164
2 Computer Viruses, Malicious Logic, and Spyware
Fig. 2.18 Advanced Anti-Keylogger
Another example is the program Advanced Anti-Keylogger (http://www.anti-key
logger.net) (Fig. 2.18).
In the training mode, this program is similar to Firewall in terms of the work logic:
if suspicious activity is detected, the program displays a warning containing name
and description of the program. The user can select an action for the specific session
(allow, prohibit) or create a permanent rule for the application to use.
During testing, advanced anti-keylogger confidently detected all basic types of
keyloggers (based on hooks, cyclic polling, and filter driver). Settings of the program
are protected by the password set during installation.
Therefore, even though a keylogger is not a virus, it still poses a great threat to
users, since it allows the intruder to monitor user’s work and can be used to steal
confidential information, including user passwords. The danger of a keylogger can
increase significantly in case of its combination with rootkit technology, which will
help mask the presence of the keylogger. Even more dangerous is a Trojan or a
backdoor containing a keylogger: its presence significantly expands the functions of
such Trojan and its danger for the user.
2 Computer Viruses, Malicious Logic, and Spyware
Fig. 2.18 Advanced Anti-Keylogger
Another example is the program Advanced Anti-Keylogger (http://www.anti-key
logger.net) (Fig. 2.18).
In the training mode, this program is similar to Firewall in terms of the work logic:
if suspicious activity is detected, the program displays a warning containing name
and description of the program. The user can select an action for the specific session
(allow, prohibit) or create a permanent rule for the application to use.
During testing, advanced anti-keylogger confidently detected all basic types of
keyloggers (based on hooks, cyclic polling, and filter driver). Settings of the program
are protected by the password set during installation.
Therefore, even though a keylogger is not a virus, it still poses a great threat to
users, since it allows the intruder to monitor user’s work and can be used to steal
confidential information, including user passwords. The danger of a keylogger can
increase significantly in case of its combination with rootkit technology, which will
help mask the presence of the keylogger. Even more dangerous is a Trojan or a
backdoor containing a keylogger: its presence significantly expands the functions of
such Trojan and its danger for the user.