Ghostpress - Free AntiKeylogger

Discussion in 'other anti-malware software' started by Tyrizian, May 19, 2016.

  1. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    15,193
    Location:
    The Netherlands
    OK, thanks for letting me know. I believe some old anti-keylogging tool also used this nifty method.
     
  2. hsdev

    hsdev Developer

    Joined:
    May 20, 2016
    Posts:
    101
    @mood At the moment we do not know any software which targets to bypass Ghostpress. So the UAC protected process should be fine.
     
  3. Rafales

    Rafales Registered Member

    Joined:
    Feb 20, 2013
    Posts:
    61
    Location:
    Earth
    @hsdev
    a) sometimes I get this error message (screenshot enclosed). Version installed is 1.3 build 422 and OS I have installed is Windows 8.1 Pro (x64)
    b) One other thing I noticed is after installing Ghostpress, very often I see errors while I type letters from my keyboard. Letters are repeated multiple times as I type in browser / in any other application. I believe this issue is caused by Ghostpress
     

    Attached Files:

  4. liba

    liba Registered Member

    Joined:
    Jan 21, 2016
    Posts:
    344
    any news?
     
  5. fblais

    fblais Registered Member

    Joined:
    Jul 31, 2008
    Posts:
    1,300
    Location:
    Québec, Canada
    When I click on the program's website link, I get redirected to a site about Bitcoins...
    Strange...
     
  6. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    42,809
    I guess you have visited the "old" website mentioned in #1
    The current website is:
     
  7. fblais

    fblais Registered Member

    Joined:
    Jul 31, 2008
    Posts:
    1,300
    Location:
    Québec, Canada
    Yes, indeed, thanks!
    No updates since march?...

    Honestly, I’ve tried it when it was first released, but had problems and stopped following its development.
    I guess it was abandoned as well.
     
  8. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    42,809
    Yes, the focus seems to be on other tools now.
     
  9. fblais

    fblais Registered Member

    Joined:
    Jul 31, 2008
    Posts:
    1,300
    Location:
    Québec, Canada
    Riot Isolator seemed more interesting, but no updates since may.
    Recent focus was on SharedScreen and SaMotion only.
     
  10. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    42,809
    By accident i have found a different website of the developer and a new version of Ghostpress which was released some time ago.

    Ghost Press v1.4 (July 10, 2018)
    Website
     
  11. hsdev

    hsdev Developer

    Joined:
    May 20, 2016
    Posts:
    101
    A big update for Ghostpress.

    Version 2.0
    +New UI
    +Custom keyboard setup
    +Improved delay protection delay calculation
    +Ghostpress hooks can no longer be overwritten
    +Keyboard layout changes on runtime will be detected
    +DPI support added
    +Current process icon is now shown
    +Disable delay protection for a specific process
    +Hidden features: Disabling print key, protecting Tab and Enter, key delay for all unprotected keys
    +Integrated ScreenWings module: target window screenshot protection
    +Minimum delay between two key events
    +New license
    +Better protection when using Ghostpress without Administrator privilegs
    #Protection no longer depends on Explorer.exe
    #Delay protection spelling order bug fixed
    #Hook overwriting issue fixed
    #Compability issues with fullscreen overlays fixed
    #Less memory usage by widget
    #Close crash fixed
    #Widget animation does not show how often you pressed a key anymore

    In addition we are working on two completely new security tools and a major update for OW Shredder.
     
  12. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    15,193
    Location:
    The Netherlands
    Cool, but can you give a bit more info about the global hooking technique? And wouldn't it be better to protect only certain apps in order to avoid problems? Also, will this protect against keyloggers that were installed before Ghostpress?
     
  13. emil emil

    emil emil Registered Member

    Joined:
    May 5, 2016
    Posts:
    28
    Not work on cyrillic keyboard (russian lang not supported)
     
  14. HIPSter

    HIPSter Registered Member

    Joined:
    Feb 15, 2008
    Posts:
    31
    Your email isn't working on your website, and you don't seem to respond to users here anymore, but I have a bug report for you if you ever get around to reading it.

    - Adding FastStone Capture to the white list did not return it's screenshot capture functionality.
    - Adding both FastStone Capture and the target app (ex. Sumatra PDF) did not return FastStone Capture's screenshot capture functionality
    - The Windows taskbar (via autohide) won't show itself over most apps unless I press the Windows key (FreeCommander, SearchMyFiles, Textpad, Sumatra PDF, etc.) Very annoying. Closing Ghostpress restores function.
    - The above issues still occur even AFTER disabling Ghostpress with the widget and without. Also annoying.

    In limited testing Ghostpress did seemingly block keystrokes and screenshots, but it's so unfriendly to my desktop environment that I had to remove it.
     
  15. hsdev

    hsdev Developer

    Joined:
    May 20, 2016
    Posts:
    101
    @Rasheed187
    Ghostpress is made for global protection and usually whitelisting affected software is the way to go. You can selectively disable delay protection or full protection. We do not reveal technical in-depth details. Anyway we recommend verifing it via Anti-Keylogger Tester (AKLT).
    Yes, once GP is running all key loggers are meant to fail no matter when they were or will be started.

    At the moment we only support latin char sets, but we plan to extend its support in the future. E.g. ÖÜÄ will be protected in v2.1. With v2.* we built an engine which can handle more characters than before.

    @HIPSter We had a temporary issue with the e-mail protection code on our website. It should work normally now if you have Javascript enabled.
    At the moment there is no screenshot whitelisting, but we have plans to integrate it into our anti-screenshot solution ScreenWings.

    The taskbar overlay behavior has something to do with our software functionality. We do not face any issues on our test systems Windows 7 or newer. It might be an issue with another application. It would be great if you contact us via our site and we could send you the last version which should not behave like that or we even find a solution for this problem.
     
  16. lucd

    lucd Registered Member

    Joined:
    Jan 30, 2018
    Posts:
    746
    Location:
    Island of Woman
    @hsdev problems when typing in wps office from kingsoft (wps presentation) when typing it would spell wps prrsentation instead of presentation, I mean it lags behind and inputs the last word in this case "r"
    test same in notepad and all is well
    also cannot close the program, on task bar its say acess denied which is good, but no right click close option right now so I dunno how to close it, either it is stuck or i cannot shut it down for a moment (like when I am not browsing),i think i closed it in the past so perhaps it is stuck
    please add autostart option to settings instead as -autostart or -ghost tags
    messed chrome several times, not sure if it was a virus or ghost presse's fault, when clicking on bookmark folder all window opened as if I clicked middle mouse button instead of left mouse button, all back to normal when exited VM

    i highly endorse your project, there are some bugs but its ok
    best
     
  17. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    15,193
    Location:
    The Netherlands
    OK cool, I just wondered if "global hooking" is a good way to block other keyloggers, but apparantly it does the job. And it also works in SUA, so you didn't have another choice I guess.
     
  18. hsdev

    hsdev Developer

    Joined:
    May 20, 2016
    Posts:
    101
    @lucd The bug you face with WPS Presentation is a known bug. The only known application which has the same issue is Telegram for Windows. We analyzed the issue and detected that the keys are successfully received by the program, but it somehow "lags" when you type fast. Anyway we are aware of the issue and trying to fix it as soon as possible.

    Ghostpress and ScreenWings can only be closed if you disable its protection. Once you disable the protection you can close it via the "X" button.
    Unless you disable its protection and close the application Ghostpress and ScreenWings will start with Windows.

    Ghostpress should not affect your mouse behavior. Could you retry and verify that it is not caused by Ghostpress?


    @Rasheed187 There are surely different ways to at least partly against against keylogging. We decided for this one, especially due the fact of no Administrator privilegs as requirement (recomended anyway).


    @liba What issue do you face?


    Update 2.1 is nearly done as we are currently doing our testing. We will post the changelog once published.
     
  19. liba

    liba Registered Member

    Joined:
    Jan 21, 2016
    Posts:
    344
    @hsdev When minimized to system tray, I'm receiving blackscreen.
     
  20. hsdev

    hsdev Developer

    Joined:
    May 20, 2016
    Posts:
    101
    @liba Are you testing Ghostpress in a VM?
     
  21. liba

    liba Registered Member

    Joined:
    Jan 21, 2016
    Posts:
    344
    Yes VM.
     
  22. hsdev

    hsdev Developer

    Joined:
    May 20, 2016
    Posts:
    101
    @liba The public version is currently not officially supporting VM use. Please use Ghostpress on your main system instead.
     
  23. NiteRanger

    NiteRanger Registered Member

    Joined:
    Nov 15, 2016
    Posts:
    651
    Location:
    Far East
    Hi @hsdev

    How do you remove Ghostpress? Can't find a way to do it.

    Thanks
     
  24. hsdev

    hsdev Developer

    Joined:
    May 20, 2016
    Posts:
    101
    @NiteRanger Simply close Ghostpress and delete its files.
     
  25. lucd

    lucd Registered Member

    Joined:
    Jan 30, 2018
    Posts:
    746
    Location:
    Island of Woman
    @hsdev
    @ghospress causes swap of both keyboard and mouse buttons, I tested this over and over again in chrome + VM
    the area with special symbols (@#$%^%&^&) gets swapped with numerical inputs (1,2,3,4,5,6,7)


    using screenwings which works OK
     
    Last edited: Nov 3, 2019
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.