KeyScrambler (2.5) - first impressions

Question

I noticed (on Calendar of Updates) one of the programs updated yesterday was KeyScrambler, by QFX Software. http://www.calendarofupdates.com/updates/index.php?s=7eafcc2e15c4125473193ab9d8284b48&act=calendar&cal_id=1&code=showevent&event_id=59258 I had never heard of this program previously... seems it's relatively 'unknown' (or perhaps i should say, apparently hasn't gained much popularity). IF ANYONE HAS FIRST-HAND EXPERIENCE WITH IT, PLEASE FEEL FREE TO REPLY WITH MORE DETAILS. What it is:   KeyScrambler (I'm describing only the FREE/PERSONAL version here) is an add-on for IE and FireFox (and Flock, whatever that is) which purportedly offers a major degree of protection against keyloggers.    I say 'purportedly',  because I am not in a position to confirm just how reliable, or absolute, such a claim is --- I will leave that to others, if they're in a position to elaborate. What it does:   Basically, it 'scrambles' anything you type-in at your keyboard, so that any (software) keylogger present on your machine will only intercept the scrambled [garbled] keystrokes.   It then unscrambles the keystrokes just in time for IE and Firefox to properly understand them. How it works:   The theory is that KeyScrambler installs a system driver at the kernel-driver level, allegedly before any (known) software keyloggers can gain access to your original keystrokes --- so that by the time a keylogger 'sees' anything, it's already encrypted.   Note that such protection is intended to combat a software keylogger, but not a hardware keylogger that's physically installed on your system.   However, hardware keyloggers tend to be rare, so...   Moreover, it's theoretically possible that newer software keyloggers may someday be developed that place themselves even deeper into your system, before KeyScrambler can do its job.   While there allegedly aren't any at present, this is certainly a caveat to keep in mind. Here's some more detailed/technical information from QFX:  'We have tried to encrypt the keystrokes as early as possible and decrypt them as late as possible. This means that keyloggers are deprived of all the usual channels that they use for snooping on keyboard traffic. That's why KeyScrambler works against keyboard hooking, window message hooking, kernel API hooking, DirectX snooping, GetKeyState, GetKeyboardState, GetRawInput, and many other less well known methods'. Why is this important/valuable?:  Anyone doing any sensitive transactions over the internet --- buying/selling, accessing bank / credit card accounts --- is [hopefully now] protected against their information being intercepted by a keylogger. Video Presentation:  Watch their video by scrolling-down toward the lower left section here:   http://www.qfxsoftware.com/index.html Download:   the FREE/PERSONAL version from http://www.qfxsoftware.com/Download.htm                [ Supports Windows 2000, 2003, XP, Vista (32-bit and 64-bit) ] Installation:   Was direct and simple.   In my case, it determined that I had IE and Firefox (but not Flock) on my PC, and pre-selected these two browsers to continue its installation.  It places a BHO (Browser Helper Object) in Internet Explorer, and prepares to place an add-on in Firefox --- which the user must confirm.   A reboot is required. Running:   I was concerned about KeyScrambler auto-booting, as is described in some of their documentation.   Perhaps that applies to the paid versions.   Suffice it to say, KeyScrambler PERSONAL does NOT auto-boot with Windows...  neither as a program nor any service.  However, whenever you open either IE or Firefox (or Flock), a 'K' icon will appear in your system tray.   Initially yellow while IE or Firefox is loading, it will turn to green to show these programs are protected.   All keystrokes typed ANYWHERE into these browsers --- whether at the address bar, Search field, or elsewhere --- including typing-in a post like this at Dell, or composing your e-mail --- are scrambled.   [Mouse clicks and movements are apparently not... and I have no idea whether or not it masks 'paste'-operations.]   Upon closing that browser, KeyScrambler knows to shut itself down (i.e., its icon is removed from your system tray).   Note:   If, while IE or Firefox is still open, you switch to another application (for example Opera or Word), the 'K' icon will switch from green to yellow, indicating that KeyScrambler is NOT protecting you in this other application.   It will turn green when you go back to your IE/Firefox window.  [If, for whatever reason, you wish to 'turn off' keyscrambler while these browsers are open, the 'K' icon will indicate this by turning red.] Appearance/Options:   Keyscrambler is potentially noticeable in two ways:   There's a 'K' icon in the system tray.   And when you begin to type, a 'Keystroke Encryption' bar appears in one of the four corners of your screen (user choice which corner); the bar will fade/disappear after 4 seconds of inactivity.   You can access the options in 3 different ways:   either 1) by RIGHT-clicking on the 'K' icon in your system tray and selecting OPTIONS, or 2) by LEFT-clicking on the 'wrench' icon while the encryption bar is displayed, or 3) via the TOOLS menu in IE/Firefox.   The most valuable option screen is the DISPLAY, which allows you to place the 'encryption bar' in the corner of your choice --- or to suppress it entirely (by selecting the tray icon only). Invasiveness:   If you opt for only the tray icon, it's completely non-invasive.   The encryption bar, if used, is only minimally invasive (small corner), and as stated above, can be placed in the corner of your choice, to minimize such invasiveness. My testing so far:   I've just installed it on a Win XP SP3 system [running Avast antivirus, and Comodo 2.4 firewall], in both IE8 and Firefox 3.5.2 , without noticing any slowdowns, complications, unexpected side-effects, nor crashes in these applications (at least not so far).   In short, nothing negative to report. My thoughts:   As for any 'positive', the fundamental question still remains:   does it really do what it claims, or is it all a bunch of hype --- offering only a false sense of security???   IF (and that's a really big IF) it really does what it claims --- scramble your keystrokes BEFORE a keylogger can access them --- then this would seem to be a wonderful security addition to your IE/Firefox browsers --- even if it turns out that it protects against only 'many' (but not all) keyloggers.  I'm hoping BB (or some other security expert) might be able to offer some insight here.   For what they're worth, here's a link to some other reviews/testimonials:  http://www.qfxsoftware.com/press_makingnews.htm#reviews Another caveat:   While this program might be helpful in 'defeating' keyloggers, I have no idea whether or not it offers comparable protection against tracking of your wirelessly-transmitted data, especially if you're using a non-secure public wi-fi access point... that is to say, will a (wireless) hacker also see only the encrypted keystrokes, or will he/she have access to your original keystrokes??? Final comments:   there are two paid versions ['Professional' and 'Premium'], which offer protection in other programs (e.g. WORD, MONEY).   But I am not considering/trying paid versions here.  For those who wish to see the additional products covered by these, see:  http://www.qfxsoftware.com/products.htm

joe53 · Answer

Thanks for that nice review, ky331. Sounds like a potentially useful tool. I'll be interested in what others have to say about it.

control_tps · Answer

Ky331, Thanks for  another great info.  I have KeyScrambler on my PC right now.  Also, I have read about this on the Wilders Security Forums.  I have the free version, which asked you to check out, 'What's new with the new KeyScrambler,' everytime you go on-line.  Free software is good after all.  Many Thanks, control_tps

mona7865 · Answer

Ky331, I installed Keyscrambler Professional a couple of months ago after reading about it on BlueMedicine forums (Dutch security website).  I haven't encountered any problems with it so far and this new version now encrypts numbers as well (which the previous version didn't).  Since I also use my Dell Inspiron for work related issues and online banking, I thought it might give that extra bit of protection (at least it gives me a 'safe' feeling) and, as you stated, it doesn't slow down my laptop at all. :emotion-1:

ky331 · Answer

control_tps wrote:  I have the free version, which asked you to check out, 'What's new with the new KeyScrambler,' everytime you go on-line.  The 2.5 version I'm testing/using tried to open my default browser the first time it ran, as the product was being installed.   It has not attempted to open my browsers after that.   Perhaps you're using an older version, which is checking for [and found] the new version, and is trying to offer it to you?   if so, consider the following: 1) if you're happy with your older version, you can 'tell' keyscrambler not to check for updates.   open its OPTIONS panel, the GENERAL tab, and UNcheck the box marked Automatically Check for New Versions.   Click OK, and see if that makes a difference. (Note:   in my case, with the newest version, both IE & FF are simply taking me to my home page, regardless of whether or not KeyScrambler's Auto.Check is enabled.) 2) if you have an older version, perhaps updating to the newest will make a difference.

Bugbatter · Answer

Courtesy of The Washington Post and Sophos: Funny blog on expiring passwords http://bit.ly/14J8OJ and some sensible advice that includes a mention of KeyScrambler  http://bit.ly/iTsgz

ky331 · Answer

BB, I played the video at the second link (which I had seen previously)... I heard it mention KeePass , but didn't hear anything there about KeyScrambler.

Bugbatter · Answer

I thought he did -- maybe not? That's what I get for multi-tasking while listening to those things. :emotion-4:

control_tps · Answer

Sadly, I took out the KeyScrambler from my PC, because I wast not able to go on-line. Now, I am able to go on-line again after removing the KeyScrambler. I don't know what happened.

My securities protection: Norton 360:v3 Suite, WD, Spywareblaster, SAS, MBAM, GeSwall, WinPatrol, and CCleaner.

dalem29 · Answer

I installed it yesterday and am still learning about it. The encryption bar is not displaying as I type this post, nor when I go to my bank site and start typing. The tray icon didn't display until I went to another program temporarily, but it is down there now and I assume it is working in the background even when not displaying.

OK...changed the setting to lower left while on this page and it stated "this program is protected". Not sure why it won't display on my bank's site.

ky331 · Answer

Dale,

first, check keyscrambler's options/DISPLAY. there are 3 choices:

topmost: display (ONLY the) overlay window [encryption bar], in the corner of your choice

middle: display (ONLY the) tray icon

bottom: display BOTH (overlay window, as well as tray icon)

---------------------

it's working for me, at secure (https:) sites like my bank, as well as non-secure (http:) sites like the dell forum.

whenever the overlay window [encryption bar] is used, the encrypted keystrokes appear in that window. when ONLY the tray icon is used (without the overlay window), the keystrokes appear in the tray icon.

---------------------

and while i doubt this is the issue, since this is a new program for most of us, let me stress that the free version works only with IE and FireFox (and Flock), but not with other programs. So for anyone using Opera, Chrome, Safari; WORD, Money; various instant messengers; &etc.; there is no protection [from the FREE version].

ky331 · Answer

control_tps,

I must admit being puzzled by your seemingly contrary posts... in the first, you wrote that you "have KeyScrambler on my PC right now", and are apparently (connecting to the internet) using it... whereas in the second, you indicate that you were "not able to go on-line" until "after removing the KeyScrambler". Which is it? Or were you able to go online with it for a while, but then something happened to stop it?

Looking at your security configuration, I also use WD, Spywareblaster, SAS, MBAM, WinPatrol, and CCleaner, so these defenses should not be culpable. I have avast (rather than Norton 360:v3 Suite), but I doubt the anti-virus component is the problem either. [Perhaps firewall permissions?]

I do not have/use GesWall. But if if had to guess, that could possibly be the source of the conflict: do you have to allow permissions in Geswall? (Again, I'm just speculating here).

Do you have a browser other than IE and Firefox on your system? for example, Opera? If so, can you go online with Opera (since that is not impacted by the Free version of KeyScrambler)??

------

By the way, since the issue of potential conflicts has been raised, it's more likely that the PAID versions of KeyScrambler --- which I believe include executables that auto-run at start-up --- may have more potential to conflict with the likes of GesWall (or SandBoxie)... or perhaps with a third-party firewall (until permissions are granted). Since I'm not using the paid version, I can't speculate any more about it.

That's one of the reasons why I carefully noted my particular security configuration (Win XP SP3 system; running Avast antivirus, and Comodo 2.4 firewall), and browser versions (IE8, Firefox 3.5.2) --- because I can't make assertions about problems/conflicts outside of my personal testing. Each user will have to investigate any issues/conflicts they might confront, and hopefully resolve them satisfactorily.

mona7865 · Answer

Ky331, KeyScrambler Professional also works with Safari (which I'm using as I'm typing this). Thus far, I haven't noticed any conflicts with any of the security programs installed on my Dell (Online Armor Premium firewall, AVG suite 8.5 (paid version), MBAM with real time protection, WinPatrol, Spywareblaster and Windows Defender, HostMan). The only time I had to disable KeyScrambler was when my little niece wanted to play an online game from Studio 100 (especially for children).

I have the free version installed on a HP mini PC (which I won through a competition) and I haven't noticed any conflicts either (it also has OA Premium, Avira Antivir free, Windows Defender, MBAM with realtime protection, WinPatrol and Spywareblaster).

For creating the most amazing passwords, I'm using Roboform, which, as far as I can tell, doesn't conflict with any of these programs either. Roboform doesn't work with Safari though.

Hope this has been of help.

ky331 · Answer

Dale, MSN explorer is Microsoft Network Explorer, which is another alternative browser.   the free version of KeyScrambler does NOT work with MSN... for that, you'd need to upgrade to a paid version (either professional or premium)... but only you can determine if it's really worth it to you.  (I think we need to learn more about just how truly effective KeyScambler is in thwarting keyloggers, before i'd invest any money in it). as far as I know, anything you access via MSN Explorer should also be accessible via INTERNET Explorer (or Firefox).   you just have to type-in the appropriate URLs, and bookmark them in your favorites.   for example, you should be able to access your HotMail account in IE by going to www.hotmail.com which actually has been updated/replaced with WindowsLive. you should be able to directly access the dell VIRUS/SPYWARE forum by going to http://en.community.dell.com/forums/3522.aspx or the 'general' dell forums by http://en.community.dell.com/forums/ and likewise, whatever your bank site is, you should be able top copy/paste its URL into IE7 as well.

dalem29 · Answer

OK, I think I know what is going on here, but not sure what to do about it.

I have two Explorers...

MSN Explorer 9.60 through which I access the Internet and it includes an MSN Hotmail account which I have had for years. The Dell Forums is accessed from MSN, and while here on the forum the tray icon is yellow, and hovering the mouse over it says that this application is not protected. This MSN program has a favorites list which displays toward the center of the screen, and on which I have my bank/credit union account. While there it shows as not protected.

Then I have Internet Explorer 7 (haven't got around to changing to IE8 yet). Here the favorites list is vertically displayed on the left side of the screen. This program is shown as protected and at some sites on it where I post messages then the scrambler at work is displayed. I am not sure if it has an email application or not. I guess the solution is to just change my banking site over to IE7 since that is only one I am concerned about. I haven't read all the verbiage about how to get MSN Explorer protected, or if it can even be done. This is probably clear as mud but might be useful to other MSN users. I see how the Keylogger works, will just have to adjust from where I access the sensitive stuff.

EDIT: Read the previous posts more throughly and now see where it says that anything opened in IE7 will be protected.

ky331 · Answer

Mona,

thanks for sharing your first-hand experience. I've only been using KeyScramber for a few days now... you've clearly been using it much longer. I'm hoping others with experience --- be it good or bad --- will offer their comments/criticism here as well.

combining your information with mine, we can now assert that KeyScrambler, free and professional, is/are compatible with:

anti-virus: avast! 4.8 (free); AVG Suite 8.5 (paid); avira antivir free

real-time anti-spyware: WD; MBAM

firewall: comodo 2.4 (free); online armor premium

others: WinPatrol (free); SpywareBlaster

Virus & Spyware

Ky331,

Thanks for another great info. I have KeyScrambler on my PC right now. Also, I have read about this on the Wilders Security Forums. I have the free version, which asked you to check out, "What's new with the new KeyScrambler," everytime you go on-line. Free software is good after all.

Many Thanks,

control_tps

Was this post helpful?