Standalone firewall/keystroke-log-stopper?

[Keyz316]

Hey guys -

I work as part of an IT staff at a local company, and found the other day that one of the systems I was fixing had a "keystroke logger" program installed on it (the workstation was used by a temp at the office, so I can see why).... problem is - having not known about the logger, I proceeded to login to my email account, and my forum while sitting at the computer (waiting for SP3 to finish installing) and consequently my passwords/etc were logged. Soon after I found out about the logger, since I had a hunch about a certain process in Task Manager.... but then had to go through the trouble of "tracking and accessing" those logfiles stored on one of the servers to clean out my passwords and stuff (though I later changed them anyhow).

Well point of all that haha.... I'm curious if there might be a small program I could get that could autorun off a CDROM (no installation) that would do a few things -- act as a basic firewall, stopping in/out data (i.e. keystroke logging to the network, other admins logging in to the same system remotely, etc), and also scanning for known keystroke loggers and other spy programs (perhaps even some heuristic scanning too). Then I will know if the system I'm working on is being watched, and will know not to let out any private data. I've found a good number of programs that do those things - but nothing yet that I could run directly from a CDROM.

Thanks!

[Paul Wilders]

Hi Keyz,

Well, since we're talking company pc(s) here' the most obvious thing to do IMHO is contacting your employer. Since these pc's are his, it's in essence up to him wether or not to install keyloggers or not.

regards.

paul

[Keyz316]

That's true - and they are supposed to tell me which are monitored... though they are in the habit of "forgetting" to tell me until "after" I figure it out myself (I unfortunately wasted nearly 4 hours the first time, since the name of the logger they were using was the same filename as is used by a very nasty virus). I'd like to just be able to pop in my autorun CDROM, have the little program come up and tell me if it's monitored.

Peace.

[Jooske]

Now you know it's a search for that specific name on the computer or is it more complicated?

[Keyz316]

They appear to be trying different kinds of software so I can't be sure that the filename I know is always what to look for. Plus, I would rather pop in a CD and have it tell me, than have to open task manager on every system I login to every day and look through all of the processes everytime hehe
I'm still interested in the standalone firewall thing as well.

Anyhow hope you can help.

[FanJ]

Hi,

Have a look at SpyCop; here is the link to their FAQ page:
http://spycop.com/faq.htm

It can be run, if you like to do so, from a ZIP-diskette.

That being said I would like to point at Paul's posting about being at a company's PC, earlier in this thread.

[Jooske]

It's for you not possible from one central location to manage the whole network? Scanning for security matters and such?
So you want more then detection, in fact you're looking for bypassing without uninstalling the tool or stopping logging temporary, that kind? Is it possible to detect quickly and run from a diskette or cd-rom something like SpybotS&D or does that need install? Or it will be bring your own laptop to be sure.
I'm sure there is a market for such detection tools: see the bunches of spam emails we get: the one for buying/installing the spy-software, ("look if your spouse is cheating!") and the other to detect such spy software installed, in various cases from the same companies.
Not sure how far they are with m-o-o-t which runs from cd-rom; might be your solution.