Avast WEBforum

Other => General Topics => Topic started by: polonus on March 13, 2009, 03:50:33 PM

Title: KeyLogger detection.....kldetector
Post by: polonus on March 13, 2009, 03:50:33 PM
Hi malware fighters,

This keylogger detector: http://dewasoft.com/privacy/kldetector.htm could point you to keyloggers on your system, study the report it gives you. I hope no keylogger has been detected....

polonus
Title: Re: KeyLogger detection.....kldetector
Post by: Lisandro on March 13, 2009, 04:05:30 PM
Is it Vista compatible? Seems not...
Title: Re: KeyLogger detection.....kldetector
Post by: cod head on March 13, 2009, 04:51:01 PM
Hi Polonus,I have just visited this site and I am sure you do not know but WOT gives this site a bad rating.Quote."Appeared on list of malware distributors".I do not know if WOT is right or not and I do not want to check this site out.I just thought you would like to know. :-\.
Title: Re: KeyLogger detection.....kldetector
Post by: drhayden1 on March 13, 2009, 05:26:27 PM
Same here Damian on the WOT rating but Finjan give it an OK ::) ???

The Top One
Click on Pic to Enlarge...
Title: Re: KeyLogger detection.....kldetector
Post by: Lisandro on March 13, 2009, 06:08:32 PM
Another WOT overkill rating...
Title: Re: KeyLogger detection.....kldetector
Post by: DavidR on March 13, 2009, 06:13:54 PM
Hi Polonus,I have just visited this site and I am sure you do not know but WOT gives this site a bad rating.Quote."Appeared on list of malware distributors".I do not know if WOT is right or not and I do not want to check this site out.I just thought you would like to know. :-\.

Personally I thing this a bag of boll**** if you do some further digging, in the area mentioned MalwareDomain List, http://www.malwaredomainlist.com/mdl.php?search=dewasoft.com&colsearch=All (http://www.malwaredomainlist.com/mdl.php?search=dewasoft.com&colsearch=All), see image extract below. It is reporting a keylogger, so guess what a tool to find keyloggers is likely to be considered by some as a keylogger itself, e.g. a tool getting tarred with the same brush as whet it tries to combat ;D
Title: Re: KeyLogger detection.....kldetector
Post by: polonus on March 14, 2009, 01:22:10 PM
Hi malware fighters,

Apparently clean, not even a mention of risk tool: http://www.virustotal.com/nl/analisis/93100d030bd1048ffa51df3a2dda0cbc

Zarroo found,

pol
Title: Re: KeyLogger detection.....kldetector
Post by: YoKenny on March 14, 2009, 01:37:57 PM
Another WOT overkill rating...

I think that what the fuss about it is that a KeyLogger can be used for both bad purposes as well as good and if the KeyLogger is used it can gain access to financial or private information. 

I view KeyLoggers just a tad above malware as they both strive to gain access to a person's system behind their back at least for snooping at what a person is doing or at worst nefarious usage.   
Title: Re: KeyLogger detection.....kldetector
Post by: DavidR on March 14, 2009, 03:53:22 PM
My view too, but this isn't a keylogger but a detector of keyloggers.
Title: Re: KeyLogger detection.....kldetector
Post by: bob3160 on March 14, 2009, 04:19:27 PM
My view too, but this isn't a keylogger but a detector of keyloggers.
Is the Egg not also a Chicken just waiting to be hatched ???   ;D
Title: Re: KeyLogger detection.....kldetector
Post by: drhayden1 on March 14, 2009, 04:39:01 PM
Thanks for the insight Bob :)
Only you could come up with a quote like that ;D
Title: Re: KeyLogger detection.....kldetector
Post by: DavidR on March 14, 2009, 04:59:39 PM
My view too, but this isn't a keylogger but a detector of keyloggers.
Is the Egg not also a Chicken just waiting to be hatched ???   ;D

The confused icon is very apt as I'm totally confused, I don't understand what you are trying to say.

The topic is about a tool that can detect if a keylogger is present on your system, it isn't a keylogger. MBAM detects malware but that isn't malware, no egg or chicken issues there either. The same is true of this 'tool' it can't hatch into anything else other than a tool to detect the presence of keyloggers.
Title: Re: KeyLogger detection.....kldetector
Post by: Eddy on March 14, 2009, 05:16:05 PM
Keyloggers are in over 99% of the times used illegally. Most can send the logs to the one who installed it. They are detected by anti-malware applications like avast as wel as many firewalls. Ofcourse you do need to setup your security properly.
Title: Re: KeyLogger detection.....kldetector
Post by: DavidR on March 14, 2009, 05:20:07 PM
Yes, but we aren't talking about keyloggers as such in this topic, but a tool to detect if there is a keylogger present on your system.
Title: Re: KeyLogger detection.....kldetector
Post by: polonus on March 14, 2009, 06:23:41 PM
Hi bob3160,

It is a question of what came first the chicken or the egg. Some say the egg (evolutionists) and some say the chicken (creationists), whereas in some States of America they would bet it was "the rooster" (interventionists).
So I also tend to say the rooster for I do not belong to evolutionists nor creationists, but I am an interventionist. And while keyloggers intervene.....keylogger detection is not an easy thing to do. Sometimes it is like searching for the proverbial needle in the haystack! I have a 34 pages report now with what files my kl-detector found/checked on my computer for chances, it is nice for analysis tool whenever a PC is accessed by manifold users, but also for plain analysis of activities,

polonus
Title: Re: KeyLogger detection.....kldetector
Post by: YoKenny on March 14, 2009, 06:49:48 PM
I think might border on being a Pedantic Curmudgeon but I think that my Chinese astrological sign is The Rooster and I like to get up early in the morning and announce to the world Good Morning
Title: Re: KeyLogger detection.....kldetector
Post by: polonus on March 14, 2009, 06:59:31 PM
Well YoKenny,

So much for the rooster, but kl-detector found out about all the hidden things that McAfee's SiteAdvisor is performing on the computer e.g. SACore data after a short session with my Minefield browser:

Found as suspicious in some way:
C:\WINDOWS\Internet Logs\ACER-******D0D.ldb (created by ZA)
C:\Documents and Settings\Polonus\Local Settings\Application Data\Mozilla\Firefox\Profiles\*****4a.default\XUL.mfl
C:\Documents and Settings\All Users\Application Data\McAfee\SiteAdvisor\SA.dat-journal
C:\Documents and Settings\All Users\Application Data\McAfee\SiteAdvisor\SA.dat

C:\System Volume Information\_restore{344DC755-28BF-40FE-91D5-B22D466F307D}\R****\change.log
C:\Documents and Settings\LocalService\Application Data\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\.subcache
C:\Documents and Settings\Polonus\Application
Data\Mozilla\Firefox\Profiles\*****4a.default\places.sqlite (bookmarks and browsing history)
C:\Documents and Settings\Polonus\Application Data\Mozilla\Firefox\Profiles\*****4a.default\places.sqlite-journal (id. bookmarks & browsing hist.)
C:\Documents and Settings\LocalService\Application Data\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\.lockfile
C:\Documents and Settings\LocalService\Application Data\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\AA3480662CC1BD6B06FD9B1C4E69C4108D866B11\.subcache

C:\WINDOWS\Internet Logs\tvDebug.log (made by ZA, can be emptied and regenerates)
If anyone is interested - the following command will instantly delete the Cache folder and all of the contents temporarily. Assuming that Windows XP is on drive C. If not just change the C: to the correct drive letter. Copy the command to a blank Notepad document. Save the file, give it anyname.BAT
Be sure the extension is .bat and not the default .TXT (case is not important).
If you save to Desktop - just double click the file and Poof! Everthing's gone. You can also put in the Startup folder and it will automagically run when you reboot. enjoy!

RmDir /S /Q "C:\Documents and Settings\NetworkService\Application Data\SACore\Cache"
The only full solution is taking McAfee SiteAdvisor off your computer,

pol
Title: Re: KeyLogger detection.....kldetector
Post by: bob3160 on March 14, 2009, 09:50:09 PM
Quote
The same is true of this 'tool' it can't hatch into anything else other than a tool to detect the presence of keyloggers.
I thought the same was true of the Ape but I've been told by some very learned people that they are our forefathers  ???  ;D
Title: Re: KeyLogger detection.....kldetector
Post by: polonus on March 14, 2009, 10:13:06 PM
Hi bob3160,

But the original Darwin had in mind had more fur than their offspring. You've read the book "The Naked Ape", some treat their computers like it is described there: http://en.wikipedia.org/wiki/The_Naked_Ape. Oh you, bob3160, comparing computer behavior of users with that of animals!

Damian
Title: Re: KeyLogger detection.....kldetector
Post by: drhayden1 on March 14, 2009, 11:20:51 PM
Quote
comparing computer behavior of users with that of animals!
Just you Damian to that of your Cows ;D
(http://i43.tinypic.com/126aetz.gif)
Title: Re: KeyLogger detection.....kldetector
Post by: polonus on March 14, 2009, 11:29:39 PM
Hi Dan,

One third of the herd is young animals, three third are made up of dairy cows, dry animals and the ones you get eventually,

polonus
Title: Re: KeyLogger detection.....kldetector
Post by: bob3160 on March 15, 2009, 12:24:14 AM
Hi bob3160,

But the original Darwin had in mind had more fur than their offspring. You've read the book "The Naked Ape", some treat their computers like it is described there: http://en.wikipedia.org/wiki/The_Naked_Ape. Oh you, bob3160, comparing computer behavior of users with that of animals!

Damian
Alice wouldn't let me look at that book.  ;D
Title: Re: KeyLogger detection.....kldetector
Post by: polonus on March 15, 2009, 12:41:17 AM
Hi YoKenny,

Why you use words that stem from 1580? http://dictionary.reference.com/browse/curmudgeon?jss=0
Why don't you try the cream of cauliflower soup with blue stilton, also a traditional...
http://allrecipes.com/Recipe/Cream-of-Cauliflower-and-Stilton-Soup/Detail.asp
And what that has to do with key logger detection, is beyond me.
Good article here: http://blogs.pcworld.com/tipsandtweaks/archives/006395.html
Hope bob3160 knows this quality of this program,


polonus
Title: Re: KeyLogger detection.....kldetector
Post by: bob3160 on March 15, 2009, 02:02:04 AM
Quote
Hope bob3160 knows this quality of this program,
One of the reasons I've been a PRO user for a long time.  :)
Title: Re: KeyLogger detection.....kldetector
Post by: YoKenny on March 15, 2009, 03:01:57 AM
Hi YoKenny,

Why you use words that stem from 1580? http://dictionary.reference.com/browse/curmudgeon?jss=0
Why don't you try the cream of cauliflower soup with blue stilton, also a traditional...
http://allrecipes.com/Recipe/Cream-of-Cauliflower-and-Stilton-Soup/Detail.asp
And what that has to do with key logger detection, is beyond me.
Good article here: http://blogs.pcworld.com/tipsandtweaks/archives/006395.html
Hope bob3160 knows this quality of this program,


polonus

That sounds delicious.

I can't find a store that sells such delicacies here except for a Polish Deli that has some really unusual looking foodstuff and on a Saturday morning it is hard to get near the counter for the people conversing in Polish discussing how much of this and that they want.

There is a smoked cheese that I like and all manner of sausages from fire hot to pleasantly warm to go on fresh delivered breads that can be sliced on the spot.

What does this have to do with a keylogger?   
I have no idea but I like discussing culinary delights to relieve the boredom of this long Winter.