Slashdot Mirror

For software keyloggers, you can use a tool like SpyBot to try to find them -- however, I can't guarantee it'll find your specific keylogger, if there is one. There's probably better software at this point, but I haven't used Windows in years.

Another option is to use Windows' built-in search, and search for files modified in the past couple days. If there's a keylogger, odds are its log files will show up. I've accidentally found a keylogger on a friend's computer this way.

Another option is to use a liveCD for everything important. Pick up an Ubuntu LiveCD, and start into that when you need to do things that are suspect.

Keep in mind, however, that you may instead have a hardware keylogger. You may have a dongle like this one, which plugs in between your computer and your keyboard. You could also have one built into your keyboard -- there are companies that sell keylogging keyboards, and companies that will embed a keylogger into a keyboard -- either a specific model, or your own if you mail it to them. There could also be one built into the computer, but I don't know of any company that does that.

Moral of the story: if you can't trust the security of your computer, don't use it for things you don't want someone else to see. It might be time for her to invest in a cheap laptop, such as an Eee PC, and either do all her work on a connection he doesn't have access to, or over ssl connections or a VPN.

However, like others have said, worrying about a keylogger from your spouse isn't exactly the sign of a trusting relationship. I assume your friend knows this, and this is a preamble to a separation or divorce. If it's not, I'd suggest your friend and her spouse seek marriage counseling. Good luck to her.

http://www.keykatcher.com/

Does that work for you?

This is so correct. I've been saying the same thing over at another thread.

We, the non-Microsoft users, shouldn't lull ourselves into a false sense of security against spyware and trojan threats just like this one, just because we happen to be non-Microsoft users, or even because we tend not to be logged in as root when we do our work.

Are trojans stoppable? Well, you can try. You can filter out executable types from getting through your e-mail, you can disallow downloading of executable files through your corporate proxy. You can even use software that re-images your computer on every boot to erase trojan software that gets on there as often as possible to prevent from local attacks.

You can even educate users in the risks of using a computer, or checking your keyboard plug for suspiscious devices, but practically none of this is platform-specific.

In the case of industrial espionage, you have a determined attacker attacking a specific target. They're not going to stop attacking you just because you don't use Windows XP.

It's mentioned in the SecurityFocus article, but for those too lazy to search for it, the device in question was a KEYKatcher.

Anybody try one of these? Do they work well?

If you can touch type and aren't worried about seeing your notes until you get back, you could go with a small keyboard such as the Happy Hacking and a keylogger like KeyKatcher, or a combination like at Key Ghost. Just rig up a few batteries to power it. When you get back, dump the notes into a file.

Not really, they can be hardware based. KeyKatcher

Kallahar

...you should use a hardware keystroke logger for stuff like this, like the KEYKatcher. Those things are undetectable...I mean who ever looks at the back of a public computer to see if there's a little adapter on the end of your keyboard??