Keyloggers are are commonly a form of software (but can also be hardware) that are used to keep track of everything you type on your computer. Essentially every key you press is recorded to a file, which can be relayed over the internet to someone who can use the information gathered. Every e-mail you write, comment you post and password you type is recorded to a text file (normally along with the name of the application you had focus on at the time). Some keyloggers can also take screenshots and even short videos of your screen, so that they know exactly what you are doing and where you are typing your passwords.
As you can imagine, keyloggers are one of the most dangerous ways for someone to wreak havoc in your name. However, there are many ways to make sure that you never get infected with a keylogger, they are as follows:
- Download and install suitable anti-spyware and anti-virus software.
- Remember to run a full system scan on each of these at least once a fortnight.
- Be careful with what you download. Use your anti-virus' on-demand scan or an online file scanner to be super-safe.
Using an online file scanner is by far the best way to check a file because most of the online virus scanners use more than one engine to check for viruses or malware within your file. VirusTotal, for instance, currently uses 32 different engines to check your file.
I ran this scan on a file that I knew was malware, and as you can see only 40% of the engines actually found it to be harmful. Obviously, this shows that relying on a single anti-virus engine is not the best idea and that is why it is always good to have more than one engine installed on your computer at any one time.
I use the following anti-virus and anti-spyware programs to ensure that I am not infected.
- AVG Free Edition – free for home and non-commercial use: I use this as my main anti-virus application, because it runs in the background performing on-access scans (so that every time I read/write a file, it is checked for viruses) and uses very little processing. I used to use Symantec's Norton AntiVirus, but it was too bulky for a home operating system and could sometimes use more memory than a small game. You also have to buy a new CD or license every time they release a major update, which can get expensive.
- Ad-Aware Free – free for personal home use: This is my main anti-spyware engine, even though it has no on-access protection or automatic updates, unless you buy the full version. I update it manually and run a scan every week, if I remember.
- Spyware Doctor – free with the Google Pack: This does pretty much the same as Ad-Aware, but if you buy the full version you can have a live protection guard, which guards you from browser threats, cookie exploits, malicious files, ActiveX exploits, keyloggers, malicious changes to your network settings, malicious processes and notifies you of changes to your startup. On top of that you can also install an Anti-Virus engine which can scan for viruses as well as spyware.
- Windows Defender – free: Windows Defender is probably the program I use least out of all of the ones I have, it really doesn't seem to catch diddly-squat, but it does notify me when changes are made to startup and port forwarding.
If you use a public computer or a computer that can be used by others, look out for any hardware you didn't connect yourself. Many hardware keyloggers connect to either your USB or keyboard port, often between your computer and your keyboard cable. The device does all the recording and the "hacker" simply collects the device later on. Spyware detection software will most definitely not uncover these devices.




Bull3t's Blog is a next generation web log written by me, Philip Hughes (also known as Bull3t), a first-year college student living in England, aged 17. I write this blog for the sake of doing so, posting about anything I see fit. 

So what now?
You've reached the end of this post. Seeing as you made it this far means you might be interested in the following related articles and resources.39 Comments
April 14th, 2008
#1
Quite a useful article! Especially for those that have to deal much with passwords storing/entering that refer to money accounts. It's been reported too many occasions about money frauds nowadays to ignore such advices.
April 14th, 2008
#2
I agree that the free version of AVG is great. I also use the paid version of TrojanHunter which catches things none of the others do. As for public computers, I am off on a vacation later this summer and I plan to try out the 'portable' version of firefox on a USB stick to do my broswing in Internet cafe's to minnimise the information left on the public computer.
April 16th, 2008
#3
Key loggers are getting more and more widespread. The reality of propper protection is really starting to sink in.
However, nothing is perfect, and there will always be a few slip thorugh the cracks.
April 16th, 2008
#4
@Dmitri:
The reason I suggest using more than one anti-virus program is to catch the few that do slip through the cracks. However, even this doesn't always work; your best bet is to keep your system up to date and do a full scan every now and then. Even better still would be to unplug your internet connection.
April 17th, 2008
#5
Definitely right, and I think this is violation to one's privacy.
And each one should be aware and take necessary actions in order to avoid especially confidential information.
April 26th, 2008
#6
Thaks for your nice tips about protection from keyloggers.
April 26th, 2008
#7
I use AVG as anti-virus and now downloading ad-aware. Thanks for the list :)
May 2nd, 2008
#8
Great tips and links, thank you very much for posting these. I will use them for the files I download. I do not want anyone using my name and information to steal my identity.
May 6th, 2008
#9
Not so long ago I was attacked by keyloggers. My email got hacked and some other informations but later I had to format the Hard drive from getting more damage.
now I am using Anti-vir Antivirus and I am on the safe hood now.
Anyways, these are great tips and I hope to follow and try it very soon.
May 12th, 2008
#10
Great, informative article. I was using AVG Free Edition when I was on Windows.
May 13th, 2008
#11
ahh, great tips. Many times have I downloaded files with keyloggers in them. This is very dangerous, if you do online banking, or buy items online.
May 13th, 2008
#12
Personally I'm most fond of the keyboard keyloggers that can be placed in-line with the keyboard cable behind the computer. Even your boss won't suspect anything unless they physically catch you extracting the keylogger.
May 27th, 2008
#13
Good tutorial. Excellent for the non tech-savvy person!
May 29th, 2008
#14
Wow thats scary only 40% found it as malware. That is a great tip about using online scanners, I thought notron software was as good as any other, but I guess I need to check multiple sources.
June 2nd, 2008
#15
That is a great tip. Keylogging software can steal your bank information and get you into trouble. This is good advice.
June 5th, 2008
#16
Ever since I upgraded to Vista I have been using AVG and it seems to work great. In the past I used Ad-Aware and it seemed to work as well.
June 5th, 2008
#17
You only wrote the bad sides of keyloggers.
But you should also write the other side.
Keylogger can also be used for a good purpose.
I myself use a keylogger to watch my kids activities over the internet.
It really helps me.
June 7th, 2008
#18
I frequently travel and I once became a victim of keylogger software when I forgot to bring my notebook and I don’t have a choice but to access my email in an Internet Café… the person who hacked my email sent malicious messages to most of my contacts. Good thing, I am not using that particular email address in my financial transactions.
June 18th, 2008
#19
I dont myself download anything and every time I do, I check it for viruses. Of course it would be horrible to have keylogger, because even using difficult passwords wouldnt help :(
July 16th, 2008
#20
Here are some tips for confusing and avoiding software keyloggers:
Let’s say we have to enter a password ‘lake’.
1. Click the password box, type any random key. Select the entered random key with the mouse and type l. So we entered the first letter of the password.
2. Click the password box, type a random key. Again click and type a random key. Select the last two letters with your mouse and type the next valid key of your password.
In this case we managed to enter 2 unwanted characters as against one in the first step.
Continue in a similar way to finish typing the password. You can choose any number of random characters between your password.
Note how we used unwanted mouse clicks so that a mouse click is recorded before the random letters also. You can also experiment entering the password in the reverse order, infact any order.
This method can be used for entering the username too, since most banks have account numbers as username. If you are suffering from some keylogger phobia, use this technique while typing the url too.
Another way is utilizing the browser’s search bar or address bar to camouflage the password.
For eg. Click the password box and type a letter of the password. Now click the browser’s address bar or search bar and type some unwanted letters. Alternate between the password box and address/search bar till you finish. The result will be the same as the former method.
August 4th, 2008
#21
Another good software to detect these type of programs is Spybot Search and Destroy. I have used it with good results.
August 16th, 2008
#22
That is a great tip. Keylogging software can steal your bank information and get you into trouble. This is good advice.
August 19th, 2008
#23
Having a good antivirus/spyware software is the best way to go these days. Especially if running a pc. I have been using bitdefender for a while and havent had any problems…yet.
August 21st, 2008
#24
Very good tips! I have had enough trouble already with keyloggers… Wish all people get to read your guide to be more aware of such stuff.
September 17th, 2008
#25
I find it ridiculous that many PC owners prefer installing all kinds of trials and demos and “free scan” of programs, and what’s worse – they’re advised to install as many security programs as possible. In my experience, a web scanner sometimes if a better choice. It’s easy to try a dozen of virus scanners, and in many cases they really help to remove malware.
But of course none of these services provide real-time protection. They’re mostly for additional testing and energency cases.
September 19th, 2008
#26
have you tried http://kyps.net ? It helps protecting the password against keyloggers and the like
September 22nd, 2008
#27
I've been meaning to download Ad-Aware, but I keep forgetting. Thanks for the reminder. It's really too bad we have to deal with all this stuff.
September 22nd, 2008
#28
If you're at a public place, I assume a key logger is installed. What I usually do is type out the whole alphabet in notepad with special characters and cases then I copy and paste BOTH my username and passsword which helps defeat keylogging. It doesn't help though if they're also logging screen shots. :(
November 14th, 2008
#29
I am into web designing and internet marketing in Goa, India. If I am using a public computer I try and type the characters of the password alternately with another random character and then delete the extra characters (which I can identify since they are placed alternately)I guess it should work.
December 15th, 2008
#30
Key loggers can present a huge problem for security. I work in the industry and there could potentially be a lot of information stolen. You made some good tips to protect yourself. It is a good reminder that we need to be aware of these potential problems.
February 23rd, 2009
#31
Never heard of keyloggers but I've been using AVG. Norton with all its resource hogging and pop ups seem to slow down my computer more than any virus ever did – annoying really.
February 28th, 2009
#32
I am a fan of stopzilla personally. Mainly because it does more than just keylog, adware, and spyware scanning. It is a pretty clean piece of software that actually looks nice. Only draw back is it cost like $25 but atleast I can sleep comfortably at night knowing my keys arent being sent online while im sleeping!
April 3rd, 2009
#33
I agree that the free version of AVG is great. I also use the paid version of TrojanHunter which catches things none of the others do. As for public computers, I am off on a vacation later this summer and I plan to try out the 'portable' version of firefox
April 19th, 2009
#34
On public and strange computers i use onscreen keyboard to avoid trouble: Start>Run… and type "osk".
April 19th, 2009
#35
@sterdaydp:
I normally carry two flash USB stick around with me (one 16gb and one 512mb), the smaller one carries my portable programs, such as Firefox and the other holds all my stuff. It's quite important to use a portable browser on public PCs so that you don't accidentally tick the "remember me" box on a sensitive website.
@Swieber:
An on-screen keyboard is one of the best ways to stay safe on a public computer, just watch out for people looking over your shoulder.
May 2nd, 2009
#36
Good article. I think you shouldn't use public and strange computers to commit payments. Do it only from trusted PC, where installed antivirus with actual virus bases and reliable firewall.
June 27th, 2009
#37
Excellent article it has helped me keep this PC clean of them. I did use something you didnt mention however, Spybot Search and Destroy which found things the others didnt :)
Thank you!
July 6th, 2009
#38
Most keyloggers are detected by anti-virus no problem, but it#s the newer keyloggers out there that are not yet detected that worries me!
October 17th, 2009
#39
nice tips for the newbies, but to keep it safe in an old fashioned way remember to change your passwords often.
Leave a reply