SSM failing keylogger test

I have been playing around with ProSecurity and SSM and decided in the end I preferred SSM.

I have now come across in another thread about Martin's Undetectable Keylogger which SSM fails. It does alert about the program launch. That could be any expected program so it is allowed. Next it warned about the Keylogger hooking on and that was blocked, however the K/L program still worked and capture the key/mouse actions.

Running it a second time it failed to detect the keylogging.

Anyone else have any experience with this and wonder how ProSecurity reacts to it?

 

I just test your problem for ProSecurity. PS can detect this program from lunch and this type of keylogger can been detected and blocked in the next version(v1.22).

 

Hi,folks: Just run the test w/ AVG AS (formerly Ewido) plus, the so called undetectable becomes a visible and detectable, and eliminated right away before my bare eyes. AVG AS plus this time.

 

Look through your process list. Remove Martin's undetectable keylogger. Check if learning mode is off. Disconnect the user interface of SSM with the paranoid option. Try again.

I ran the test with the combo SSM + DefenseWall. So I do not know whether SSM alone protects it.

 

I had already done that. Removed Martin and ran again. It notified the program launch but fail to notify about the keylogger this time.

 

Are u using full version of SSM?

 

It,s nothing great if Ewido detected it by signature( that I suspect to be the case). What is the pop up from Ewido in this case?

 

Yes - version 2.1.15.592, not beta

 

This keyloger has been discussed on their forum and it would have been detected. U should post on their forum.

 

Just d/l the latest beta from SSM and that detects it but not until you click outside the box - so don't know what that means.

 

As I said it is best to post on their forum
But as I know it,s Ok if it detects outside clicks. I read some explaination about this but now I don,t remember.

https://syssafety.com/forum/viewtopic.php?t=302&highlight=keylogger

 

I´m using the freeware version and it does not alert me about hooks, but I believe the Pro version should detect it with the "low level keyboard access filter". But I´m not sure if it´s a real threat since it didn´t seem to be able to monitor my keystrokes.

 

Why? What is blocking it?

 

Well I guess nothing is blocking it but it still does not work. I will test again.

 

It does work now, so something went wrong, pretty nifty tool, more apps should protect against this method IMO.