Keyloggers

There is a thread running elsewhere on Wilders about Keyloggers. I know PG stops them but in the thread it said not many can stop them at kernel level, in particular "ELITE Keylogger"

I have the paid version of PG and wonder if it can stop this type.

 

sorry i dont think it can

 

I guess that something has to execute before the keylogger can do its work, so PG should stop it.

 

Thanks

So we have a 50/50 split. Is there any test I can run to see for myself.

I did try downloading the Elite Keylogger and Avast immediately through it out. Whether or not that is a true test I do not know.

 

I just downloaded Elite keylogger and PG blocked its installation.

First I had to allow the installation file to run (ek_setup.exe). Then I had to allow windump.exe to run twice (i.e. that's 3 alerts I had to ignore) and then I got a message saying "Error while installing Elite Keylogger". I checked PG log and found that windump.exe was blocked from creating a driver/service named usbkbd.

HTH

 

That's good to know. So we don't need to bother with this other program that is being touted at the moment. PG does a lot more and at a better price - unless anyone knows different.

 

Absolutely it can ! PG works at the kernel level and CAN stop them cold ! Unless something has changes in the last few months .?

 

Thanks - I can save my pennies

 

I see that the help file in 3.2 does address keyloggers or maybe did not see it before.

The second question is about HIPS. Does or will PG address that intrusion?

 

Process Guard is a HIPS.

 

Thanks. That is what I have been trying to find out and could not see the information anywhere.

When I bought PG I did wonder if I had done the right thing, but more and more it seems to cover instances that other programs are just specialising in.