Anti key logger for 64-bit PC running NIS

How do I protect against key loggers? Norton IS keylog protection doesn't work on my 64-bit machine. 

 

In Norton's Smart Firewall Advanced Settings description, under Key Logger Activity (See: https://support.norton.com/sp/en/us/norton-core/current/solutions/v19134741_N360_N360OEM_2014_en_us?q=keylog) it states:

 

Key Logger Activity

Monitors the malicious keylogger programs that access personal information of a user on a particular computer by monitoring their keystroke activities.

This category is not available if you use 64-bit version of Windows.

 

So what option do I have? Is there a Norton upgrade that can help me? Are there recommendations for another company's anti-keylogger that is compatible with NIS?  Please help!

How do I protect against key loggers? Norton IS keylog protection doesn't work on my 64-bit machine. 

 

In Norton's Smart Firewall Advanced Settings description, under Key Logger Activity (See: https://support.norton.com/sp/en/us/norton-core/current/solutions/v19134741_N360_N360OEM_2014_en_us?q=keylog) it states:

 

Key Logger Activity

Monitors the malicious keylogger programs that access personal information of a user on a particular computer by monitoring their keystroke activities.

This category is not available if you use 64-bit version of Windows.

 

So what option do I have? Is there a Norton upgrade that can help me? Are there recommendations for another company's anti-keylogger that is compatible with NIS?  Please help!

Thank you for your quick reply. I'll check it out as soon as I can. Offhand, do you know if the product uses a signature-based or a heuristic-based approach? I don't know much about this but I understand the latter is more sensitive (better) but can lead to false positives. Do you have experience with/ an opinion on which approach will catch the most key loggers? I'd rather have false positives than false negatives.

 

Thanks again.

Hi, Need2KnowNow. I also use Zemana anti key logger, and I can tell you it works !

 

It encrypts whatever you type. There is an Faq on their page which explains all. 

 

The AntiLogger is a behavior blocker. It monitors the ACTIONS performed by a program in real-time, and blocks it when it detects potentially malicious behavior.

Okay.  So let me get this straight.

 

1) Anti-keylogger protection (including that existing in Norton) encrypts what you type so that keylogging malware couldn't make use of that data, if it steals it. 

 

2) And since Norton doesn't offer this protection to computers running 64-bit OS's, we should get something like Zemana to add that missing layer.


Question: Am I correct to assume that, in the 64-bit case, although Norton won't conceal what you type from the prying eyes of keylogging malware, it will at least still be able to detect and remove it during a scan, right? 

 

In other words, Norton is just missing the encrypting function for typing for 64-bit machines, right?

Hi Inquirer:

 

My understanding is that Norton detects keyloggers as spyware.  Norton's Threat Explorer site has list of current spyware detections here that includes keyloggers such as Spyware.UltimateKeylog, Spyware.SuperKeylogger, etc., although there is no guarantee that Norton would detect 100% of all keyloggers.  Bombastus commented here that Norton has problems detecting some commercial keyloggers that should be caught by Zemana AntiLogger.

 

The support article here that Need2KnowNow mentioned in message # 1 refers to the Advanced Events Monitoring option that is only available when users turn off Automatic Program Control and choose to manually configure Internet access (allow / block) for every program that attempts to access the firewall. The comment "This category is not available if you use 64-bit version of Windows" under the section on Key Logger Activity does not appear in the support article here for NIS 2013 (which I accessed by clicking on the ? at Settings | Network | Smart Firewall in NIS v. 20.4.0.40) so I wonder if this is only an issue for NIS 2014 (v. 21.x) for 64-bit users that disable the Automatic Program Control of their Smart Firewall.

 

Just based on what I've read, my conclusion would be that even if Norton 2014 (v. 21.x) users with 64- bit Windows turned off the Automatic Program Control of their firewall, Norton's signature and/or heuristic (behaviour) based detection would still be able to catch a wide variety of keyloggers.

------------
MS Windows 32-bit Vista Home Premium SP2 * Firefox 27.0.1* IE 9.0 * NIS 2013 v. 20.4.0.40
HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400M GS

Thanks for the info, Imacri.

 

Is getting the "free" version of Zemana sufficient?  

 

I have the 2014 N 360 for 64-bit.  I haven't checked its support article regarding protection from keyloggers, but I assume it looks the same as the one for NIS.

Hi Inquirer:

I don't use Zemana AntiLogger, but it sounds like an excellent product and one of the Zemana users following this thread might be able to provide further insight. There is a product comparison chart comparing the features of free and paid versions here that might be helpful.  It looks like the free version includes keystroke encryption, so you would have to decide for yourself if it's worth paying for additional features like financial malware protection and Zemana's IntelliGuard realtime protection.


I forgot to mention in my previous post that there is a known bug in the NIS 21.x Advanced Events Monitoring option when users turn off the Automatic Program Control of their Smart Firewall - see Symantec employee Basil's post here regarding the upcoming patch.  I hope that bug fix eventually corrects the problem with 64-bit OS users being unable to monitor key logger activity, COM control, code injection and other Advanced Events Monitoring components listed in the Smart Firewall Advanced Settings support article here.
------------
MS Windows 32-bit Vista Home Premium SP2 * Firefox 27.0.1* IE 9.0 * NIS 2013 v. 20.4.0.40
HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400M GS

Hi,all. Fwiw, I leave my firewall protection on Automatic,and use the free version of Zemana Anti Key Logger.

 

It seems to work seamessly with Norton, and you can run a test on the site to check it's working, I believe.

Thanks, Imacri and F4E.

One other question.  If the machine runs 32-bit WIN7, would using Zemana cause conflict between it and Norton, since the latter's anti-keylogger protection would work?  Thanks.

It's possible. If you're running 32 bit, then as Imacri says, Norton has protection already.


Inquirer wrote:

 

If the machine runs 32-bit WIN7, would using Zemana cause conflict between it and Norton, since the latter's anti-keylogger protection would work?


Hi Inquirer:

There are multiple layers to Norton intrusion protection, and Norton's signature and/or heuristic (behaviour) based detection of keyloggers should function regardless of whether you have a 32-bit or 64-bit OS.  The failure of Advanced Events Monitoring to display a pop-up notifying you when your firewall is accessed by a keylogger is only applicable for NIS 21.x (2014)  running on 64-bit Windows when Automatic Program Control is disabled, but other features like Auto-Protect should still be able to detect keylogger activity on these systems.  I think the question is whether Norton can detect 100% of all keyloggers.

Just based on what I've read on the Zemana site, I don't think the free version of AntiLogger would cause any conflicts with Norton.  The free version doesn't detect keyloggers per se, but protects you by encrypting keystrokes so that anything you type can't be used by keyloggers that manage to evade your Norton security.  Note that the free version of AntiLogger does not protect you against SSL-sniffing malware like ZeuS that exploit a weakness on SSL‐protected secure sites (e.g., online shopping and financial sites) having URLs begin with https - only the paid version detects SSL sniffers.

The paid version includes heuristic-based realtime detection of keyloggers, so I would assume there is a potential for conflict with Norton's realtime protection.  Zemana has provided a list of compatible antivirus programs on the Compatibility & Requirements tab for the paid version here and they claim that Norton is fully compatible, so you would have to use your best judgement as to whether it would be safe to trust their testing methodology and run both Norton and the paid version of Zemana AntiLogger together in realtime protection mode.

The keylogger simulation test program that F4E mentioned can be downloaded at http://www.zemana.com/securitytests.aspx.  I would advise trying the simulation test before and after you install Zemana AntiLogger to see how well Norton performs on your system both by itself and in conjunction with Zemana AntiLogger.
------------
MS Windows 32-bit Vista Home Premium SP2 * Firefox 27.0.1* IE 9.0 * NIS 2013 v. 20.4.0.40
HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400M GS

Good advice, by  Imacri . The free version works by blocking bad behaviour, rather than heuristically.

 

The free version works fine with my Nis and has had no discernible affect on browsing, so I'd say go for the free version, if you have Norton 32 bit running.

 

More FAQ info here.  http://www.zemana.com/support/antilogger-free/?source=zalfree

Thanks, again, guys!

 

I'll go take a look at Zemana's simulation test page.

Imacri

 

Thanks for the zemana simulated test download.  I ran it on my Win 7 x64 PC with Norton 360 2013 (ver 20.4.0.40).  Detected the keylogger simulated threat.

I might be missing something here, but if Norton is working properly, do we really need an extra program?

 

Can anyone show me proof that Zemana / or others has stopped a key-logger that Norton would of missed?

 

I am open to new security tools, but I'm not going to install a redundant program if Norton is already protecting my back.

 

Thanks!

 

Edit : Thanks to @Scoop8  for proving my point.

Hi, Krusty13.

 

I had never heard of Zemana until two or three days ago, so obviously I can't give any proof of its effectiveness.  But based on what I've read here, the paid version Zemana can catch some keyloggers that Norton can't--namely, the commercial kind.  Now, that's the paid version.

 

All the free version does is it encrypts your keystrokes (see here), which I assume that Norton doesn't do.


Scoop8 wrote:

Imacri

 

Thanks for the zemana simulated test download.  I ran it on my Win 7 x64 PC with Norton 360 2013 (ver 20.4.0.40).  Detected the keylogger simulated threat.


Hi, Scoop8.

 

Please see my screenshot.  Is this what you saw when you ran the simulation test?  Especially, the alert that arrow #1 is pointing at, is that the correct response I should be getting from Windows?  Thanks!

 

Screenshot

 

Keylogger Protection.jpg

I just downloaded and ran their test and this is what Norton thought about it.

 

N360 blocking zemana test file.PNG

 

Filename: key_sim.exe
Threat name: Spyware.Keylogger
Full Path: c:\users\dave\appdata\local\temp\temp1_key_sim.zip\key_sim.exe

____________________________



Details
Unknown Community Usage,  Unknown Age,  Risk High





Origin
Downloaded from
 Unknown





Activity
Actions performed: Actions performed: 1



____________________________



On computers as of
26/02/2014 at 4:02:51 PM


Last Used
26/02/2014 at 4:02:51 PM


Startup Item
No


Launched
No


____________________________


Unknown
It is unknown how many users in the Norton Community have used this file.

Unknown
This file release is currently not known.

High
This file risk is high.

Threat type: Spyware. Programs that actively track and send personal or confidential information to third parties.



____________________________



Source: External Media



____________________________

File Actions

File: c:\users\dave\appdata\local\temp\temp1_key_sim.zip\ key_sim.exe Blocked
____________________________


File Thumbprint - SHA:
f2dfc05a5cde613eee3b060b3a5aa208d3cfb4555991e5cf5d6b30d725665abd
File Thumbprint - MD5:
Not available

 

... So I guess I will not be needing Zemana!

 


W7 SP1 x64

 

N360 v21.1.1.7