Zemana AntiLogger – Free Licenses Give Away

Tried the following genuine keyloggers against Zemana:
SpytechSpyagent Stealth Edition
All In One Keylogger
These are considered the best two commercially available keyloggers, they both rank above Spector 2010, couldn't test against Spector - no trial downloads
Zemana detected the installation process of both keyloggers.
Cleaned up and rebooted to eliminate all traces (Deep Freeze installed)
Shut down Zemana and installed All In One Keylogger, restarted Zemana and started browsing - no reaction from Zemana at all.
Cleaned up and installed Spytech Spyagent - restarted Zemana - again no reaction
Tried the same process/sequence with OA++ and OA reacted immediately to both when it was restarted - didn't have to start typing, it simply detected the presence of the keyloggers.

 

well as u can see with the red alert and virus name with !K at the end, it was the AV part of OA that detected it, not the HIPS...

 

Thanks for running these tests. Does the "Stealth Edition" part of SpytechSpyagent mean that it's using rootkit-like activity to stealth itself from Zemana? Even if it's process is stealthed, shouldn't Zemana still be able to detect the actual keylogging?

 

Hi,

firzen, all Zemana tests are trusted by OA white list so you have to launch them once the untrust them and load them again to really test OA's keylogging detection or you can deactivate OA internal whitelist and OA request to OASIS from Program Guard' options.

I tested Clipboad & Keyboard & Screen loggers and OA detected keylogging behaviour and blocked them (if you choose to block of course)

Regards,

MaB

Sorry Wilders staff, i'm off topic

 

Hmm.. it,s signature based detection by Antivirus componenet of OA. Nothing special IMO.

 

Today is the last day of the deal, though choice to download or not

In other news Zemana's server has been attacked by bots: http://billmullins.wordpress.com/2010/01/31/zemana-antilogger-server-attacked-by-bots/

 

How does Zemana run with Threatfire and Defensewall?

 

Hi Ibrad,

I can't speak for ThreatFire but I have been running Zemana next to DefenseWall for 3 days now and have not seen any issues.

 

i know that it does, i mentioned that earlier in this thread as well, i was just saying the alert in the screenshot only shows that OA's AV detected it, not its HIPS. (this only relates to the screenshot)

 

the online armor antivirus engine it's from A-Square

 

yep yep

 

i tested it againts a rootkit(sdra64 both Online armor and winpatrol detected it in real time)

 

i tested those in my pc and Zemana successfully detected and terminated those Keyloggers

 

Thanks Nikanth and Dark Star for the testing. Could have been some conflict or software incompatibility with DS's testing.

 

Strange, did you have Zemana in Default or Expert settings - I had it in Default.
Perhaps if you had it in Expert settings the fact that the Zemana white list was inactive made the difference.

 

don't know why zemana detects sware-iron as a threat,also 1 instance of sandboxie.
even when uninstalling firefox. ..??

 

Tried it again this morning with the AV component of OA disabled/shut down. This is now simply an OA HIPS detection:
The AV component of OA does not scan and detect on its own, if OA HIPS detects a suspect/suspicious file it then uses the AV to confirm and if possible identify the threat, as happened in my original screenshot.
On both of these pop-ups from OA HIPS I answered allow and there was a secondary pop-up asking if I really wanted to proceed. I them blocked them.

 

thats system defense of Zemana. Not a threat.

 

default settings, no changes

 

There is anys new about a 64bit version of Zemana?
In 1 or 2 years when a few people uses 32bit what are they going to do?

 

I heard that Zemana is looking to release an Internet Security Suite in a few months. One would only think that it would be 64bit compatible!

 

i heard some where that they will include vipre and sunbelt firewall

 

is there much reason to have pc tools firewall and zemana antilogger running at the same time? i had them both running at the same time and it seems antilogger does everything a firewall does and more so should i shut off pc tools firewall

 

use PC tools firewall plus only.Antilogger is not a substitute for firewall.

 

really? it alerts and blocks anything that tries to enter my computer. Are you sure its not an firewall plus more because whenever anything tries to enter my computer it alerts me. Even more than pc tools firewall