2.4 Software Keyboard Spies
163
2.4.2.9 Programs for Detection and Deletion of Keyboard Spies
Any antivirus product. All antiviruses are capable of finding keyboard spies to a
certain extent; however, a keyboard spy is not a virus, and the usefulness of the
antivirus is therefore limited.
Utilities employing both signature search mechanism and heuristic search mechanisms. An example of these would be the AVZ utility program, which combines a
signature scanner and the system for detection of hook-based keyloggers.
Specialized utilities and programs designed to detect keyloggers and block their
operation. Such programs are most effective for detection and blocking of keyloggers,
since they can block almost all types of them.
Among specialized programs, commercial products PrivacyKeyboard and Antikeylogger (http://www.bezpeka.biz/) may be of interest. Interface of the Antikeylogger program is shown in Fig. 2.17.
Anti-keylogger operates in background mode and detects software suspected of
keyboard tracking. If necessary, the user can manually unlock operation of any of the
detected programs (for example, the figure shows that the list of possible keyloggers
includes MSN Messenger and the FlashGet downloading program). Detection of
keyloggers uses heuristic methods instead of signature bases.
Program testing has demonstrated that it effectively counteracts keyloggers based
on hooks, cyclic polling, and keyboard filter driver.
Fig. 2.17 Anti-Keylogger
163
2.4.2.9 Programs for Detection and Deletion of Keyboard Spies
Any antivirus product. All antiviruses are capable of finding keyboard spies to a
certain extent; however, a keyboard spy is not a virus, and the usefulness of the
antivirus is therefore limited.
Utilities employing both signature search mechanism and heuristic search mechanisms. An example of these would be the AVZ utility program, which combines a
signature scanner and the system for detection of hook-based keyloggers.
Specialized utilities and programs designed to detect keyloggers and block their
operation. Such programs are most effective for detection and blocking of keyloggers,
since they can block almost all types of them.
Among specialized programs, commercial products PrivacyKeyboard and Antikeylogger (http://www.bezpeka.biz/) may be of interest. Interface of the Antikeylogger program is shown in Fig. 2.17.
Anti-keylogger operates in background mode and detects software suspected of
keyboard tracking. If necessary, the user can manually unlock operation of any of the
detected programs (for example, the figure shows that the list of possible keyloggers
includes MSN Messenger and the FlashGet downloading program). Detection of
keyloggers uses heuristic methods instead of signature bases.
Program testing has demonstrated that it effectively counteracts keyloggers based
on hooks, cyclic polling, and keyboard filter driver.
Fig. 2.17 Anti-Keylogger