PDA

View Full Version : Zemana AntiLogger


Incognito
June 8th, 2008, 03:20 AM
I'm testing out the trial right now and so far it blocks everything in aklt 3.0, their tests and another test i found at pctools.

So far its pretty good, i'm wondering if anyone else has used this before though?

Blue Ring
June 8th, 2008, 06:33 AM
You mean this: http://www.zemana.com/list/list.asp?ktgr_id=445

It apparently goes for $39 US dollars. It looks ok. I don't claim to be an expert, so correct me if I'm wrong, but it really doesn't look like it offers much more (if anything) than some of the freeware hips such as Comodo D+ and EQSecure.

ErikAlbert
June 8th, 2008, 06:59 AM
Why classical Anti-Virus Programs are not sufficient?
http://www.zemana.com/list/list.asp?ktgr_id=448
Nothing new, but one of the reasons, why I don't use scanners anymore.

I don't think this is about Anti-Keylogger only, but keyloggers scare users alot more than any other threat. ThreatFire uses the same trick with zero-day threats.

Saraceno
June 8th, 2008, 10:58 AM
Some programs will make sure they specialise in passing these downloadable tests.

Whether they work in real scenarios, I don't know. You'd have to use it to find out. At least you know Comodo, ThreatFire, Online Armor and others mentioned on here are performing as described.

Incognito
June 8th, 2008, 04:16 PM
So far its detecting other things like my download manager's clipboard monitor. I'm going to try running virtualbox with a bunch of keyloggers see what happens.

Incognito
June 8th, 2008, 06:09 PM
I tested these program. They all failed. wow.

Spytech keystroke spy 1.1
inside keylogger 4.1
Digital keylogger 3.0 by Nytro
ardamax keylogger 2.8
prorat 1.9
perfect keylogger 1.6.6

maymoons
June 9th, 2008, 06:48 AM
{QUOTE->
I tested these program. They all failed. wow.

Spytech keystroke spy 1.1
inside keylogger 4.1
Digital keylogger 3.0 by Nytro
ardamax keylogger 2.8
prorat 1.9
perfect keylogger 1.6.6
<-QUOTE}

this is not true.
i ask it to zemana support, they say this is wrong.


zemana protected you for this keyloggers

ErikAlbert
June 9th, 2008, 07:35 AM
{QUOTE-> this is not true.
i ask it to zemana support, they say this is wrong.

zemana protected you for this keyloggers <-QUOTE}
Maybe Incognito did his tests with an "infected" Zemana AntiLogger or in an infected system, that prevents ZAL from doing its job properly. ;D

HURST
June 9th, 2008, 09:29 AM
I think he means that THE KEYLOGGERS failed, which means that Zemana passed... At least that's what I understand

ErikAlbert
June 9th, 2008, 09:31 AM
{QUOTE-> I think he means thar THE KEYLOGGERS failed, which means that Zemana passed... At least that's what I understand <-QUOTE}
The way he wrote it is indeed confusing, but he created the confusion, not we.

Huupi
June 9th, 2008, 10:20 AM
How about latest '' hard to unhide hardware targeting rootkits (graphic adapter ?),story goes they survive,format,reformat as proofed by the '' big blackhat lady '' Are they really a treat or its more fancy gossip to scare us a bit ?

ErikAlbert
June 9th, 2008, 12:37 PM
{QUOTE-> How about latest '' hard to unhide hardware targeting rootkits (graphic adapter ?),story goes they survive,format,reformat as proofed by the '' big blackhat lady '' Are they really a treat or its more fancy gossip to scare us a bit ? <-QUOTE}
As long they don't show me how such things BEGIN and they usually don't, except the scaring part, I can't do anything about it. It has to start somewhere and how does it look : an executable or what ?
Instead of scaring the good guys, they better give a decent explanation, only amateurs do this.
As long it is on your HDD, you can get rid of it.

yankinNcrankin
June 9th, 2008, 01:38 PM
As long as it's your hardware you won't ever get rid of it. ;D

ErikAlbert
June 9th, 2008, 02:18 PM
{QUOTE-> As long as it's your hardware you won't ever get rid of it. ;D <-QUOTE}
You mean all hardware except HDD and nobody seems to be able to explain how it starts. You don't seem to know anything about it either, except scaring people, the easy part. ;)

Incognito
June 10th, 2008, 02:05 AM
zemana failed to stop the keyloggers.

As in keyloggers worked.

antilogger didn't work.

I ran them in virtualbox. Installed a fresh xp, installed antilogger and then installed the keyloggers.

dmenace
June 10th, 2008, 02:16 AM
keyscrambler anyone?

ErikAlbert
June 10th, 2008, 02:50 AM
{QUOTE->
I ran them in virtualbox. Installed a fresh xp, installed antilogger and then installed the keyloggers. <-QUOTE}
Some malware keep themselves quiet in a Virtual Machine and only start working in a real system, but that doesn't bother me.
What bothers me is that support of Zemana claims that each keylogger tested by you, will be killed by ZAL, while you say the opposite. Something isn't right. :)

ChrisP
August 21st, 2008, 02:01 PM
I have Zemana AntiLogger installed. I tested it against Perfect Keylogger. AntiLogger detected Perfect Keylogger and prevented it from working.

Zemana AntiLogger does detect and block Perfect Keylogger. Not tested it against the others, but guess it will work against them as well.

aigle
August 21st, 2008, 02:53 PM
{QUOTE-> zemana failed to stop the keyloggers.

As in keyloggers worked.

antilogger didn't work.

I ran them in virtualbox. Installed a fresh xp, installed antilogger and then installed the keyloggers. <-QUOTE}
U might have done something wrong. Zemana is good against keyloggers. I guess it will be defeated only if u have installed a keylogger with a kernel driver. But if zamana is ON while installing a kernel based keylogger, it catch driver/ service loading, again catching the keylogger.

maymoons
August 21st, 2008, 03:22 PM
zemana cant stable work in virtual machine

ChrisP
August 21st, 2008, 03:32 PM
{QUOTE-> zemana cant stable work in virtual machine <-QUOTE}
Worke fine under PowerShadow.

GES/POR
August 21st, 2008, 04:28 PM
{QUOTE-> U might have done something wrong. Zemana is good against keyloggers. I guess it will be defeated only if u have installed a keylogger with a kernel driver. But if zamana is ON while installing a kernel based keylogger, it catch driver/ service loading, again catching the keylogger. <-QUOTE}

I trust you the most, is it worth the purchase?

aigle
August 21st, 2008, 05:04 PM
Hmmm.. can,t say anything. I tested it for very short time. It intercepts all tests of AKLT including screen reading. But it failed one password reader I think( not sure). For me Comodo does same with many more functions.

But it does has a white list so may be less chatty( i disabled white list during my trial). It also intecrepted phide.exe rootkit physical memory access. Main probelm is that there is no File Protection and pop up alerts are less informative than other HIPS.

Run a trial and see if u like it. It,s almost a full blown HIPS.· Root kit Installations
{QUOTE->
· Thread Context
· Changing Direct Physical Memory Access
· Global Hook Installation
· Remote Thread Creation
· DLL Code Injection
· Kernel Driver Loading
· Program State and Memory Modification
· System Registry Modification <-QUOTE}

http://www.zemana.com/list/list.asp?ktgr_id=445