Ghostpress - Free AntiKeylogger

Discussion in 'other anti-malware software' started by Tyrizian, May 19, 2016.

  1. Tyrizian

    Tyrizian Registered Member

    Joined:
    Apr 26, 2012
    Posts:
    2,806
    I thought this looked interesting

    Screenshot (From official website):
    GP.gif


    For more information, click here for the official website...

    Ghostpress featured at SnapFiles...

    NOTE: Scan results from VT, Zemana and Webroot all show a clean file. (for those wondering).
     
    Last edited: May 19, 2016
  2. Tyrizian

    Tyrizian Registered Member

    Joined:
    Apr 26, 2012
    Posts:
    2,806
    An invitation has been sent to the developer, in hopes that he or she will join us here on Wilders.
     
    Last edited: May 19, 2016
  3. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    2,285
    ERP = Blocked [Invalid or Revoked Certificate]
    MD5 = 44D9054CE4AB1C47B499FD980BFEDE95
     
  4. Tyrizian

    Tyrizian Registered Member

    Joined:
    Apr 26, 2012
    Posts:
    2,806
    I checked the certificate and it is invalid here too...imo this needs to be looked at.

    It looks to be a product that does need improvements, but it does seem to work and without any pulling on system resources.

    Still hoping we can get the developer in here, it would be nice to see this one improve...I feel that it might have some potential.
     
    Last edited: May 19, 2016
  5. mood

    mood Registered Member

    Joined:
    Oct 27, 2012
    Posts:
    900
    The executable is self-signed, not signed from a known vendor. Therefore it's shown as invalid.

    And if i look in the review from findmysoft (mentioned on the homepage):
     
  6. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    2,285
    FWIW~ NortonDNS has issue with findmysoftdotcom while ComodoDNS has issue with snapfilesdotcom and
    findmysoft offers dated ghostpress version
     
    Last edited: May 19, 2016
  7. Tyrizian

    Tyrizian Registered Member

    Joined:
    Apr 26, 2012
    Posts:
    2,806
    The same DNS providers that give download.com (CNET) a clear report, but yet uBlock Origin blocks it.

    My point is, these DNS providers or any service at that don't always provide the best decisions when it comes to websites.

    I can't speak for findmysoft, but I can for SnapFiles, which is confirmed a safe site.

    May I ask, why post DNS results? It really has nothing to do with the program itself.

    If it's a problem with outdated versions, etc., That is all on the download provider.
     
    Last edited: May 19, 2016
  8. mood

    mood Registered Member

    Joined:
    Oct 27, 2012
    Posts:
    900
    Quick test:
    Anti-KeyLogger Tester (AKLT): No keys are logged
    Anti-KeyLogger Tester (AKLT) (as administrator): in 2 tests keys are logged.
    Zemana Keylogger Simulation Test: No keys are logged
    Edit: I found a bug. If "Animated" is disabled in the options and right after that a key is pressed in an application, Ghostpress crashes (Unhandled exception)
     
    Last edited: May 19, 2016
  9. Tyrizian

    Tyrizian Registered Member

    Joined:
    Apr 26, 2012
    Posts:
    2,806
    Nice testing @mood :thumb:

    Thanks for doing that.
     
  10. hsdev

    hsdev Registered Member

    Joined:
    May 20, 2016
    Posts:
    25
    @Tyrizian @mood
    Actually two people contacted me to take part on this discussion. First of all I want to thank you for that.

    We ensure that our software gets no false detection. Additionally we sign the executable with our own certificate to proof the origin of the executable. If you do not trust the download sites, just go on our page and use the direct download.

    Any improvements you would like to have can be mentioned here. Also you can ask any question you want to ask!

    We got the bug report with the disabled option as well and we are working on it.
     
  11. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    Uses dotNet. Bah!
     
  12. trott3r

    trott3r Registered Member

    Joined:
    Jan 21, 2010
    Posts:
    830
    Location:
    UK
    any comments on whether it is more effective than zemana ?
     
  13. Tyrizian

    Tyrizian Registered Member

    Joined:
    Apr 26, 2012
    Posts:
    2,806
    Thank you for stopping by and being a part of our community, it's nice to have you here.

    So, Welcome to Wilders

    I see potential in your product and I definitely look forward in seeing it's progress.
     
  14. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    2,285
    how does keylogger (low level) sneak on my machine...
     
  15. mood

    mood Registered Member

    Joined:
    Oct 27, 2012
    Posts:
    900
    1) A tray-icon would be nice
    2) The desktop widget is a little bit too big :cautious: (maybe an additional option: [X] Use small desktop widget) ?
    2a) Can the desktop widget be displayed without a window-frame? (frameless window)

    One more bug: After switching with Alt+Tab to the Ghostpress-Window it looks like this:
    (Windows 8 x64)
    Ghostpress_alt+tab.png
    i have to add, that shortly after that i can't swich to the window anymore.
    a) Alt+Tab = It's shown in the list (with a correct layout), but i can't switch to it
    b) Rightclick Desktop Widget + "Show Ghostpress" = the main window is not shown too
     
  16. daman1

    daman1 Registered Member

    Joined:
    Mar 27, 2009
    Posts:
    773
    Location:
    MICHIGAN,USA
    Yes, free or paid?
     
  17. mood

    mood Registered Member

    Joined:
    Oct 27, 2012
    Posts:
    900
    @hsdev
    One bigger bug:
    The "Space"-Key is not recognized in the filemanager Total Commander (x64) after starting Ghostpress (Space = selecting of a file in the filelist)

    I have two filemanagers running. One is started elevated and the other one is started with normal user rights.
    1) Starting of Ghostpress
    b) Switching to Total Commander = no selecting of files possible
    c) Switching to Total Commander (elevated) = Space is accepted


    2) Starting of Ghostpress (elevated)
    b) Switching to Total Commander = no selecting of files possible
    c) Switching to Total Commander (elevated) = no selecting of files possible

    These Options were enabled:
    [X] Enable desktop widget
    [X] Process protection
    [X] Prevent hook overwriting
     
  18. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    8,055
    Location:
    The Netherlands
    Perhaps you can tell more about the method that's being used to block keyloggers. Does it try to interfere with hook and message based keyloggers, without actually blocking global hooks? Other questions: what is the purpose of the "prevent hook overwriting" option, and does Ghostpress perform API hooking? And why does it want to receive incoming traffic?
     
  19. itman

    itman Registered Member

    Joined:
    Jun 22, 2010
    Posts:
    2,969
    Location:
    U.S.A.
    Appears to be 32 bit code to me?
     
  20. trott3r

    trott3r Registered Member

    Joined:
    Jan 21, 2010
    Posts:
    830
    Location:
    UK
    It's paid for version
     
  21. ald4r1s

    ald4r1s Registered Member

    Joined:
    Apr 8, 2013
    Posts:
    51
    So what exactly is the reason to use this program over spyshelter free? This does not look too trustworthy.
     
  22. ArchiveX

    ArchiveX Registered Member

    Joined:
    Apr 7, 2014
    Posts:
    1,018
  23. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    8,055
    Location:
    The Netherlands
    SS and Zemana Free use "Keystroke Encryption". Ghostpress uses a less advanced but apparently still quite effective method. And Ghostpress doesn't need to be installed, so you can use it on other non-trusted machines. I do hope that the developer can clarify a few things about its inner workings.

    https://www.spyshelter.com/keystroke-encryption/
     
  24. hsdev

    hsdev Registered Member

    Joined:
    May 20, 2016
    Posts:
    25
    First of all the notice with all bugs is done. Currently we are working on all bugs and adding features and languages. Different widget styles are already added.
    Would anyone be interested in different widget colors?

    The anti hook overwriting prevents newly started low level hooks to be overwritten and stop working with the protected processes.

    Ghostpress catches your key presses and "eats them". Then the key is transmitted to the process which should get they key and not any third party process like a keylogger.

    It does not require any administrator permission, it is portable and does not change any system settings.
     
  25. ichito

    ichito Registered Member

    Joined:
    Jan 14, 2011
    Posts:
    1,486
    Location:
    Poland - Cracow
    OK...looks promising so I tested it especially that it's in my native lnaguage - Polsih. Two things I noticed in short time
    - first...why Gostpress just after launching executable receives incoming packets from the net
    160526180728_1.jpg
    - second...although interface of app is in Polish it doesn't support Polish specific fonts...instead of numbers it shows real fonts e.g. "ęóąśł" on screenshot from Firefox
    160526181434_3.jpg
     
Loading...