I have a need to install keylogging software on a Windows XP machine. I hate to have to do this, but I've exhausted every other option to remedy the particular situation and unfortunately have to resort to this kind of action.
The problem is, I'm pretty ignorant of what "legitimate" keylogging software is out there and I'm hoping for some unbiased advice. Free and unobtrusive are the important parts for me. For the necessary time frame, I will disable the anti-virus and anti-spyware components on the target system.
Every site that I search for advice and reviews regarding Keylogging software either looks to be a potential scam, or the "review" is really just a list of download locations for trial software, presumably giving the reviewing website a kickback. Plus, due to the nature of keylogging software, I want to make sure I'm downloading or even buying a product that is legitimate (and from a legitimate company), and won't infect the target computer with unsanctioned spyware of it's own. Even searching for keylogging software seems to push me to the darker parts of the internet.
Any advice would be appreciated!
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Thanks for the update. I wasn't sure how much of a gray area it was on EE, and as an IT professional it really tastes terrible for me to even consider installing one, let alone asking for advice on which one is the "best". The use of the software is obviously a very touchy situation in my organization. I'll keep poking around and hopefully will be able to answer the question myself at some point.
To put it bluntly, I was hoping to extract the login credentials for a secure website that my problem user keeps visiting (and potentially posting sensitive information to). My intent is to log in as the problem user and determine the extent of the damage, if any. We've had issues with this user in the past so this potentially could be the "final straw". Direct questioning has yielded no results, yet the cache files and History show regular access.
I've never had to do anything like this before, so I'm just trying to figure out the most direct route to acquire the credentials. I'd be interested in exploring other options.
decker12,
In my old network security days, I was a big fan of 'iprism' an outstanding tool for monitoring all Internet activity - down to the click level.
You can have real-time monitoring - plus permanent logs of all activity - by user and by site.
Managed to put a couple of bad guys behind bars for some of the crap they were trying to pull.
If your bosses can spring for the money, it is an outstanding long-term investment.
Vic
Thanks Younghv, unfortunately those devices are way out of the budget for the problem. I was balking at the $59.99 price for some of the commercial software products I've already seen listed :)
I don't think the user is acting maliciously, he's just clueless in my opinion, and unfortunately is a family member in the organization. If our suspicions end up being correct, I'm confident that the family will deal with the problem on their level instead of dragging it through HR and legal.
>""In the old days, I also always had a big ol' First Sergeant who would handle this kind of thing 'off the books'.""<
:LOL:...Hey Vic, remind me to stay on your "good side" OK?
Why not just block the site? Although I would imagine he could log in from another computer off site? Wouldn't help you assess the damage but would at least block their future use on site there...just some other thoughts..
Blocking the site from the router would prevent future damage, but would also unfortunately tip the user off to the investigation. Then I suspect the user would just continue his practices off-site and we'd be back at square one, with no chance for damage control.
I'm not privy to all the details, I've just been given the task to figure out if this particular user is responsible for the information left on that website. While trying to obtain his credentials, I was unsuccessful with a few other methods (such as checking IE and Firefox's saved passwords and saved autocomplete stuff). But if anyone has some other tips or tricks not involving having to install key logging software I'd love to hear them!
I'm trying to remember some stuff from the old days.
There are a variety of "INDEX.DAT" (I think) file reader programs that will create a text display of all internet activity.
There are several locations on the hard drive where MS stores that file for every profile - some easy to find and some that are hidden pretty ingeniously.
Most users don't have a clue as to what is contained in an index.dat file and will not delete it - and even the smartest users don't know all the locations.
Monitoring software may be the best solution for this. It is not a hack. If company-owned (or with the permission of the owner), you can monitor anything you want. In a work environment there is no assumption of privacy, whether on the phone to a customer or with computer resources. Many companies draft company policy to this effect.
Take a look at SpectorSoft. They have standalone and enterprise versions. You do not need to log in with user's credentials...which is a different issue than monitoring your own computing resources. The monitoring software can log keystrokes, application usage, http activity, ftp, chat, printing, etc. Also helpful are timed screenshots that you can play back like a VCR.
I've used the software before, and it actually helped track the source of a virus infection, right down to the user, computer, email, and action performed to cause the infection.
Nothing underhanded about it. SpectorSoft is a legit company I've done business with for several years and two version upgrades.
Regards,
Alan
Business Accounts
Answer for Membership
by: younghvPosted on 2008-03-05 at 04:48:13ID: 21049760
decker12,
You probably aren't going to get many responses to this question, because it is close to (if not actually) a violation of EE rules.
There is a whole section in the member agreement on 'hacks/cracks', etc. and the whole keylogging process gets into legal ramifications that are way too complicated for easy discussion.
Not what you wanted to hear, I'm sure, but the proper answer is: "We can't really talk about it here".
Vic