How to Fool a Keylogger

[gopi_vbboy]

@above

ya ur way is also good...i have seen Virtual keyboard with changing key locations in SBI site.......

 

[dheeraj_kumar]

^^ Thats been existing for a long tme.

*in.youtube.com/watch?v=dAAGci_AnRk

 

[hariharakumar]

Nice tip man really great

 

[pagalnokia]

all the people above, do you think keyloggers wont capture the screen shots and wont they capture the mouse clicks that you make on Virutal keyboard, they do capture every mouse click you make and if the button that you click is not highlighted they give out the (x,y) co-ordinates along with the picture that is captured so that the location of the cursor is know (cursor doesnt usually appear in the screenshots taken my keyloggers)

@devilinearth
you mentioned the first method of virtual keyboard that is of no use now a days for the keyloggers have become so intelligent, YOU CANNOT STOP THEM
and the second method you mentioned was to make a text file and blah blah blah.....
buddy remember Keyloggers do also capture the clipboard, so when you are copying a text (or even each alphabet to enter your login details) all those are captured. So now tell me where exactly you can stop the keyloggers. NOT POSSIBLE MAN, am an Ethical Hacker and i keep doing research on all this stuff and regularly go through the forums and spend enough time to answer anything here.

@ gopy_vbboy

buddy you said browser plug-ins slows down the browser, so let me make it clear i mentioned about the software called Key scrambler that is not integrating itself with the browser but it is just installed like any other application and is encrypting your keystrokes at the kernel level and transmits it to the drivers so that the keyloggers cannot capture anything there. and i just gave a choice of brower plug-in in case you dont want to install the software and the plug-in that i mentioned here is the link, so laugh out loud and very sorry to tell all our ways fail to combat keylogger except using these keystroke encryption application.

Or there could be another solution for all the above problems is, using a good Security Suite and i always recommend Kaspersky, i never trust Symantec Norton or McAffee as I myself have created viruses (testing only) and was successful in disabling the above two latter mentioned so called Security Suites

Any one having any updated info plz do let me know so that i keep myself busy with the further more research

have fun guysssssss

 

[hariharakumar]

what if the key logger captures screenshots

 

[dheeraj_kumar]

@pagalnokia

All your points are valid. The problem with keyloggers is that they are available everywhere. Free source, plus books on how to make them, and so on. I'm interested in low level system security too, and presently coding rootkits.

 

[gopi_vbboy]

@pagalnokia

u r correct but think dude...such complex loggers usually are not injeccted/spread to evry pc..........everyone don;t have sensitive information online.......hacker target specific targets.......im not talking of complex loggers...i was talking abt a simple common sense technique for a newbie to fool any logger....also with many antispyware softs we are not fools to allow such logger to run n background......only social engineering can spread such logger to any noob hold sensitive info...

 

[shady_inc]

Those who think using the On Screen Keyboard in XP / Vista can fool a keylogger, be aware that the on screen keyboard still has to send signals to the physical keyboard to print the character which some keyloggers can pick up.

 

[dheeraj_kumar]

^^ No, but somewhat correct. OSK sends keypresses directly to the application on focus. So, if the keylogger hooks SendInput() function in user32.dll, even OSK keyboards are unsafe. And its not at all difficult to do it, so OSK is quite a failure.

 

[wishmaster.dj]

FYI kaspersky internet security 2009 has a virtual keyboard option.

 

[utsav]

FYI kaspersky internet security 2009 has a virtual keyboard option.

thanks 4 this info .i never noticed it

 

[Rollercoaster]

nice tip. now i always use it when working on a system that is not my own..

 

[gopi_vbboy]

^^ welcome

 

[go4saket]

Even virtual keyboards are recorded by keyloggers. We should have some kind of encryption stuff as present in BestCrypt. This encrypts the password you type to load its container and thus the keylogger gets all wrong stuff. If something like that can be available for normal typing, it can be great...

 

[toofan]

Even a half step towards safety is sometimes a great help?

 

[gopi_vbboy]

Encryption is also still insecure..Intelligent hackers can reverse anything which has a traditional logic....I Think Biometrics will enhance the security in future......

 

[toofan]

Biometrics can be fooled too.
My imagination: Hackers can took a image of your identity verification and then it would be much easy to paste/show that image to the program and execute it.

If its possible then how and if not then how?

 

[NucleusKore]

why struggle so much dude, use the software called Key scrambler and this is also available as a plugin to Firefox

Thanks, didn't know

Biometrics can be fooled too.
My imagination: Hackers can took a image of your identity verification and then it would be much easy to paste/show that image to the program and execute it.

If its possible then how and if not then how?

Not an iris or retinal scan. Have those been broken? Unless you're talking of Demolition Man

Update:

*img87.imageshack.us/img87/6799/keyad9.png

An is not required I guess

 

[mmharshaa]

Visit the following about keylogger...

*www.lfymag.com/admin/issuepdf/Keylogger.pdf



and this one too....

*www.safsec.com/2008/09/how-to-fool-a-keylogger/