active firewall, that Trojan should not be a threat.
Winfile can be downloaded for use with Windows XP
Q. I switched to Windows XP, and all is just fine. But I miss the old winfile we used to bring up in Run.
A. Winfile is the old File Manager used under the ancient Windows operating systems. With its ease of use and conciseness, it apparently still has its fans. You can find a version of this executable that seems to work okay on Windows XP at www.kellys-korner-xp.com/xp_tweaks.htm
Stick with Service Pack 2's built-in firewall
Q. You've recommended the combination of Zone Alarm and Spybot. When I upgraded from Windows 98 to Windows XP Home recently, I was told to uninstall Zone Alarm because it conflicts with the built-in antispyware in Windows. Do you concur with that advice? Also, you recently recommended a Windows antispyware, antipopup, antispam program. I remember its cost as $90 but forgot its name.
A. I think you may have me confused with another infallible 13 percent of the time computer answer person. Although Zone Alarm is a good product, I always recommend the built-in firewall that comes with Windows XP Service Pack 2. Simplicity and integration are always my top priorities when it comes to layering extra software on an already complicated base operating system. Again, for the antispyware, I recommend running a combination of Microsoft Antispyware beta (free at www.microsoft.com/athome/security/spyware/software) and either Spybot and/or Ad-aware (www.safer-networking.org and www.lavasoft.de respectively). Again, all are free and effective. For spam, I recommend just using common sense e-mail practices. Of course, there are many products on the market to help you fight spam, but each one comes with its own set of potential problems. Make sure you use a free nonpersonal e-mail address (Yahoo, Hotmail) when signing up for anything over the Web and never open anything from senders you do not recognize.
