New keylogger tests from Zemana

http://www.zemana.com/list/list.asp?ktgr_id=413

Hmmm... It,s interesting. Much failure.

CFP

Key Logger Simulation Test - - - - - PASS
Screen-Logger Simulation Test - - - PASS
Webcam Logger Simulation Test - - FAIL
Clipboard Logger Simulation Test - - FAIL
SSL Logger Simulation Test - - - - - POC not Available so far

EQSecure

Key Logger Simulation Test - - - - - FAIL
Screen-Logger Simulation Test - - - FAIL
Webcam Logger Simulation Test - - FAIL
Clipboard Logger Simulation Test - - FAIL
SSL Logger Simulation Test - - - - - POC not Available so far

GesWall

Key Logger Simulation Test - - - - - FAIL PASS
Screen-Logger Simulation Test - - - FAIL
Webcam Logger Simulation Test - - FAIL
Clipboard Logger Simulation Test - - FAIL
SSL Logger Simulation Test - - - - - POC not Available so far

Older thread is here.

https://www.wilderssecurity.com/showthread.php?t=204941

 

Hi,

Process Guard v 3.410 can block these tests.

 

Test two.

 

Test three.

 

Test four.

 

For those who are interested,

I personally tested DefenseWall v2.45 against three of the four available Zemana security tests. The results are below.

Key-Logger Simulation Test.........PASS(*Note: Pop-up notification allowed me to terminate the attempt on the spot.)
Screen-Logger Simulation Test.....PASS(*Note: Silently blocked attempt.)
WebCam-Logger Simulation Test..?(*Note: I was not able to test because I do not have a webcam.)
Clipboard-Logger Simulation Test..PASS(*Note: Retested. Pop-up notification allowed me to terminate the attempt on the spot. Please take a look at the following link for instructions on how to properly conduct this test - https://www.wilderssecurity.com/showpost.php?p=1303569&postcount=40 )


Peace & Gratitude,

CogitoErgoSum

 

@ the mul

It,s not an execution test. Any HIPS can do what PG is doing. Allow the test to run and then see if PG intercepts the actula logging attempt.

 

@the mul: you must allow the execution of the software and then see if PG block the loggers.

EDIT: oups, aigle beat me on this

 

That,s good. Anyone can test WebCam test with DW?

 

Hi aigle,

I have allowed PG to run the keylogger test and outpost pro 2009 blocked this test.

 

Here is the result after blocking the test with outpost pro firewall 2009.

 

That,s a PASS indeed for Outpost FW.

 

Tested..........It's a fail.

 

What about other test from Zemana against OP (not just first keylogg)?
Screen logger and Clipboard logger will be interesting to see against OP...

 

At least Defensewall passed 2 of 4. Look at geswall god it failed bad

 

SSM 2.4.0.621

Key Logger Simulation Test - - - - - PASS
Screen-Logger Simulation Test - - - FAIL
Webcam Logger Simulation Test - - FAIL
Clipboard Logger Simulation Test - - FAIL
SSL Logger Simulation Test - - - - - POC not Available so far

 

Aigle thanks once again for the testing great work.

 

How does Outpost 2009 do against the other tests?

 

it failed all these tests

 

@CogitoErgoSum I tested DW version 2.45 on default settings. My results are a bit different.

Key-Logger Simulation Test......... DW gave keylogging warning with option to termiante the keylogger but no way to just block the keylogging
Screen-Logger Simulation Test..... Fail
WebCam-Logger Simulation Test... Fail
Clipboard-Logger Simulation Test.. DW gave keylogging warning with option to termiante the clipbaord logger but no way to just block the clipboard logging.

 

Has anyone tried this with Mcafee to see if it can block this as well?

 

SSM 2.4.0.621: Same results here (but no webcam)

DW v2.45

Key Logger Simulation Test - - - - - PASS
Screen-Logger Simulation Test - - - PASS
[ Webcam Logger Simulation Test - - no webcam ]
Clipboard Logger Simulation Test - - FAIL

 

Doesn't Outpost at least pass the Key Logger Simulation Test, based on the screenshot above?

 

Ok some confusion Screen logger passed from your testing,for some others it failed.strange in consistent results, configuration perhaps.

 

They refused to give me any POC for this. But I think I have found two POCs( not sure) so I tried them.

!- SIW.exe from

http://www.gtopala.com/

Run and go to Tools> Eureka and follow the pictures.

2- Sownload Revelation from here.

http://snadboy.com/

And follow the pictures;

Results: CFP, GW, DW, OA free, SafeSpace all passed
EQS failed with revelation and passed with SIW