NzsB AntiKeylogger for Windows

Copyright 2001-2004, Zsolt Balazs Nemeth

freeware

Short description

AntiKeylogger was written in order to detect (and remove if needed) nowadays' known and unknown keylogger and trojan programs for both DOS and Windows systems, but it is still good for simpler viruses. We can also call the program AntiTrojan. AntiKeylogger doesn't need an always-must-be-updated database. It checks by every run whether there is a new unknown program in ran and running processes' list (it can be a keylogger or trojan, but either a virus or only a task of a newly installed program). Of course, you can set up forbidden programs or other ones that must be ran at startup. On the other hand, it also check CRC (for virus like infection) and others.
The program was tested with almost one hundred trojan program - also with my Cyberax DOS based keylogger.
But if you need it only for simpler things - for example you can use it only for logging the user's log ins.
I recommend it for schools, companies where more people can be access the same computer (I think that every computer is like this). Nowadays the internet invades us a lot of unkind applications, that install themselves without any question, but there are others that install themselves as an accessory for another well known program. So, there are fix programs on your computer and new ones cannot be installed.
It shows the complication of my program that it checks more than 70 different places for the trojan's startup (see the section Checking).

Advantages

• check not only the running processes, but the startup, too
• fully configurable
• log file and utilities for this: (automatic) archiving program, searcher, structured log viewer
• on multi-user using it logs who when and what for logged in, you can view a statistics from these log files
• removing trojans
• e-mail notification
• support for Novell NetWare, if there is client (in this case asks Novell for username (and context))
• get time from remote machine
• not displayed in task list, so it cannot be killed while it is running (whenever you didn't want this)
• it is good for known and unknown programs, you don't have to update the database (because there is no one)
• full of true (tested) startup method, for example, it is already support ICQ (there are many that can't be found on the internet)
• on multiuser using can be useful that AntiKeylogger doesn't need any interactivity

Requirements

There is no hardware requirement, strong machine is only for CRC checking needed (to speed up it).
The program support both single-user (95, 98, ME) and multi-user (NT, 2000, XP) Windows versions. Probably it will support newer versions, but security holes possibly will be. The minimal OS requirement is Windows 95b or Windows NT 4.0 Service Pack 3 or higher.
It runs on every language version of Windows, not depends on the system's path and where is the AntiKeylogger.
The LogArchiver, LogSearcher and LogViewer utilities also runs on Linux, with Windows emulator (wine).

Download

A programnak van MAGYAR VERZIÓja is, teljes dokumentációval!
The newest version of the program can be downloaded here:

AntiKeylogger 1.02 Hungarian (with Hungarian documentation)
AntiKeylogger 1.02 English (with English documentation)

Released: 2004/02/27

The program is currently being tested by my old school Szechenyi Istvan Vocational and Grammar School, Szazhalombatta (Hungary) (nearly 500 user on nearly 100 client).

The contents of the distribution: the AntiKeylogger, a configurer Setup (it can install and edit masks, too). Log archiver, searcher and structured viewer (with statistics).

Pictures

AntiKeylogger while searching


AntiKeylogger finished the searching (it can be configured to exit in this case)


Sorry, I have only Hungarian log file, so the language of the program I used have to been the same.


The Setup