Avast WEBforum
Other => Viruses and worms => Topic started by: Yance on August 20, 2010, 04:13:03 PM
-
Hello...could avast internet security protect computer from keylogger software?
-
Yes, it can.
-
wow that's awesome...how about keylogger hardware?
-
Last I checked the is no software solution for that, Avast! or otherwise.
-
Last I checked the is no software solution for that, Avast! or otherwise.
I think the same.
-
Just happened to catch this.. I concur. Correct me if I'm wrong, not sure I've ever heard of Keylogger "Hardware". Keylogger "Software" can often be stored on removable hardware, i.e., flash drives and via a USB port. I would think that if it's a program stored on a flash drive, avast wouldn't be able to catch it because it's not scanning the USB ports. Unless the program was installed onto the computer or on something such as a CD or floppy, in one of the drives, it's not going to be detected by any AV. Please correct me if I'm wrong. I often hear this at work and have been curious about whether that was viable.
-
Not sure I've ever heard of Keylogger "Hardware".
For instance: http://www.keyghost.com/
I would think that if it's a program stored on a flash drive, avast wouldn't be able to catch it because it's not scanning the USB ports.
Of course avast will detect it if it is running. Otherwise, it won't be active and it's a file like any other.
Any (good) antivirus will detect it.
-
For instance: http://www.keyghost.com/
<== *Learns something new everyday*
Thanks for clarifying that Tech. And providing that link. Wasn't aware that they've now managed to disguise these as adapters and now keyboards.. However, in a twist of irony and unbeknownst to you I think you just helped provide a solution to my 16 year old problem. ;D
Of course avast will detect it if it is running. Otherwise, it won't be active and it's a file like any other.
Any (good) antivirus will detect it.
Right, respectively. Avast is one of the better AV's around, no argument there. Nice endorsement btw :P In this situation I think it's clearly defined that Avast can do many things. However, examining the back of your desktop for you, isn't one of them. And I just grew a little bit more paranoid lol. :-\
-
Yes, it can.
thanks for your comment. i interested to know how avast protect our computer from keylogger software. Is avast block the software (prevent the software for run) or secure every character that we type?
-
Yes, it can.
Tech,
Thank you. :)
I have a free subscrition to Zemana, it has never found a real keylogger.
It's nice to know that all along avast! has been protecting from keyloggers.
Maybe that's why Zemana never found any when I install it. 8)
-
Well keyloggers require more than just an AV to detect them as there are legit keyloggers and the problem is one of determining intent, has it been placed maliciously or legitimately and AVs have trouble determining intent. So an AV only may well not detect all keyloggers.
One thing that a malicious keylogger will be trying to do is to connect to the internet to upload the data that it has logged and it is here where the second line of defence, your firewall comes in. So a firewall should be monitoring connections looking for unauthorised outbound connections.
So the AIS should give better protection against keyloggers as the firewall element should also be monitoring outbound traffic...
-
Well keyloggers require more than just an AV to detect them as there are legit keyloggers and the problem is one of determining intent, has it been placed maliciously or legitimately and AVs have trouble determining intent. So an AV only may well not detect all keyloggers.
One thing that a malicious keylogger will be trying to do is to connect to the internet to upload the data that it has logged and it is here where the second line of defence, your firewall comes in. So a firewall should be monitoring connections looking for unauthorised outbound connections.
So the AIS should give better protection against keyloggers as the firewall element should also be monitoring outbound traffic...
So, are you try to tell us that avast can't protect from keylogger?
-
If a keylogger is running it's most likely running at start up,
so WinPatrol should alert me, of course it would be up to
me to make the the determination as to what it is.
-
I think any (good) antivirus should detect keyloggers.
If it was installed with intention, the user should do exceptions into the antivirus.
If it was installed by a malware, it should be removed.
I think avast is NOT calling PUP (potential unwanted programs) the keyloggers. They're being detected as malware. But I could be wrong. I just tested one keylogger some time ago and it was detected by avast as malware. Doing the exceptions, it worked.
-
I found that avast did not detected keylogger software from www.refog.com
-
I found that avast did not detected keylogger software from www.refog.com
Bad.
-
Why is it bad not to detect a legit keylogger, there are many that use them for legitimate purposes.
Many of which are parents monitoring their children activity on-line.
I guess the kids wouldn't want that in the system, but they aren't the ones purchasing the system nor installing the keylogger. Yes there are pro-active parental control applications, but many prefer to know what is being done on-line rather than simply blocking some sites/activities.
-
Why is it bad not to detect a legit keylogger, there are many that use them for legitimate purposes.
Because it can't be separated from the installed from the malware. Keyloggers need to be detected in my opinion.
Many of which are parents monitoring their children activity on-line.
Sad. There are tons of better parental controls.
I guess the kids wouldn't want that in the system, but they aren't the ones purchasing the system nor installing the keylogger. Yes there are pro-active parental control applications, but many prefer to know what is being done on-line rather than simply blocking some sites/activities.
Good parental controls have logs...
-
1. Why is it bad not to detect a legit keylogger, there are many that use them for legitimate purposes.
2. Many of which are parents monitoring their children activity on-line.
3. I guess the kids wouldn't want that in the system, but they aren't the ones purchasing the system nor installing the keylogger. Yes there are pro-active parental control applications, but many prefer to know what is being done on-line rather than simply blocking some sites/activities.
1. There is no legit keylogger, imo..!!
2. Seems there went something wrong in the education then. Parents spying on their kids..?? :(
3. Most kids are much smarter than the parents... ;)
asyn
-
3. Most kids are much smarter than the parents...
All kids think they are smarter than their parents till they grow up & have kids of their own,
then they wish they were as smart as their mother and father. ;D
-
1. There is no legit keylogger, imo..!!
uhhh if there wouldn't they wouldn't be sold/distributed openly.
2. Seems there went something wrong in the education then. Parents spying on their kids..?? :(
why not? some parents are so paranoid, and sometimes kids are so dumb.
3. Most kids are much smarter than the parents... ;)
depends on what parents' job is. if their job is related to computer, then kids won't be "smarter" than parents until late school at least(assuming by "smarter" you mean "skilled in comps")
-
3. Most kids are much smarter than the parents...
All kids think they are smarter than their parents till they grow up & have kids of their own,
then they wish they were as smart as their mother and father. ;D
Maybe some, but that's off topic, as my statement was related to computers and software, etc...
asyn
-
Why is it bad not to detect a legit keylogger, there are many that use them for legitimate purposes.
Many of which are parents monitoring their children activity on-line.
I guess the kids wouldn't want that in the system, but they aren't the ones purchasing the system nor installing the keylogger. Yes there are pro-active parental control applications, but many prefer to know what is being done on-line rather than simply blocking some sites/activities.
Amen David!! I'm actually glad someone created this topic. If it wasn't for Tech lol I would have never found that site for the ghost keylogger.
2. Seems there went something wrong in the education then. Parents spying on their kids..?? :(
why not? some parents are so paranoid, and sometimes kids are so dumb.
3. Most kids are much smarter than the parents... ;)
depends on what parents' job is. if their job is related to computer, then kids won't be "smarter" than parents until late school at least(assuming by "smarter" you mean "skilled in comps")
Asyn, try having a $700 bill for damages and repair due to a 16 year old child in full-on puberty.. Are you a parent? And Altarir, that's about half true.. I work in I.T. but that has no bearing on who's more intelligent in some situations. I know a decent amount regarding midrange hardware and most software but my knowledge is minimal on networking and security. My son has managed to wreak havoc on my PC due to his internet activity. But I can't just kick him off the computer altogether.. Due to curriculum in schools now, the internet and computers in general, are very much apart of schoolwork. That and I haven't found a successful way of "nannying" the internet and filtering every single porn site on the web. I've tried finding ways of solving this problem but my knowledge is limited and the consultation and the work to do so, is far more than this computer is worth. Personally, imo, it seems that a keylogger is a less-expensive solution to my problem. Also, it seems that most people that have a problem with someone spying on what they're doing, 1. Don't work in a corporate environment OR 2. Isn't a parent. Now, if you haven't been informed or signed a written consent, then that's a different story, as that falls under invasion of privacy. However, the whole subject of, "parents spying on their kids" is a mute point, when it's your house, your kids, your computer, your rules. Besides.. Having that proof, is a solid deterrent. Don't get me wrong I hate the whole concept of Keyloggers. But it seems to me, that there are viable uses for it.
-
RONIN2010, www.k9webprotection.com can block p0rn and also sites you need to pay, some kinds of malware, etc.
It's a freeware.
-
RONIN2010, www.k9webprotection.com can block p0rn and also sites you need to pay, some kinds of malware, etc.
It's a freeware.
Thanks for that recommendation Tech. But is there a way that I can also restrict what he downloads? Other than just restricting malicious sites, some of it is from legitimate sites such as craigslist.
-
Asyn, try having a $700 bill for damages and repair due to a 16 year old child in full-on puberty..
[OT]
Well, just to put a short answer here...
Let him pay the bill..! ;)
Everything else should be put on another forum... ;D
asyn
-
<snip>
Thanks for that recommendation Tech. But is there a way that I can also restrict what he downloads? Other than just restricting malicious sites, some of it is from legitimate sites such as craigslist.
Well if you know what sites it would be possible to use some HOSTS file modification (but that could be reversed by a saavy teen) or block via your firewall.
If you haven't already give only Limited User accounts to your children and make sure that all users have to logon to get on the system. So no default auto logon, especially to an account with admin privileges. Being on a limited user account might not stop them downloading some stuff, but it does limit what they can do and if the worst happens, limits the potential damage to the system.
-
David posted the most important thing: let him use a limited account.
You can use parental control of Windows also (in some versions).
K9 does not protect from P2P (emule, etc.) and, like any other software, is not perfect. He will always find a way to discover "new" sites.
Of course, you need to talk to him. Block is one way, but talking is everything.
-
Asyn, try having a $700 bill for damages and repair due to a 16 year old child in full-on puberty..
[OT]
Well, just to put a short answer here...
Let him pay the bill..! ;)
Everything else should be put on another forum... ;D
asyn
Been there with that one. ;D Since he doesn't have a job atm, his allowance defeats the purpose lol.
<snip>
Thanks for that recommendation Tech. But is there a way that I can also restrict what he downloads? Other than just restricting malicious sites, some of it is from legitimate sites such as craigslist.
Well if you know what sites it would be possible to use some HOSTS file modification (but that could be reversed by a saavy teen) or block via your firewall.
If you haven't already give only Limited User accounts to your children and make sure that all users have to logon to get on the system. So no default auto logon, especially to an account with admin privileges. Being on a limited user account might not stop them downloading some stuff, but it does limit what they can do and if the worst happens, limits the potential damage to the system.
Absolutely. This was the original idea I had in mind. However, some of the programs he's been given from school, could not be installed on a limited account without admin rights. So I ended up having to let him use the admin account. Big mistake.. But it seems I might just have to enforce the limited account access.
David posted the most important thing: let him use a limited account.
You can use parental control of Windows also (in some versions).
K9 does not protect from P2P (emule, etc.) and, like any other software, is not perfect. He will always find a way to discover "new" sites.
Of course, you need to talk to him. Block is one way, but talking is everything.
I'm running XP Home. LOL I've had 16 years to talk. Talking is one thing.. Him listening, is another. 16 is the golden age of stubbornness. However, it seems that the issue I've had of late, may not have been his fault. At least I can't prove it. I spend a good deal of time away from home in my line of work, so he's on it more than I am. Also having 2 additional people who access this computer, albeit on a limited account, doesn't help either when trying to narrow it down. That's why I had been eyeing keyloggers as of late. But maybe the last "talk" we had actually did some good.. At least his school work is improving.. Who new the words "Military School" could be such a powerful deterrent!?
-
<snip>
Thanks for that recommendation Tech. But is there a way that I can also restrict what he downloads? Other than just restricting malicious sites, some of it is from legitimate sites such as craigslist.
Well if you know what sites it would be possible to use some HOSTS file modification (but that could be reversed by a saavy teen) or block via your firewall.
If you haven't already give only Limited User accounts to your children and make sure that all users have to logon to get on the system. So no default auto logon, especially to an account with admin privileges. Being on a limited user account might not stop them downloading some stuff, but it does limit what they can do and if the worst happens, limits the potential damage to the system.
Absolutely. This was the original idea I had in mind. However, some of the programs he's been given from school, could not be installed on a limited account without admin rights. So I ended up having to let him use the admin account. Big mistake.. But it seems I might just have to enforce the limited account access.
As much of a pain as it is, it has to be better that you install those programs from school, then at the very least you know what they are and they would be all that is installed. This has to be preferable to letting him get hold of the admin account and installing what he likes over and above the school stuff.
Though there are some applications that still require a user account with administrator privileges (not 'the administrator account'), games comes to mind on some of them.
Since it cost you $700 before, perhaps it might be worth looking for a cheap netbook, that has adequate resources for school work, single Atom processor, small screen, limited RAM (1GB, 2GB Max) and graphics (possible to hook up to a TFT monitor at home), so it won't be able to run some of the things he wants to download.
-
Been there with that one. ;D Since he doesn't have a job atm, his allowance defeats the purpose lol.
[OT]
So, either let him get a job or deduct it from the pocket money (in rates)...
asyn
-
Hi malware fighters,
Just see what flags this: http://safeweb.norton.com/report/show?url=http%3A%2F%2Fwww.refog.com%2F&x=10&y=1
The malware is Spyware.KGBSpy is a commercial spyware program. It logs keystrokes, Web sites visited, and clipboard activity. It also has a screen capture logger and can be run automatically in a silent, undetectable mode.
Description: http://www.threatexpert.com/report.aspx?md5=da9dba82aad495663b4b33ce31cd1539
This spyware can use FTP or email to send all the logs to a remote server or email address.
These actions are configured in the program's Control panel of Systems.exe. When the program is in Hidden Mode, it cannot be accessed until it is brought out of Hidden Mode. This can be done with a hot-key combination (the default combination is Ctrl+Alt+Shift+K).
How to manually remove Spyware.KGBSpy
To save time and avoid risking destroying your computer, we highly recommend use a spyware scanner such as SpyHunter, to detect Spyware.KGBSpy and other spyware, adware, Trojans, viruses, keyloggers, and more that can be hidden in your PC.
Files associated with Spyware.KGBSpy infection:
MPK.dll
MPK.dll
Spyware.KGBSpy DLL's to remove:
MPK.dll
MPK.dll
Remove Spyware.KGBSpy registry entries:
RUNNING PROGRAM\explorer.exe
RUNNING PROGRAMexplorer.exe
It should at least be flagged as PUP,
polonus
-
Good info..!! Thanks, polonus..!
Proves, that a legit keylogger isn't possible...!!
asyn
-
It should at least be flagged as PUP,
After thinking on David's arguments and yours, maybe, this will be the better solution.
-
Hi Tech,
And why I think it should be flagged as a P.U.P. As you intentionally installed it onto a computer for whatever reason it could be a wanted problem, you could ignore the P.U.P flag. I guess the parents own the computer of the junior they key log, on the other hand I think it is to be preferred at all times that youngsters and parents agree what is allowed on a computer and what is not and at all times try to discuss that policy out with their kids before intstalling a key logger as a last resort measure. I for instance would feel terrible with a parent if there was no mutual trust between parent and child and on line behavior could not be discussed freely..but I know that there are a lot of people with minor educational skills - one needs the right papers to do a lot of things in this world, but not for rearing a child, which is a hell of a job sometimes...
In any other circumstance the more as the key logger is completely hidden, whenever it was not put there by my own consent or by someone who does not own the machine I am on (and in all other cases of a boss worker relation it can only be fairly done if the worker is being told explicitly that his on line activities are being closely monitored and the reason this takes place) I wanted the program to be flagged as possibly undesirable. Key logging people is the weakest bid as is snooping and there is really no excuse for it to do this without the snooped on party knowing this, at least I would feel rather uncomfy with it,
polonus
-
but I know that there are a lot of people with minor educational skills - one needs the right papers to do a lot of things in this world, but not for rearing a child, which is a hell of a job sometimes...
As a parent I'm trying not to take that out of context.. "minor educational skills".. I have a B.S. in Computer Science and am a father of a 16 year old and 10 year old. If anything I'd like to think I'm more than qualified to raise the same children I've been raising for 16 years.. Albeit I don't have the knowledge you may have of malicious software or information security, however I'm more than capable of calling the shots when it comes to my kids. And as I'm sure you've heard this before, however, in order to fully understand the scope of my dilemma, you'd need to be in my position. As for, "the right papers", no degree or certification, can ever prove to someone else, that you're a suitable parent. ESPECIALLY, with those who aren't parents themselves, as everyone seems to hold a P.H.D. in raising everyone else's children.. So maybe it's best to leave that to those who hold the title. Forgive me if I've misinterpreted your comments as I respect your opinion, however, think you may have went a little overboard in judgment. I'm all for finding an alternate route. I've heard quite a few interesting ideas in here and am examining each one.
Been there with that one. ;D Since he doesn't have a job atm, his allowance defeats the purpose lol.
[OT]
So, either let him get a job or deduct it from the pocket money (in rates)...
asyn
Liking this suggestion! ;D
Since it cost you $700 before, perhaps it might be worth looking for a cheap netbook, that has adequate resources for school work, single Atom processor, small screen, limited RAM (1GB, 2GB Max) and graphics (possible to hook up to a TFT monitor at home), so it won't be able to run some of the things he wants to download.
Thanks David. I'm thinking this is more of a logical solution. That and combining with asyn's suggestion. That way, if he destroys it, he's going to have to pay to fix it. I can definitely give this one a try. It seems more logical that he's likely to curb the activity, if it's something he's responsible for.
-
Liking this suggestion! ;D
It works well, believe me..!! ;)
asyn
-
RONIN2010, www.k9webprotection.com can block p0rn and also sites you need to pay, some kinds of malware, etc.
It's a freeware.
k9webprotection is very weak!! you just need to disable the javascript function on your browser and k9 will not work again.
-
k9webprotection is very weak!! you just need to disable the javascript function on your browser and k9 will not work again.
???
Can you post a step by step routine to do so?
What does it has anything to do with javascript?
-
k9webprotection is very weak!! you just need to disable the javascript function on your browser and k9 will not work again.
???
Can you post a step by step routine to do so?
What does it has anything to do with javascript?
If you use firefox, go to option (on tools menu) and uncheck the "Enable Javascript" on Content tab (same methode for another browser). Is there a new version of k9webprotection? I never test again untill i found this bug on k9.
-
Hi RONIN2010,
What I wrote in my above posting is just my opinion, and a generalization as such. I cannot see why anyone as a good-willing parent would take my general mutterings personally or find this offensive. I just wanted to say that key logging your children should be done as all other methods have failed, to me it is the easy way out - no discussion - I monitor you - end of story. It is always a good policy to clearly put out to them what you expect of them, that you are aware of all that they are up to, and that when they go against this, they certainly will have a problem. I was just asking people to keep an open dialog with their kids as long as that is possible. When children and parents mistrust each other this will or could have a terrible effect later on in life. Certain things won't be allowed, and there are rules set out before them, but they must have the feeling that with whatever problem they can come to their parents,
polonus
-
If you use firefox, go to option (on tools menu) and uncheck the "Enable Javascript" on Content tab (same methode for another browser). Is there a new version of k9webprotection? I never test again untill i found this bug on k9.
There is no bug... It's working perfectly...
-
Feel like Polonus on this...
-
If you use firefox, go to option (on tools menu) and uncheck the "Enable Javascript" on Content tab (same methode for another browser). Is there a new version of k9webprotection? I never test again untill i found this bug on k9.
There is no bug... It's working perfectly...
what version of k9 you are use for test?
-
what version of k9 you are use for test?
Program Version 4.0.296
-
what version of k9 you are use for test?
Program Version 4.0.296
i have download the latest version and tested it, yes you're right....k9 can't bypass again with disable the javascript function. But not tested yet using tools from http://spyrozone.net/2010/0305-hack-k9-web-protection-all-version-22072010.html
-
You can use SpyShelter Personal Free (http://www.spyshelter.com/download.html) for protection against keyloggers.
-
i have download the latest version and tested it, yes you're right....k9 can't bypass again with disable the javascript function. But not tested yet using tools from http://spyrozone.net/2010/0305-hack-k9-web-protection-all-version-22072010.html
Asked the programmers here http://forums.bluecoat.com/viewtopic.php?f=13&t=3135&st=0&sk=t&sd=a&start=30#p29220
-
@Tech:
I've got BSOD when installing this version of k9 in windows xp pro sp3. But everything fine in win7 ultimate 32bit. Windows can't start up if k9 process is running. It's very difficult to get support/answer from blue coat. It's too complicated for asking any support from them...even in their forum, we need a long time to have an account for active.
-
@Tech:
I've got BSOD when installing this version of k9 in windows xp pro sp3. But everything fine in win7 ultimate 32bit. Windows can't start up if k9 process is running. It's very difficult to get support/answer from blue coat. It's too complicated for asking any support from them...even in their forum, we need a long time to have an account for active.
Sorry. I can't answer for the support of all my installed products.
Their forum is not as active as avast or Comodo ones.
In fact, I've installed K9 in a XP computer yesterday. No problems at all. What can I say more?
-
Hi....does anyone here know the best antikeylogger software (free & comercial)?
-
@Tech:
I've got BSOD when installing this version of k9 in windows xp pro sp3. But everything fine in win7 ultimate 32bit. Windows can't start up if k9 process is running. It's very difficult to get support/answer from blue coat. It's too complicated for asking any support from them...even in their forum, we need a long time to have an account for active.
Sorry. I can't answer for the support of all my installed products.
Their forum is not as active as avast or Comodo ones.
In fact, I've installed K9 in a XP computer yesterday. No problems at all. What can I say more?
Yes you're right. Their forum is not active. By the way, i have submit installer of refog keylogger software 2 days ago and today some of their keylogger software blocked by AIS.