If you ask me what am I afraid most when it comes to computer security threats and my answer would be a malicious software that captures everything I type on my keyboard, commonly known as keylogger. Every keylogger is made to run hidden on a computer and some good ones goes to the extend of running in low-kernel mode that invisibly captures every detail of the PC and Internet activity, defeating tools other than those provided in Windows such as Process Explorer, MSCONFIG, Autoruns and so on… I can’t imagine the damage that it would do to me if there is a hidden keylogger on my computer, capturing everything I type and monitoring everything I do on my computer.
Although I am using LastPass to auto login to websites, there are still risks when it comes to applications such as Windows Live Messenger, Google Talk, CuteFTP, PuTTy, TrueCrypt, The Bat! email client and etc which requires me to type in password. Saving the password on the application to prevent from typing the password is a bad idea because password recovery programs or known as “stealers” can get all of the saved passwords on your computer and send it to the hacker.
One of the possible solution is to use KeyScrambler to encrypt your keystrokes deep in the kernel, foiling keylogging attacks with scrambled, undecipherable data. For example, when you type the word “raymond” on your keyboard, it becomes “2;faf3f” and that is what the keylogger would think you have typed, logging only rubbish data. I have in fact mentioned about KeyScrambler 4 years ago but that didn’t go with any test but now I am thinking of using this myself, so I am putting it to tests with a couple of well known powerful keyloggers and Remote Administration Tool trojan that has keylogging capabilities to see who wins this battle.
There are 3 versions of KeyScrambler, the Personal(free), Professional($29.99) and Premium($44.99). Basically the Personal edition is just a web browser plugin that scrambles what you type on the web browser. If you only use the computer for web browsing, then it is good enough and you don’t need to rely on on-screen keyboards. As for the Professional version, it supports more browsers, email clients, instant messengers such as Windows Live Messenger, password managers such as LastPass, Online Games such as WoW and Steam. As for Premium, it is for advanced users that uses encryption software such as TrueCrypt, networking applications such as PuTTy, CuteFTP, and etc.
Since I use PuTTy, CuteFTP, TrueCrypt and LastPass, I had to go with the Premium version of KeyScrambler. There is very little to configure in KeyScrambler Premium. There is a hotkey (by default Ctrl + Shift + K) to enable/disable keyscrambler protection, auto start with Windows, display in tray icon or overlay window, auto update checking, protecting Windows Logon and Windows Explorer, distinguish unencrypted keys and enabling support for east asian language input.
1. All In One Keylogger (ranked #1 in Kids & Parenting Software at CNET Download.com)
Result: Pass
2. Ardamax Keylogger (ranked #2 in Monitoring Software at CNET Download.com)
Result: Pass
3. Award Keylogger
Result: Pass
4. Elite Keylogger (Uses low-level kernel keylogging method)
Result: Pass
5. Refog Keylogger (ranked #3 in Privacy Software at CNET Download.com)
Result: Pass
6. Revealer Keylogger Pro (ranked #1 in Monitoring Software at CNET Download.com)
Result: Pass
7. WebWATCHER (claims can’t be stopped by any anti-virus, anti-spyware, and firewalls)
Result: Pass
8. BlackShades RAT
Result: Pass
9. CyberGate RAT
Result: Pass
10. DarkComet RAT
Result: Pass
As you can see from the tests which I have performed, none of the keyloggers and remote administration tool trojan is able to capture and log the real keystrokes that I typed on my keyboard. Using KeyScrambler Premium does keep me safe whenever I type on my keyboard. There is an bug that has been on-going for a long time which is sometimes the encrypted text ends up on the textbox rather than the real text. All you need to do is hit the backspace once and everything goes back to normal. There is a possible incompatibility problem since it installs a driver keyscrambler.sys. Another downside is the Premium version of KeyScrambler cost money, there is no trial version for the Premium/Pro and I wasn’t able to get a couple of free license from the developer to give away on this site.