- Techniques to prevent Key-loggers
- Posted by Hakako on February 9th, 2008
Besides protecting your System additional measures that can be taken
are:
Monitoring what programs are running on your computer
Monitor your network whenever an application attempts to make a
network connection.
Use an automatic form filler program that prevent keylogging since
they're not using the keyboard.
There are commercially available anti-keyloggers, such as
PrivacyKeyboard:
http://www.anti-keylogger.com.
It uses the methods of heuristic analysis and has no signature base.
PrivacyKeyboard's features:
* No signature base;
* Protection against windows text capturing;
* Protection against keystroke logging;
* Protection against clipboard capturing;
* Protection against active window screenshoting;
* Protection against desktop screenshoting;
* Protection against attacks of spy programs;
* Protection against hardware keyloggers;
* Full UNICODE support;
* The ability to work at the background, transparently for the
user
* The ability to disable keyloggers instantly
Problem is you'll have to part with $89.95 ...
but if you're looking for a free alternative try:
- Spybot Search & Destroy, a freeware tool that does a pretty decent
job at detecting all kinds of spyware.
Latest update protects against the following Keyloggers:
+ Perfect Keylogger
+ Ardamax
+ Elite Keylogger
http://www.safer-networking.org/
Windows Defender, a free program that helps protect your computer
against pop-ups, slow performance, and security threats caused by
spyware: http://www.microsoft.com/athome/secu...e/default.mspx
The Sysinternals web site hosts several utilities to help you manage,
troubleshoot and diagnose Windows systems and applications.
Utilities for looking under the hood to see what processes are doing
and the resources they are consuming:
http://www.microsoft.com/technet/sys...s/default.mspx
In this article:
http://www.lazybit.com/index.php/a/2...ger_protection
Alex provides some free and valuable advice about keylogging
protection such as using the on-screen keyboard available in W2000 and
XP that can be launched by executing "osk" or the technique of mouse
highlighting and overwriting.
Or you can also download Click-N-Type virtual keyboard free from:
http://www.lakefolks.org/cnt/
Also worth reading is Wikipedia's article on Keystroke logging:
http://en.wikipedia.org/wiki/Keystroke_logging
http://magikomputer.blogspot.com/200...rotection.html
Any other ideas for protection against keyloggers?
- Posted by Sebastian G. on February 9th, 2008
Hakako wrote:
What exactly stops the malicious program from simply reading the data from
the form?
Very simple: Don't install any.
- Posted by bealoid on February 10th, 2008
Hakako <1001webs@gmail.com> wrote in
news:555c9a84-79e2-44e5-baa2-7bcde31ec5de@i7g2000prf.googlegroups.com:
This is, surely, the most important part. Don't install software that you
don't trust. If you think there's malware (a keylogger) on your machine
then in theory there's nothing you can to do protect against keylogging.
Sure, there's stuff you can do with real software that works against real
key-loggers, but in theory once you've run malware that machine is hosed
and you should flatten and re-install.
[snip]
You didn't seem to mention hardware loggers. These are small, hard to
notice, and hard to protect against, but they require physical access to
the machine. You only need a few moments to unplug a keyboard and connect
the doo-hickey.
The one I've read about (keyghost or something similar??) couldn't handle
the shifted character that -on my keyboard- is next to the 1 key. "¬" (I
don't know how well that's going to make it through Usenet.)
- Posted by traveler 66 on February 10th, 2008
On Sun, 10 Feb 2008 00:20:15 +0100, Sebastian G. wrote:
If it's a software keylogger, the best product on the market is at
www.spycop.com it costs, but you get what you pay for. They update it
regularly.
- Posted by Ertugrul Söylemez on February 11th, 2008
On Sun, 10 Feb 2008 10:22:58 GMT
bealoid <signup@bealoid.co.uk> wrote:
This is particularly a problem at my workplace. I cannot trust anyone
here. Unfortunately there are no useful counter-measures other than
using key files on a USB stick, from which you boot, which isn't quite
easy to handle (backups and such), and not quite secure. A
smartcard-based solution would be nice.
Regards,
Ertugrul Söylemez.
- Posted by Hakako on February 11th, 2008
On Feb 11, 11:07 am, Ertugrul Söylemez <e...@ertes.de> wrote:
I was going to reply to the other poster that I was talking about
remote key-logging, since it's your responsibility to physically
protect your computer.
But obviously, if there are dozens of computers at your office that
would be Mission Impossible.
As far as I know there are PC & Notebook Security Combination Cable
Locks, which are literally bolted-into your computer's VGA or Serial
port.
It protects your computer with 2 steel bolts that cannot be accessed,
together with a 6'6" steel cable sheathed in black PVC and a included
security plate, that gives you the option of securing the cable to an
area without a convenient attachment point.
Here you can see the specs:
http://gadgetofficeinspector.blogspo...able-lock.html
- Posted by Ertugrul Söylemez on February 11th, 2008
On Mon, 11 Feb 2008 02:46:53 -0800 (PST)
Hakako <1001webs@gmail.com> wrote:
Exactly.
Still the cable can be cut apart to install a logger right inbetween, or
a camera could be installed to intercept my typing. Connected USB
storages may be intercepted through hardware. Or even the entire
Machine could be replaced, while I'm at home sleeping.
So the "security cable lock" is just an anti-lamer measure, just like
unconfigured firewalls are. Someone really interested in my data will
easily get around it.
Regards,
Ertugrul Söylemez.
- Posted by Hakako on February 11th, 2008
On Feb 11, 12:44 pm, Ertugrul Söylemez <e...@ertes.de> wrote:
Yeah right, and even the entire office could be vandalized or even
demolished while you are away on vacation.
Gimme a break, will yah?
- Posted by Ertugrul Söylemez on February 11th, 2008
On Mon, 11 Feb 2008 04:32:55 -0800 (PST)
Hakako <1001webs@gmail.com> wrote:
This threat is real for some people. In my case, it's not that bad, but
for some the possibilities I mentioned must be considered.
Regards,
Ertugrul Söylemez.
- Posted by mak on February 11th, 2008
Ertugrul Söylemez wrote:
I am sorry, but you should find another job.
how much fun is *that* ?
M
- Posted by Ertugrul Söylemez on February 11th, 2008
On Mon, 11 Feb 2008 16:12:31 +0100
mak <mak@nospam.com> wrote:
That's the price of working independently, but it's not that bad. I
just don't want anyone here to mess around with my data. And I can
imagine that some would be interested in it.
Most of them lack the technical knowledge to mount an attack, but I hate
making such assumptions.
Regards,
Ertugrul Söylemez.
- Posted by comment on February 11th, 2008
On Mon, 11 Feb 2008 04:32:55 -0800 (PST)
Hakako <1001webs@gmail.com> wrote:
--
This poast was encoded using ROT 0
- Posted by Ertugrul Söylemez on February 11th, 2008
On Mon, 11 Feb 2008 15:30:47 -0000
"comment" <comment@some.com> wrote:
I mean the threat that someone may be interested in my data enough to
try to steal it.
Regards,
Ertugrul Söylemez.
- Posted by Hakako on February 12th, 2008
On Feb 11, 5:03 pm, Ertugrul Söylemez <e...@ertes.de> wrote:
And why bother with all that gadgetry?
If they are really SO interested it would be easier for them to just
kidnap you and beat the shit out of you until you sing The
Traviatta ...
- Posted by Hakako on February 14th, 2008
On Feb 12, 3:43 am, Hakako <1001w...@gmail.com> wrote:
BYW, that technique is called "Brute Force" Password cracking ...
- Posted by Ertugrul Söylemez on February 14th, 2008
On Wed, 13 Feb 2008 19:15:16 -0800 (PST)
Hakako <1001webs@gmail.com> wrote:
Or rubber hose cryptanalysis.
Regards,
Ertugrul Söylemez.
- Posted by Carlo Seddaiu on March 4th, 2008
Hi Hakako,
The best way to stop a key logger is feed the key logger desinformation.
Feed it for example fake logins in fake websites and monitor the logs to
see who is logging in from what ip's with those fake credentials. The
best way to stop key loggers is to catch the people who use them.
Ciao,
Carlo
Sebastian G. schreef:
- Posted by Sebastian G. on March 4th, 2008
Carlo Seddaiu wrote:
The question is about the mysterious step between "monitor logins" and
"catch the people", and which kind of magic for implementing it.
- Posted by coment on March 4th, 2008
"Sebastian G." <seppi@seppig.de> wrote in message
news:634v55F25r2gpU1@mid.dfncis.de...
your ram chips and then reciting the correct incantation at exactly the same
moment the key logger is triggered. I think most business schools have a course
covering this.
- Posted by Dustin Cook on March 4th, 2008
"coment" <some@com.net> wrote in
news:022364d4$0$16191$c3e8da3@news.astraweb.com:
Doesn't the season still come into play? or the moons current position or
something? hehehe.
--
Regards,
Dustin Cook - http://bughunter.it-mate.co.uk
BugHunter v2.2e AntiMalware Removal Utility