If you ask me what am I afraid most when it comes to computer security threats and my answer would be a malicious software that captures everything I type on my keyboard, commonly known as keylogger. Every keylogger is made to run hidden on a computer and some good ones goes to the extend of running in low-kernel mode that invisibly captures every detail of the PC and Internet activity, defeating tools other than those provided in Windows such as Process Explorer, MSCONFIG, Autoruns and so on… I can’t imagine the damage that it would do to me if there is a hidden keylogger on my computer, capturing everything I type and monitoring everything I do on my computer.
Although I am using LastPass to auto login to websites, there are still risks when it comes to applications such as Windows Live Messenger, Google Talk, CuteFTP, PuTTy, TrueCrypt, The Bat! email client and etc which requires me to type in password. Saving the password on the application to prevent from typing the password is a bad idea because password recovery programs or known as “stealers” can get all of the saved passwords on your computer and send it to the hacker.
One of the possible solution is to use KeyScrambler to encrypt your keystrokes deep in the kernel, foiling keylogging attacks with scrambled, undecipherable data. For example, when you type the word “raymond” on your keyboard, it becomes “2;faf3f” and that is what the keylogger would think you have typed, logging only rubbish data. I have in fact mentioned about KeyScrambler 4 years ago but that didn’t go with any test but now I am thinking of using this myself, so I am putting it to tests with a couple of well known powerful keyloggers and Remote Administration Tool trojan that has keylogging capabilities to see who wins this battle.
There are 3 versions of KeyScrambler, the Personal(free), Professional($29.99) and Premium($44.99). Basically the Personal edition is just a web browser plugin that scrambles what you type on the web browser. If you only use the computer for web browsing, then it is good enough and you don’t need to rely on on-screen keyboards. As for the Professional version, it supports more browsers, email clients, instant messengers such as Windows Live Messenger, password managers such as LastPass, Online Games such as WoW and Steam. As for Premium, it is for advanced users that uses encryption software such as TrueCrypt, networking applications such as PuTTy, CuteFTP, and etc.
Since I use PuTTy, CuteFTP, TrueCrypt and LastPass, I had to go with the Premium version of KeyScrambler. There is very little to configure in KeyScrambler Premium. There is a hotkey (by default Ctrl + Shift + K) to enable/disable keyscrambler protection, auto start with Windows, display in tray icon or overlay window, auto update checking, protecting Windows Logon and Windows Explorer, distinguish unencrypted keys and enabling support for east asian language input.
1. All In One Keylogger (ranked #1 in Kids & Parenting Software at CNET Download.com)
Result: Pass
2. Ardamax Keylogger (ranked #2 in Monitoring Software at CNET Download.com)
Result: Pass
3. Award Keylogger
Result: Pass
4. Elite Keylogger (Uses low-level kernel keylogging method)
Result: Pass
5. Refog Keylogger (ranked #3 in Privacy Software at CNET Download.com)
Result: Pass
6. Revealer Keylogger Pro (ranked #1 in Monitoring Software at CNET Download.com)
Result: Pass
7. WebWATCHER (claims can’t be stopped by any anti-virus, anti-spyware, and firewalls)
Result: Pass
8. BlackShades RAT
Result: Pass
9. CyberGate RAT
Result: Pass
10. DarkComet RAT
Result: Pass
As you can see from the tests which I have performed, none of the keyloggers and remote administration tool trojan is able to capture and log the real keystrokes that I typed on my keyboard. Using KeyScrambler Premium does keep me safe whenever I type on my keyboard. There is an bug that has been on-going for a long time which is sometimes the encrypted text ends up on the textbox rather than the real text. All you need to do is hit the backspace once and everything goes back to normal. There is a possible incompatibility problem since it installs a driver keyscrambler.sys. Another downside is the Premium version of KeyScrambler cost money, there is no trial version for the Premium/Pro and I wasn’t able to get a couple of free license from the developer to give away on this site.
Related posts:
Morning Raymond!
I am a KeyScrambler Premium user and I just discovered that the KeyScrambler website has you down as a recommendation. The folks there consider you credible source – - and so do all of your subscribers!
Keep testing and keeping us informed!
How do I make a donation to your site?
salut Raymond ! voilà maintenant ça marche pour keyscrambler, c est compatible avec Windows 7, encor merci, j ai installer la version 7.10 que j ai cracker évidemant, lol !
@Raymond.
I have no words to express my feeling for you. Your blogs are such a life saver. Thanks to inform about this software.
@Raymond thanks for your reply, it really helps clearing things out in my head.
awesome reviews as always :)
So, KeyScrambler works on 64 bit also, or are there any limitatations on a 64bit?
@Andrew: KeyScrambler Premium works with Password Corral 4 works but I wasn’t able to test version 5 because I couldn’t find the download link. If you need it, you can probably contact KeyScrambler support and request them to make it compatible.
Besides the bug as mentioned above of the encrypted text ending up on the text box, I also noted that I cannot log in to my Password Corral 5, one of the applications where it is supposed to work. Typing directly to my password returned wrong password. I have to type it in the username box, then cut and paste it to the password box before I can log in. This is the KeyScrambler Premium by the way.
Raymond,
Great find and a nice addition to any security arsenal. I’m looking for a portable version of this program or something similar for my flash drive. Any thoughts? Thanks!
it’s good the scrumbler keylogger,but i am have a lot of software is usefull and increase security to your PC. PLEASE CHECK IT OUT.
Thank you very mutch ! I’m unstalling it.
Do you think the scrambling algorithm is strong enough to stand against the existing “known Text” Cipher breaking techniques?
No what all should I have for security. I have my entire HDD encrypted with bitlocker and having extra key. I have an antivirus. Some one suggests a new firewall. Now a key scrambler. In the end I guess my system will run only the OS and all security software and I have to stare at it blankly.
Thanks great info must try!
Are there any alternatives to KeyScrabler?
What do you think about Neo’s SafeKeys? Is it secure enough?
thanks for this useful information.. keep it up..
Thanks so much Dear Raymond for info.
it seems be a useful and i want to test it.
Best Regards,
@Ziaul Huq: Zemana Antilogger works differently. It doesn’t encrypt keystrokes.
@Alternative: Glad that I get to know about NextGen AntiKeylogger from you. It seems to have the same function and I’ll test it out to see which is better.
Nice , very nice soft , keep on with the goodstuff , rgds
@ Raymond check this
NextGen AntiKeylogger
maxsecuritylab.com/nextgen-anti-keylogger/nextgen-anti-keyloger-overview.php
Alternative for KS
Hi,
What do you think about Zemana Antilogger? It also does the same thing and more. It protects you against a wider variety of malwares and gives you a greater scope of protection. Does Zemana AntiLogger works on 64bit also? If yes, what features are not available on 64 bit?
I’ve been using this program for quite a long time now. I’ve never experienced the bug you mentioned, but, I’m happy you posted the fix, just in case I do encounter it in the future.
Thanks for running the test. It now gives me more confidence in the programs ability.
@Abdullah: Not really. I believe you are speaking based on logic but without any testing.
KeyScrambler loads in kernel and even if you’ve terminated the executable file (keyscrambler.exe), the keystrokes are still encrypted because the driver is still loaded. I have personally tested it and can confirm that terminating keyscrambler process will still encrypt the keystrokes.
The exe file simply provides a GUI to control how the driver should work.
useless if u asked me, what if I used a backdoor, say piosn.ivy, I can easily terminate its process and then record the keystrokes of my victim :)
I’ve used KeyScrambler since its first version. Yes, the bug in which the encrypted text sometimes ends up on the textbox rather than the real text still exists, but that’s not much of a problem at all.
Thanks for reviewing it.
@Vanamali S: Sorry I wasn’t able to find a similar software like KeyScrambler.
@Peacemaker & Dave Bourdeau: Keyloggers are made to be invisible and some good ones can’t be detected by antivirus/antispyware software. When they do get detected at a later time, it is already too late because all your login information is sent to the hacker.
Thank you Raymond for the tip.
Keyscrambler is a great program, I just wish the free version worked with chrome, and as you said, The premium version cost money which is hard to come by nowadays.
Thanks for the review Raymond
Thanks for another great article Raymond. I also would like to know if one is on my system. Doesn’t antispyware, security/anti-virus programs detect and delete or quarintine them? If not what is the procedure for clearing your system?
I use KeyScrambler free in firefox and the encrypted text can appear on, say, a comment on a website as your typing it. For example, I write this = I writ?£e7Q. It happens very infrequently and only on websites that have a lot of “things” running.
cool bro!!!
How to know if i have keylogger in my pc? how to remove it?
As Usual, very good Article!!!
I will try.
Whoa! This is cool information. I hope you’d given some freeware alternatives as well.
Any way thanks for the information. :)
Nice and helpful software.
Thanks for the information.
Thank You i will try it out, I ‘ve been worry for this keylogger long time ago,but I don’t know how it work,and set up,can you give more information .ThankYou
Tq raymond for the tips..
I think it enough for me for now to use (at least) the personal version of keyscrambler…as long as it can protect my online account…
:)
Thanks RayMond