Discussion in 'other anti-malware software' started by Tyrizian, May 19, 2016.
OK, thanks for letting me know. I believe some old anti-keylogging tool also used this nifty method.
@mood At the moment we do not know any software which targets to bypass Ghostpress. So the UAC protected process should be fine.
a) sometimes I get this error message (screenshot enclosed). Version installed is 1.3 build 422 and OS I have installed is Windows 8.1 Pro (x64)
b) One other thing I noticed is after installing Ghostpress, very often I see errors while I type letters from my keyboard. Letters are repeated multiple times as I type in browser / in any other application. I believe this issue is caused by Ghostpress
When I click on the program's website link, I get redirected to a site about Bitcoins...
I guess you have visited the "old" website mentioned in #1
The current website is:
Yes, indeed, thanks!
No updates since march?...
Honestly, I’ve tried it when it was first released, but had problems and stopped following its development.
I guess it was abandoned as well.
Yes, the focus seems to be on other tools now.
Riot Isolator seemed more interesting, but no updates since may.
Recent focus was on SharedScreen and SaMotion only.
By accident i have found a different website of the developer and a new version of Ghostpress which was released some time ago.
Ghost Press v1.4 (July 10, 2018)
A big update for Ghostpress.
+Custom keyboard setup
+Improved delay protection delay calculation
+Ghostpress hooks can no longer be overwritten
+Keyboard layout changes on runtime will be detected
+DPI support added
+Current process icon is now shown
+Disable delay protection for a specific process
+Hidden features: Disabling print key, protecting Tab and Enter, key delay for all unprotected keys
+Integrated ScreenWings module: target window screenshot protection
+Minimum delay between two key events
+Better protection when using Ghostpress without Administrator privilegs
#Protection no longer depends on Explorer.exe
#Delay protection spelling order bug fixed
#Hook overwriting issue fixed
#Compability issues with fullscreen overlays fixed
#Less memory usage by widget
#Close crash fixed
#Widget animation does not show how often you pressed a key anymore
In addition we are working on two completely new security tools and a major update for OW Shredder.
Cool, but can you give a bit more info about the global hooking technique? And wouldn't it be better to protect only certain apps in order to avoid problems? Also, will this protect against keyloggers that were installed before Ghostpress?
Not work on cyrillic keyboard (russian lang not supported)
Your email isn't working on your website, and you don't seem to respond to users here anymore, but I have a bug report for you if you ever get around to reading it.
- Adding FastStone Capture to the white list did not return it's screenshot capture functionality.
- Adding both FastStone Capture and the target app (ex. Sumatra PDF) did not return FastStone Capture's screenshot capture functionality
- The Windows taskbar (via autohide) won't show itself over most apps unless I press the Windows key (FreeCommander, SearchMyFiles, Textpad, Sumatra PDF, etc.) Very annoying. Closing Ghostpress restores function.
- The above issues still occur even AFTER disabling Ghostpress with the widget and without. Also annoying.
In limited testing Ghostpress did seemingly block keystrokes and screenshots, but it's so unfriendly to my desktop environment that I had to remove it.
Ghostpress is made for global protection and usually whitelisting affected software is the way to go. You can selectively disable delay protection or full protection. We do not reveal technical in-depth details. Anyway we recommend verifing it via Anti-Keylogger Tester (AKLT).
Yes, once GP is running all key loggers are meant to fail no matter when they were or will be started.
At the moment we only support latin char sets, but we plan to extend its support in the future. E.g. ÖÜÄ will be protected in v2.1. With v2.* we built an engine which can handle more characters than before.
At the moment there is no screenshot whitelisting, but we have plans to integrate it into our anti-screenshot solution ScreenWings.
The taskbar overlay behavior has something to do with our software functionality. We do not face any issues on our test systems Windows 7 or newer. It might be an issue with another application. It would be great if you contact us via our site and we could send you the last version which should not behave like that or we even find a solution for this problem.
@hsdev problems when typing in wps office from kingsoft (wps presentation) when typing it would spell wps prrsentation instead of presentation, I mean it lags behind and inputs the last word in this case "r"
test same in notepad and all is well
also cannot close the program, on task bar its say acess denied which is good, but no right click close option right now so I dunno how to close it, either it is stuck or i cannot shut it down for a moment (like when I am not browsing),i think i closed it in the past so perhaps it is stuck
please add autostart option to settings instead as -autostart or -ghost tags
messed chrome several times, not sure if it was a virus or ghost presse's fault, when clicking on bookmark folder all window opened as if I clicked middle mouse button instead of left mouse button, all back to normal when exited VM
i highly endorse your project, there are some bugs but its ok
OK cool, I just wondered if "global hooking" is a good way to block other keyloggers, but apparantly it does the job. And it also works in SUA, so you didn't have another choice I guess.
@lucd The bug you face with WPS Presentation is a known bug. The only known application which has the same issue is Telegram for Windows. We analyzed the issue and detected that the keys are successfully received by the program, but it somehow "lags" when you type fast. Anyway we are aware of the issue and trying to fix it as soon as possible.
Ghostpress and ScreenWings can only be closed if you disable its protection. Once you disable the protection you can close it via the "X" button.
Unless you disable its protection and close the application Ghostpress and ScreenWings will start with Windows.
Ghostpress should not affect your mouse behavior. Could you retry and verify that it is not caused by Ghostpress?
@Rasheed187 There are surely different ways to at least partly against against keylogging. We decided for this one, especially due the fact of no Administrator privilegs as requirement (recomended anyway).
@liba What issue do you face?
Update 2.1 is nearly done as we are currently doing our testing. We will post the changelog once published.
@hsdev When minimized to system tray, I'm receiving blackscreen.
@liba Are you testing Ghostpress in a VM?
@liba The public version is currently not officially supporting VM use. Please use Ghostpress on your main system instead.
How do you remove Ghostpress? Can't find a way to do it.
@NiteRanger Simply close Ghostpress and delete its files.
@ghospress causes swap of both keyboard and mouse buttons, I tested this over and over again in chrome + VM
the area with special symbols (@#$%^%&^&) gets swapped with numerical inputs (1,2,3,4,5,6,7)
using screenwings which works OK