Prevx SOL and KeySrambler versus Commercial Keyloggers

Discussion in 'other anti-malware software' started by aigle, Oct 22, 2010.

Thread Status:
Not open for further replies.
  1. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    I tried three commercial keylogegrs.

    - Elite Keylogger
    - All in one Keylogger
    - Advanced Keylogger

    http://www.keylogger.org/

    On XP SP2 with IE6, I first installed the keylogger and the PrevxSOL free edition or KeyScrambler and then tested the keylogging.

    KS successfully scrambled the keys against all three of them.

    Prevx SOL successfully stopped elite keylogger from snapshots and keylogging during https session. However All in one Keylogger bypassed Prevx SOL and took snapshots of https session on paypal.com login. Also Advanced Keylogger bypassed Prevx SOL and keylogged the user name and password from paypal.com login page. :mad:

    I did not save any snapshots or i would have posted them too.
     
    Last edited: Oct 23, 2010
  2. kjdemuth

    kjdemuth Registered Member

    Joined:
    Jul 29, 2005
    Posts:
    2,960
    Location:
    Boston, MA
    Did you increase the http setting to max or high? Go to configuration of HTTP. Set it to either high or max. THat should take care of the screen grabbing attacks.
     
  3. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Used all defaults.
     
  4. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Aigle mentioned https, PrevX Safe Online by default sets everything to max when browsing https. So a bit disappointing
     
  5. acr1965

    acr1965 Registered Member

    Joined:
    Oct 12, 2006
    Posts:
    4,954
    can both prevx sol and keyscrambler be used at once?
     
  6. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Why both? One must be enough IMO.
     
  7. SIR****TMG

    SIR****TMG Registered Member

    Joined:
    May 31, 2004
    Posts:
    757
    Keyscrambler good to hear this indeed.:thumb:
     
  8. markedmanner

    markedmanner Registered Member

    Joined:
    Nov 1, 2009
    Posts:
    134
    Like to see these tested against Zemana Antilogger :)
     
  9. moontan

    moontan Registered Member

    Joined:
    Sep 11, 2010
    Posts:
    3,931
    Location:
    Québec
    just download the 15 days trial of Zemana and give it a try.
     
  10. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    This is the key point here - SafeOnline and KeyScrambler can't be used at the same time. You'll need to uninstall KeyScrambler to get proper results for SafeOnline's protection :)
     
  11. Scoobs72

    Scoobs72 Registered Member

    Joined:
    Jul 16, 2007
    Posts:
    1,108
    Location:
    Sofa (left side)
    That's new information. I don't recall this ever being mentioned before. Is it a newly introduced compatibility problem?
     
  12. firzen771

    firzen771 Registered Member

    Joined:
    Oct 29, 2007
    Posts:
    4,815
    Location:
    Canada
    i remember way back wen i used prevx (im sure u remember my unsolvable internet connection issue lol) u said prevx was compatible with keyscrambler, at first it wasnt but u kept releasing new versions that improved its compatibility, or is there a new issue betweent the 2 that cant be resolved?
     
  13. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    No, this has existed since the beginning of SafeOnline. KeyScrambler has similar protection to SafeOnline (although SafeOnline hides keystrokes while KeyScrambler "encrypts" them) but using both on full protection at the same time results in not being able to use your keyboard :) SafeOnline steps out of the way when it detects KeyScrambler as KeyScrambler will be installed and protecting the keystrokes.

    I've tested each of the keyloggers in this post now on 32bit Windows 7 and SafeOnline blocks them on https://www.paypal.com - Elite Keylogger is the more interesting of the three in that it uses a different approach to keylogging than other keyloggers, but the rest are run-of-the-mill.
     
  14. Scoobs72

    Scoobs72 Registered Member

    Joined:
    Jul 16, 2007
    Posts:
    1,108
    Location:
    Sofa (left side)
    Hmmm...really? You suggest otherwise in this post:
    https://www.wilderssecurity.com/showthread.php?t=258095

    I'm not trying to catch anyone out here, just trying to understand. Was the previous belief that it was fully compatible but it's since been discovered that there had been issues all along?
     
  15. firzen771

    firzen771 Registered Member

    Joined:
    Oct 29, 2007
    Posts:
    4,815
    Location:
    Canada
    yes, i remember that as well
     
  16. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    SafeOnline and KeyScrambler are fully compatible in that you can use them alongside each other without problems. SafeOnline does a lot more than just antikeylogging (frankly, antikeylogging is probably one of the smallest features in SafeOnline) and you still receive all of the other protection of SafeOnline when using KeyScrambler as well.
     
  17. moontan

    moontan Registered Member

    Joined:
    Sep 11, 2010
    Posts:
    3,931
    Location:
    Québec
    PrevxHelp:
    i'm getting confused here...
     
  18. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    When SafeOnline and KeyScrambler are installed, KeyScrambler will be the only antikeylogger. If you are trying to test the keylogging protection of just SafeOnline, you can't have KeyScrambler installed as well as SafeOnline will be stepping out of the way for KeyScrambler to protect keystrokes.

    In operation, KeyScrambler would be protecting keystrokes and SafeOnline protects everything else when they're both installed so outside of explicitly testing keylogging, SafeOnline would be fully operational.
     
  19. Scoobs72

    Scoobs72 Registered Member

    Joined:
    Jul 16, 2007
    Posts:
    1,108
    Location:
    Sofa (left side)

    Ok, I think I understand. So assuming Aigle disabled Keyscrambler to test SafeOnline, he didn't know that SafeOnline had 'switched off' its keylogging protections because it had detected Keyscrambler installed...and hence the keylogger was able to capture the keyed input?
     
  20. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Yes, exactly - unfortunately we can't risk trying to determine the state of KeyScrambler's internal configuration because the keylogger protection has to load immediately on bootup and the two drivers will fight each other even if the user-level configuration says it is turned off.
     
  21. SIR****TMG

    SIR****TMG Registered Member

    Joined:
    May 31, 2004
    Posts:
    757
    Even I understand that now. THANK YOU...:thumb:
     
  22. Noob

    Noob Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    6,468
    WOW, it almost looked like a personal attack :D
     
  23. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    @PrevxHelp
    May be my results are different as i used windows xp. I wish you could have tested on XP. Other issue can be the presence of CIS although it was disabled.

    By the way, let me make it clear that i never tested SOL and KS together. It would be unwise to install them together and then test them.
     
  24. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Ok, I have re-tested SOL on fresh snapshot of CTM. No security software installed, just a fresh XP SP2 with IE6, not fully patched though.

    I just tested Advanced Keylogger and it was able to grab my login credentials on paypal login page( https). Prevx SOL did stop the screenshots though.

    I will assume that Al in One Keylogger will be able to take screenshots too but I did not re-test it.
     

    Attached Files:

    • sol.jpg
      sol.jpg
      File size:
      219.4 KB
      Views:
      8
  25. moontan

    moontan Registered Member

    Joined:
    Sep 11, 2010
    Posts:
    3,931
    Location:
    Québec
    i like the concept of KeyScrambler more than anti-loggers solutions (prevx, spyshelter, zemana etc) per se.

    i'm not concerned much with screen capture because the most important part, the password, is always hidden with *****
     
Loading...
Thread Status:
Not open for further replies.