What is your security setup these days?

OK I see, didn't know about this. I assumed that those features would stay enabled, even when you install a third party AV.

It's probably for the best, because I was shocked at how bad McAfee's performance was. And yes, The PC Security Channel was a lot more fun back in the days, it's a bit boring right now.

 

OK cool, didn't know you were Kaliban. I agree that SpyShelter is not good enough yet on Windows 11. The problem is that there aren't that many alternatives, perhaps only Comodo Firewall and I saw this new HIPS named iDefender, hopefully it's any good, I will open a new topic about it.

But doesn't Fort Firewall also use a driver?

This is indeed a bit weird, perhaps you can also check out TinyWall, which isn't based on the Windows Firewall. Perhaps you guys have discovered a flaw in the Windows Filtering Platform? Another option is that KeyScrambler is indeed making use of BITS.

https://en.wikipedia.org/wiki/Windows_Filtering_Platform

 

According to Fort Firewall GitHub webpage https://github.com/tnodir/fort it has own kernel driver, based on Windows Filtering Platform (WFP) and according to Fort Firewall FAQs https://github.com/tnodir/fort/wiki/FAQ it can run with or without Windows Firewall

 

SphinxSoft Windows 11 Firewall Control has its own driver too but I don't know if it's based on Windows Filtering Platform (WFP).
The GitHub webpage https://github.com/Windows11FirewallControl/Windows11FirewallControl doesn't mention WFP but it could use it anyway, I don't know.

 

OK I see, the same goes for TinyWall. I think I will install KeyScrambler and do some testing, I will also try it with SpyShelter Firewall 12 on Windows 10.

BTW, isn't it strange that KeyScrambler still works just fine on Windows 11, while SpyShelter 15 can't offer this keystroke encryption feature? Even HitmanPro.Alert has such an feature.

 

According to TinyWall features page https://tinywall.pados.hu/features.php it doesn't install any driver or kernel component so I presume it uses Windows Filtering Platform.

 

Wow, my bad. I really thought that TinyWall installed a driver. I have just checked it with AutoRuns, and I don't see any driver.

 

Yes, as you probably remember from the SpyShelter's thread about keystroke encryption, we talked about KeyScrambler and I can confirm that on my Windows 11 24H2 latest build 26100.6584, the latest KeyScrambler version, 3.18, works perfectly fine even if it was released on 15th August 2023. A few months ago I tested its effectiveness with the tool you suggested to me in SpyShelter's thread https://www.snapfiles.com/get/antikeyloggertester.html . It's old testing software but it's seems it's the only anti-keylogger tester available around. KeyScrambler passed all tests. HitmanPro.Alert had some issues with keystroke encryption in Windows 11 24H2 https://www.wilderssecurity.com/thr...iscussion-thread.324841/page-683#post-3229854 and after that post the software wasn't updated as the latest HitmanPro.Alert version is dated 3rd March 2025 https://www.hitmanpro.com/en-us/whats-new/hitmanpro.alert so maybe that issue hasn't been resolved yet.
In conclusion, as far as I know, it seems that KeyScrambler 3.18 is the only keystroke encryption software that works fine in Windows 11 24H2.

 

I've double checked the Keyscrambler update: two TCP outside connections blocked to port 80, not accepted.

@moredhelfinland Can you please show a screenshot of those 2 allowed connections? Are you sure that Action is Allow, not Block?

Keyscrambler shows a message that you're using latest version on any error.

E.g. I've disabled a network adapter and checked for Keyscrambler update - it again showed that success message about latest version.

 

My Security Setup
↓
Backup, Backup, Backup

 

Hello,
on my system I got 2 blocked outbound connection to port 443 instead. How could it be possible ?

What is your security setup these days?

 

So after a update check KeyScrambler shows the same message even if there isn't any Internet connection active ? This explains all, then.
Rasheed187 suspected this weird behavior as he suggested to me to disable my Internet connection but I preferred not to do it.

What is your security setup these days?

 

Yes correct, it was a false alarm. KeyScrambler always says ''this is the latest version'' even when there is no internet connection. I have checked it with Process Monitor, and the connection is blocked by TinyWall.

I also didn't see any network activity in SpyShelter's network monitor, not even from svchost.exe, in other words, all firewalls correctly block KeyScrambler from connecting out. The only way apps can bypass firewalls is via BITS and code injection.