Bitcoin Forum

I've read about key scramblers do they really work? Any other software you guys can suggest...I already use malwarebytes as I heard great things.

No, key scramblers don't work. Anybody who tells you they do is wrong.

Take basic security precautions and you'll be OK. I've used Malwarebytes to help friends with virus removal before. It works.

You should be ok with mbytes its pretty good & effective against protecting youself just dont download stuff from untrusted sources and disable java script inside the browser.

well , at the risk of being obvious and I am not trolling you the best protection is not to allow a keylogger to be loaded /infect your system at all......

Use a service like LastPass.  Then you can "click" your password with a mouse instead of typing it in on a keyboard.

Does it hide the password (to prevent virus which record screen/take pics) ? Also does this just simply copy it to the clipboard because viruses can monitor copy & paste.

No, if you have malware that is monitoring the copy buffer and taking video, LastPass won't help you.

i suggest you always visit your task manager if there are unwanted programs or suspicious applications that are running on your PC. If you found something that is suspicious search that program or application if it is a malware or any virus.

this is right! my online banking uses this system to prevent 3rd party softwares to detect your password through typing in the keyboard

I think, linux is safe.

Someone must REALLY be working hard or you're really not taking necessary precautions if it gets to this point, though. Thanks for the information on LastPass, I'll have to check it out

Best answer in my opinion .. install a good firewall to prefent any keyloggers https://www.comodo.com/home/internet-security/firewall.php

And check your machine regular with https://www.malwarebytes.org/

If you want an keyscrambler http://www.qfxsoftware.com/support.htm (will only protect you from some attacks)

Common Sense 2014 edition
Malwarebytes
Sand boxing
Virtual Machines.

I would add NoScript for the browser. You can allow sites you trust to run scripts, and reduce the surprises from sites you don't. But it does take some time to get used to it.

If you use a virtual machine (using virtualbox or similar software) on a already infected computer willl it affect the virtual machine?

I'm considering using a virtual machine for logging into things for added security....plus installing all the anti virus on the virtual machine...what are the draw backs of runinng a virtual machine?

you can still get malware in the virtual machine lol

why not just boot on a different partition?

Last Pass is only for online by the way so your passwords would be stored on a online database rather than an offline like keepass

Can you install lastpass on Linux? (ubuntu)

Pen + Paper and a matchbook.

You still gotta magically import that data from your paper onto your computer without a keylogger fucking you which is impossible if you are infected with one. No matter what you do if you have a keylogger installed and you are not aware of it then you can't find a special way of inputing something....especially these devices which claim to be keylogger proof because you type through a external piece of kit...thats bullshit and acts the same as a keyboard.

You can only take precautions;

1. Anti Virus installed
2. Know what processors are supposed to be running. (clean install & note trusted programs which you install)
3. Install/download anything not from a legit source on a virtual machine through VMware or something similar.
4. Know your filesystem inside out.
5. Use a password manager such as lastpass...good for not forgetting passwords too and is very beneficial....everything is encrypted on sever side.
6. Download Noscript & httpeverywhere extensions & disable javascript on your browser.
7. Don't be a arsehole.

Yep! https://lastpass.com/misc_download2.php

Click on the Linux tab.

There isn't much that you can do once you are infected (there are rare options such as lastpass). The main thing is that you need to try protecting your devices so that they do not get infected by any malware/logger or anything harmful.

how does lastpass help?

I've been using LastPass for the past year and had no problems and it saves a whole lot of time and brain usage.

another alt account/sockpuppet

I have a question related to virus/key loggers and other 'dirty' software.

If I want to install Linux and I download it off the Ubuntu website...what if my windows computer is already infected? Will it affect the download of ubuntu? I'll be redownloading ubuntu soon & then burning it to a cd just wondering if I will be safe I plan on reinstall the bitcoin client as I've had trouble lately.

Dumb question  ::)


Sorry.

Works fine for me.

I'd recommend downloading a linux live cd / usb and boot from that exclusively when you want to transact with your coins. As long as the distro is safe you should also be fine. I'd avoid using a windows machine as it's just far too easy to get a virus these days even with a decent antivirus installed.

I've seen some scranbler software before but Im sure that it doesnt work because people who create the keyloggers and RAT's are very clever and ca easily decompile the scrambler and find out the algorithm being used to scramble data, and hence, scramblers wont work. I've seen someone say malware bytes works, yes it definitely works, I recommend you to use it. Also, try using Sandboxie while running unknown files though theres a method for anti-sandboxie.

just keep your system's anti virus fully up to dated.. and avoid downloading stuff from unknown sources

On screen keyboard stops key loggers from tracking your key strokes from what I know. You defiantly shouldn't try to do anything other than remove the virus if you believe you're infected though.

i always thought keyloggers use devices where its impossible to tell.

some forms being remote location.

On screen keyboard prevents nothing, well that's not 100% correct, it does prevent some keyloggers, but only the minority. For example, one that it's not immune against is a key logger which takes screenshots, which is common with most key loggers.

Well that is simple.
Step 1: Open Google
Step 2: Search for Lastpass
Step 3: View https://lastpass.com/

They've pretty much explained it. Your passwords are pretty much kept in the cloud only, this way you don't have to type them in and a keylogger can't do anything really. Now obviously storing everything in the cloud isn't secure, nor is anything for that sake 100%. Lastpass was even hacked a few years ago but they imminently notified anyone and forced a master password change if your stuff got accessed from another computer.

I prefer keepass over lastpass, although I only use them for low level accounts.

EDIT: I prefer to have keepass because it can be stored locally and isn't tied to the servers being up for it to function correctly.

You want to know how to protect yourself from keyloggers ?
Give a crap about firewall's warnings and google chorme's warnings about bad downloads and you should be fine and a simple anti-virus/malware should work.

screen recorder

wicked
i use a plugin in my browser, is this safe?

not if your computer is infected.

Dont use keyboard.. if your infected, you should just use a tablet, askin questions like this is tantamount to knowing the answer.. dont type.. ;)

If your 'infected', refrmat, since there are no secret's, and it's all, 'in the cloud'.. you'd surely have no problems retrievin your back up? haha..

Check running ports, use process view to see what's happening, cport's to see open ports when you click send, and pray it's not an ads stream, cause then your justified in thinking people can access what?

Keylogger's mean nothing when the gov record's anything, kinda shows ya the truth thatb there is no..

condom's ;)

Does anyone have experience with Trusteer Rapport?  :)

Try to avoid downloading things you dont trust for the internet first of all. Second make sure that you have a back up anti virus like AVG just incase you ever do accidently download something.

I know a lot of banks use it. It does help with security.

They claim that they will protect you from keyloggers at the same time that they increase safety with a bank account. Even if they do what they say in the best possible way, they could be stealing your info, themselves, for the NSA or something. Are they good guys?

:)

Anti virus's cannot, I repeat, CANNOT see ads, (ADS) stream's.. which, incidently, are attached to many files you take for granted.. NO anti virus WILL admit to being able to 'see' them.. keylogger's are nowt. ADS streams will always be prevailant in your pc, regardless of OS :)

What anti virus? I aint used one since '98, and never will

So what kind of security software do you use then?

How to protect from keyloggers?

Use touch screen instead. ;D
(or just don't use your computer)

Never ever download suspicious software, when in doubt, use a spare computer and sandboxie to run it.

I think he is not using any kind of security, he is just basically avoid download and suspicious website.

That doesn't have any affect whatsoever. Just because you don't have a physical keyboard doesn't mean you are immune to key loggers.  The on screen touch still shows the same data input & output as you would if you had entered the data as a physical keyboard.
You don't need to install anything to stop hidden downloads, so you don't have to clog up your computer with yet another anti virus. It takes around 3 lines of code to block downloads from anywhere, this code is external from the browser because, it means an attacker would have a far more difficult job turning it on/off unlike the ones that are located in some browsers. Of course as long as you are receiving data from being connecting to the internet you are still vulnerable.
He probably uses CS or what I like to call common sense, sometimes people touch on intelligence too, rarely but they do.
I'm unfamiliar with Lastpass these days, but you used to have to copy to the clipboard which indeed can be monitored by keyloggers. Also, the auto type which some offer I know keepass does can also be intercepted by keyloggers.

Conclusion: Password managers are basically for people who have a lot of passwords which they tend to forget (I do this all the bloody time) or people who want ease of use simply by coping it without having to type anything. Although, they do have some security with them, it's not 100% foolproof and relatively easy if targeted. All of them require either you copying to clip board, showing the password in plain text ( ???) or them auto filling for you, which can be captured.

-Use a Linux system.
-prevent hidden downloads.,
-Only use password managers for ease of use, don't store anything like bank accounts etc.
-Sure use a firewall & anti virus if you want and feel more secure.
-Don't download shit you haven't verified via certain methods. E.g: Checksum can be used in certain circumstances.
-No script, Http everywhere, flash disabled & java script turn off are all your friends.
-Set up a logging system, so you can monitor exactly what's going on & when things happened on your computer.
 

I personally use zemana antilogger with mbytes

Do not open suspicious emails.

http://security.stackexchange.com/questions/16903/does-anti-virus-security-software-protect-against-ntfs-ads

I'm sure there are more. It's only a feature of the NTFS filesystem (Windows), not every OS by the way.


Why would the banks steal your info if they already have it? Do you understand what the implications would be?

Do you trust your Firefox or Chrome or any other software on your computer not to be malware from the NSA? Why banks? Is it because of this "banks are evil" mentality that many bitcoin users have? If you don't trust it, learn to analyze the software.

I've used a similar system when I've run Windows in the past, pretty solid actually.

what if you run a password manager in a virtual box and copy & paste it onto your real box would that be more safe



I like the idea of password manager and want it to me as secure as possible so I don't get hacked!

There is malware that looks into your clipboard as well. Others have already mentioned it here. It might help a bit, but the best bet is probably to avoid getting infected in the first place.

So correct.

Security software..? Process Guard. On and off, simple. My isp is my firewall (I have a shell account).