Keyscrambler and WSA

[Motherroad]

Originally Posted by ams963

as I've already mentioned 'Encrypts usernames, passwords and credit card numbers' is only for complete users......and ks does that......so essentials users also need ks........

I agree with this. Also I did not hear Prevx say that Keyscrambler was not needed.

[fax]

A kind of heavy lobbying for keyscambler in here, lol

IMO, Prevx is currently not anymore developed (application wise) and soon to be replaced by WSA, so it could make sense to run it with keyscrambler considering it is slowly getting outdated and there may be areas not well covered (e.g. MRG effitas simulator).

For WSA Essential and complete it was said plently of times in different threads that is basically redundant. The piling up of applications covering the same areas is normally not the best strategy to improve your security. You need to look for complementary layers (HIPS, sandbox, AV)

Obviously, no one will force you not to use what you feel like to use. Soooo, you feel more safer with keyscrabler? Then use it!

[Amit]

Originally Posted by fax

Those words are marketing to sell the password manager in "complete". Realtime encryption of passwords, login, etc... is also in "essential". This was already discussed here several times... for example, here

http://www.wilderssecurity.com/showthread.php?t=317122

hmm......marketing gimmick, ay?.......if official site clearly says things and if a user takes those as true and follows......and then finds out the opposite in forum.....I say official site does not hold credibility anymore......

[fax]

Originally Posted by ams963

hmm......marketing gimmick, ay?.......if official site clearly says things and if a user takes those as true and follows......and then finds out the opposite in forum.....I say official site does not hold credibility anymore......

yes, this was already pointed out several weeks ago to Prevhelp (another thread, can't find it now!)... I guess he has no influence on webroot marketing dept.

[Amit]

Originally Posted by fax

yes, this was already pointed out several weeks ago to Prevhelp (another thread, can't find it now!)... I guess he has no influence on webroot marketing dept.

oh well I wasn't gonna use keyscrambler anyway....just wanted to point out ks is needed for essentials and av users........

[fax]

Originally Posted by ams963

oh well I wasn't gonna use keyscrambler anyway....just wanted to point out ks is needed for essentials and av users........

I may sound like a broken record, LOL. But your statement is again not correct. KS may be useful only on WSA AV NOT WSA Essential! Looks like marketing department messages are working well!

[Amit]

Originally Posted by fax

I may sound like a broken record, LOL. But your statement is again not correct. KS may be useful only on WSA AV NOT WSA Essential! Looks like marketing department messages are working well!

I said I wanted to point out....not that I pointed out.....I couldn't because of marketing messages.......you , sound like a broken record? imagine that

[fax]

Great! Clearer, thanks.
Issue solved... hopefully

[Amit]

marketing gimmicks ........fax

[BoerenkoolMetWorst]

About protecting the keystrokes on the logon screen, I added logonui.exe to the protected applications and it worked without issues. However it seems that Windows has protection of it's own as both the Zemana and Spyshelter tools were unable to log the keys(before I applied WSA protection), even not when run as Admin. This was tested on Win 7 32-bit btw.

Just to clear this for me, every time i see a padlock on the WSA icon it means the keystrokes are being encrypted?

[Triple Helix]

Originally Posted by rolarocka

Just to clear this for me, every time i see a padlock on the WSA icon it means the keystrokes are being encrypted?

This is what Joe said so it's very clear!

Originally Posted by PrevxHelp

No, WSA does the same with encrypting keystrokes from kernel mode in realtime, although it goes a step above just encrypting to completely drop the keystrokes from the OS after zeroing them out to prevent any snooping.

Originally Posted by PrevxHelp

WSA will encrypt/protect keystrokes for the configured applications in the Protected Applications list (browsers by default, but other applications can be added). You should be able to add LogonUI.exe to the list to protect its keystrokes as well. We don't protect every keystroke every time just because of the potential for stray issues - some applications do require their keystrokes to be read (i.e. Synergy, which shares keystrokes across PCs).

WSA will of course block known keyloggers with the antimalware protection so you're only ever exposed to unknown keyloggers running on your PC.

HTH,

TH