|
General information
Anti-keylogger™ program is very easy-to-use and doesn't require any special training. Its kernel is based on heuristic algorithms and the user needn't interfere into making the decisions about disabling any "suspicious" programs or their modules. The monitoring programs are disabled at the very moment the operating system starts even before the user logs in the system. It is indicated by the sign "This computer is protected by Anti-keylogger™" in the lower right corner of the screen.
After the program is successfully launched, the icon in the system tray acts as its indicator. If the module is ON the icon is green, otherwise it turns gray.
Auto-detected modules
The only setting available for the user in the Anti-keylogger™ is the list of auto-detected modules created by the kernel automatically. It indicates that the program has detected the modules which use mechanisms similar to those used by monitoring programs; the kernel blocks them by default. As a rule, it doesn't disrupt most of the "legal" programs which also capture key strokes but are not of monitoring purpose. If a program or its module appears in the list of auto-detected modules, it doesn't mean that it is definitely a spy program.
If you find out that some of the programs installed with your consent fail to function correctly with active Anti-keylogger™, the list of auto-detected modules will probably help you. Find the module which is a part of the program blocked and cancel the blocking. Click the mouse on its line and the module will start working again, indicated by the green icon beside it.
Anti-keylogger™ 7.x versions has a module for managing the list of auto-detected modules, which can detect system modules and automatically enables their work in operating systems Windows® 2000 or higher. More information about this module is in the "Program Options" section.
WARNING: Don't allow operation of any modules with unknown function, and in case when the applications' work is not visibly disrupted. If the modules with unknown function are unblocked by mistake, your information might be captured by a keylogger.
Note: only a user with administrative privileges can modify the list of auto-detected modules. (see the "Program Options" section).
White list
White List is a list of trusted applications which a user chooses himself.
A user can add any executable module into the White list if it is necessary to allow some application and modules it contains to perform any action whatever the status of the protection. There are two ways of adding modules into the White list, namely:
- Click the "Add" button, then select a executable module;
- Holding the left mouse button, drag and drop a group of files from the desktop or file manager.
All files added into the white list should have .EXE extension. The number of these files should not exceed 50. If the module which is to be added to the White list is already in the list of detected modules, drag and drop it onto the White list header, holding the left mouse button. To delete a module select it in the list and click the "Delete" button.
Warning: Any application from the White list is permitted to perform any action whatever the state of security system is.
Note: only a user with administrative privileges can modify the White list. (see the "Program Options" section).
Recommendations
To determine whether the blocked module belongs to some program, follow these recommendations:
- Locate it by pointing at the name of the module with the mouse pointer and letting it stay there for a while. The full path to the file will be shown as a tool tip. If it leads to a catalog with the program you know, this module must be its component.
- Check the module description carefully. Software manufacturers usually include information about functions of module into its description. If there is none, it is really suspicious and should alert you.
Switching Anti-keylogger™ ON/OFF
To switch the anti-monitoring protection off temporally, use "Stop" button. When pressed, it changes the state of the indicator and the icon in the system tray; its function becomes opposite, i.e. "Start".
Switching mechanisms of anti-monitoring protection off is necessary in case when Anti-keylogger™ incompatible programs are going to be used (e.g. some types of computer games etc.)
When the system is rebooted, the protection will start by default whatever its previous state was, if the program is not configured otherwise.
Anti-keylogger™ performance check
If you would like to check the performance of Anti-keylogger™ do the following:
- Install the Anti-keylogger™ program on your computer.
- Install any keylogging program. Most keylogging programs are available from the Internet for free.
- Launch the keylogging program.
- Open any program which has fields for text entry, for example Notepad, WordPad etc.
- Make sure that the Anti-keylogger™ program has been launched and is active at the moment.
- Type any text on the keyboard connected to your computer, for example the phrase "My privacy is protected by Anti-keylogger™ program".
- Close the program where the test information has been entered.
- Inactivate the Anti-keylogger™ program.
- Open a new copy of the program you have tested.
- Type any text on the keyboard connected to your computer, for example the phrase "My privacy is NOT protected now".
- Open the Log-file of the keylogging program and see that this keylogging software program has captured only keystrokes made when the Anti-keylogger™ had been inactivated, i.e. a report file will only contain the text "My privacy is NOT protected now", and the text "My privacy is protected by Anti-keylogger™ program" won't be captured.
Options
From the version 6.0 the user will be able to change some of the default settings. It is possible because several options are added to the version 6.0. They are available if the user chooses the "Options" button in the main menu
All the available settings fall into two groups – "For [user name]" and "Advanced". Options from the first group determine how the program will act when launched by the user whose user account name is displayed in square brackets. The second group of options assigns global settings of the program. Only a person with the privilege of local administrator can change these options.
The group of options "For [user name]"
Disable splash-screen when the program starts
This option allows switching off the splash-screen when the program initially loads after the user logs in. The program might take rather long time to load in some operating systems, so Anti-keylogger™ "entertains" you showing this splash-screen. While the program loads it analyzes system modules it uses to ensure that all the system modules are genuine and their functions can well be used.
Display the icon in the system tray
Enabled by default. When the system loads, the program interface loads as well. You can ban it with this option. In this case you will be able to start the program only from the "Start" menu or from the shortcut on the desktop. The "Close" button (the X-like one) will actually close, not minimize, its window. The anti-keylogging protection will remain as it was at the moment when the program interface was closed. In such a mode the program will work absolutely transparently for the user, i.e. no messages or notes are displayed. When modules are added to the list of auto-detected modules they are blocked whatever "Check certificates of the modules from the Auto-detected modules list automatically" option was set.
Switch off notices about changes in the Auto-detected modules list
This option is disabled by default and the program warns you that new modules have been added into the list of auto-detected modules. A pop-up window with this note appears near the program icon, if the program is active.
As a rule, it means that the program which modules are in the list of auto-detected modules, has been launched. Functionality of these modules is partially restricted (see "Auto-detected modules" section for details). The pop-up window has a link to "Auto-detected modules" of the main menu.
Switch sound effects off
Enabling this option switches the program into the "silent mode" and it doesn't make any sounds.
Switch visual effects off
If this option is set, there will be no visual effects when the user switches between windows and tabs of the program.
Choose the skin
This option enables the user to change skin of the interface. Select the skin you like from the dropdown list and click "Apply".
The group of options "Advanced"
Automatically launch protection when the system starts
Enabled by default. If canceled, the anti-keylogging protection will not start automatically when the operating system starts. In such a case the user will have to start Anti-keylogger™ like any other Windows application.
Prohibit switching off the protection if the user doesn't have administrator privilege
If this option is set, users without administrator privilege will not be able to switch the Anti-keylogger™ protection off.
Switch the clipboard protection on
The clipboard protection is enabled by default. However, you can switch off this protection if you find out that there are problems with retrieving information from the clipboard in some applications. In such a case don't copy/paste valuable information because it can be intercepted.
Switch the protection on automatically in other sessions when Fast User Switching is used
The "Fast User Switching" option is available in Windows® XP operating system and protection for all users is enabled by default. If you use Fast User Switching mode but don't want Anti-keylogger™ to protect other users' information when you are away, disable this option.
Disable splash-screen on logon desktop
This option is not set by default and allows the program to display the “This computer is protected by Anti-keylogger™” splash-screen. Setting this flag bans displaying this splash-screen. Note that the splash-screen is not just a picture – it indicates that the program has been successfully launched, all the sub-systems are working properly and anti-keylogging protection is activated.
Check certificates of the modules from the Auto-detected modules list automatically
Enabled by default. This option can automatically enable modules with a digital signature (certificate). These modules are as a rule either system components or programs tested in certification centers.
It is almost impossible to make up a fake certificate, so if a program has one, it is trustworthy. The process of certification check is rather time-consuming and can slow down the whole system if the capacity of a workstation is not high enough for this purpose.
Automatically enable modules with certificates from Microsoft®
Enabled by default. As a rule, modules with such a certificate are operating system components and their functions needn't be restricted. The applied mechanism of certificate verification guarantees that the file containing the specified module is the very file certified by its developer and it hasn't been replaced by some malicious program. If you don't want the program enable modules with certificates, cancel this option.
Don't display automatically enabled modules in the Auto-detected modules list
The program is able not to display in the list of auto-detected modules modules which were enabled automatically, i.e. those with certificates. This option is useful in case you have too many programs which components occur in the list of auto-detected modules, making it difficult to manage.
Display certificates
If you cancel this option you won't be able to recognize modules with certificates. The certificate icon also won't be displayed in the list of auto-detected modules.
Allow a user without administrator privileges to manage Protection policy
This option is disabled by default. Only a user with administrator privilege can change it. In this mode the list of auto-detected modules and the white list are globals, i.e. it is the same for every user of the system. That is why administrator privilege is required to change settings. Other users can't change the status of blocked modules. If this option is enabled, every user of the system will have his own list of auto-detected modules and the white list. Initial settings are copied for every user from the global list of auto-detected modules and the white list when the user first logs in the system after the settings have been changed. Switching back to the global list of auto-detected modules and the white list won't influence the users' local settings.
Sending an Error Report
If an unexpected error occurs, the window with its description and system configurations will appear:
To send an error report, click the "Send Error Report" button. To ignore the message, click "Don't Send". After such an error stable operation of the program can't be guaranteed. It is strongly recommended to reboot the computer to avoid unforeseen situations.
|
Home 
Contacts 
HTML Site map 
News 
Voting 
