Can keyloggers store your wallet password if you use on-screen keyboard?

[20kevin20]

Since today I'm going to be more careful at threats that could steal my passwords such as keyloggers and other viruses, so I was just wondering.. Can a keylogger store the password you're inputting from an on-screen keyboard (the Windows one)? If yes, which softwares are you using to make sure there's no possibility for your wallet password to be stolen?

[raphma]

A few keyloggers have a system to take screenshots when you are using on-screen keyboard(or those sites where they give you a little numpad and you have to click the numbers)
just be careful, keep your system clean and if possible use linux (vm can help with that)

[20kevin20]

A few keyloggers have a system to take screenshots when you are using on-screen keyboard(or those sites where they give you a little numpad and you have to click the numbers)
just be careful, keep your system clean and if possible use linux (vm can help with that)

Thank you for the reply. I've got Malwarebytes, BitDefender, Trojan Killer, AntiLogger and a few more apps I'm scanning my system daily with but you never know when you can get a new keylogger/virus that will steal all your funds...

[yayayo]

I think it might thwart the operation of the more simple keyloggers. However more sophisticated malware will do screenshots or monitor your mouse movements as well. After all, graphical password entry is part of quite a few significant online banking front-ends, so malware developers will be aware of the possibility.

Thank you for the reply. I've got Malwarebytes, BitDefender, Trojan Killer, AntiLogger and a few more apps I'm scanning my system daily with but you never know when you can get a new keylogger/virus that will steal all your funds...

Adding multiple virus scanners will not significantly increase your security, but primarily slow down your system. There is no 100% security, but the most important contribution is user behavior when doing things online. Not visiting questionable sites and not downloading files or opening attachments from unverified sources is a huge contribution to security.

But if you have a larger amount of Bitcoin that you do not need for daily purchases I would strongly recommend using paper wallets for long term storage.

ya.ya.yo!

[TraderETH]

I think yes keyloggers are proggram for record our typing on keyboard and some people use Linux as system operating because there are not keyloggers for Linux. But Linux is not userfriendly and not familiar for mostly people.

[BitcoinNewsMagazine]

Paper wallets are inferior to hardware wallets.

[20kevin20]

I think it might thwart the operation of the more simple keyloggers. However more sophisticated malware will do screenshots or monitor your mouse movements as well. After all, graphical password entry is part of quite a few significant online banking front-ends, so malware developers will be aware of the possibility.

Thank you for the reply. I've got Malwarebytes, BitDefender, Trojan Killer, AntiLogger and a few more apps I'm scanning my system daily with but you never know when you can get a new keylogger/virus that will steal all your funds...

Adding multiple virus scanners will not significantly increase your security, but primarily slow down your system. There is no 100% security, but the most important contribution is user behavior when doing things online. Not visiting questionable sites and not downloading files or opening attachments from unverified sources is a huge contribution to security.

But if you have a larger amount of Bitcoin that you do not need for daily purchases I would strongly recommend using paper wallets for long term storage.

ya.ya.yo!

Having multiple virus scanners won't slow down my system, or at least it's not noticeable for mine. I know there's no 100% security, this is why I said you never know when you can get infected. I'm usually sending the suspicious files/websites to a few antivirus/malware research labs, waiting for their reply after a detailed look before accessing them.

[talkbitcoin]

....
Having multiple virus scanners won't slow down my system, or at least it's not noticeable for mine. I know there's no 100% security, this is why I said you never know when you can get infected. I'm usually sending the suspicious files/websites to a few antivirus/malware research labs, waiting for their reply after a detailed look before accessing them.

it is not only about speed multiple virus scanners can even interfere with each other's work. and i don't really think it is going to make any difference to have multiple of them installed as long as you are online.

and to answer your main question i have to say yes they can because they also take screenshots on each click.

....there are not keyloggers for Linux. ....

are you sure about that?

[yayayo]

Paper wallets are inferior to hardware wallets.

I'm not surprised at all to read that from someone who promotes hardware wallets...

However the article you linked does not contain valid arguments for the claim that paper wallets are less secure than hardware wallets. The fact that users might loose funds if they fail to consider that Bitcoin Core generates new change addresses when spending fractional amounts from an address has nothing to do with the security of paper wallets as a store of value.

What the article fails to mention is that hardware wallets have (besides their cost) the significant disadvantage of creating an additional dependency for the user: If the hardware device fails, the user will need a replacement from the manufacturer. The same applies for any web services offered in connection to the device. What if the product / service is ceased? The recovery process will be very complicated.
Also the use of hardware wallets becomes a bit absurd, if you have to write down a recovery seed on an additional paper note...

In addition, the user has to trust the manufacturer / service provider that there are no hidden backdoors.

ya.ya.yo!

[ArticMine]

Just replace Microsoft Windows with GNU/Linux to mitigate this risk by several orders of magnitude.

[ethereumhunter]

geezzz if you install many antivirus, then they can work properly. some antivirus would detect the other antivirus as virus because the engine of antivirus is different than others.

better you have install one, then you can use antispyware. i think its enough.

[pandalion98]

A few keyloggers have a system to take screenshots when you are using on-screen keyboard(or those sites where they give you a little numpad and you have to click the numbers)
just be careful, keep your system clean and if possible use linux (vm can help with that)

Thank you for the reply. I've got Malwarebytes, BitDefender, Trojan Killer, AntiLogger and a few more apps I'm scanning my system daily with but you never know when you can get a new keylogger/virus that will steal all your funds...

This is the absolute worst thing I've seen so far.

1. C O N F L I C T S - The antivirus would see the other antivirus as a virus, and vice versa.
2. System load - more than one antivirus is just... No. It will also be worsened by #1
3. Blatantly unnecessary - An antivirus usually detects 99% of malware. Also see #1 and #2.
4. Infinite-loop quarantine - When an antivirus quarantines a file, the other antivirus grabs the quarantined file. The first one detects this and takes the file from the second antivirus. The cycle repeats. Results in #2

Just... Don't for the love of god.

[greyhawk]

Most anti-virus companies share the same virus definition databases. The different scanners are 99% identical. There is little benefit to running many different ones on the same machine. I recommend you use an anti-virus that has some kind of real-time scanning and doesn't put significant loads on your computer or compromise your privacy by sending significant amounts of data back to the publisher. The Windows defender built into Windows 10 is probably the best really as its extremely lightweight and has real-time scanning. In any case anti-virus protection is reactive rather than proactive, keeping your software up-to-date and not clicking on suspicious links or downloading suspicious files is much more important than an anti-virus.

About your question of on-screen keyboard. That may work against some fairly basic keyloggers, but absolutely will not against more advanced ones. The main thing is to try avoid getting infected with a keylogger in the first place by practicing good security practices. Once your machine is infected then you are kind of screwed as the malware could potentially do anything you can think of and may be almost impossible to detect or remove.

[helloeverybody]

As has been already posted some keyloggers will take systematic photos every now and then but it will still struggle to capture any input from your on screen keyboard that way.  the anti keyloggers can be handy but also make sure you dont save any passwords in firefox or any other browsers, Its a rookie mistake that any hacker will look for first. id recommend throwing in noscript as well just for good measure, it can save you from a world of pain.

If your unsure if your infected then i find antimalware bytes and then a check with hijack this usually finds most things lurking. Your safest option would be to ditch windows altogether though, It just depends how paranoid you are, i doubt you could ever get hacked using a persistant version of tails but maybe thats a bit extreme for using everyday.

[RoommateAgreement]

Just replace Microsoft Windows with GNU/Linux to mitigate this risk by several orders of magnitude.

this is not as easy as you may think for someone who has no experience working with linux.

as a linux newbie i have been trying to migrate from windows to linux for a while now and i have to say, it is a hard transaction because things are different and i need to learn a lot and i encountered a lot of problems in the process.

[RodeoX]

As mentioned, most can't because a software key is just a click on the screen and what letter was pressed at that spot on the screen is not available.
But I would like to mention that there is another way to log keys even if the computer in not on a network. Each time a key on the keyboard is pressed it "bleeds" a little electromagnetic energy. The signature of that energy is different for each key and with a sensitive antenna one can read the keystrokes at a distance. Combine this with a directional antenna, like a Yagi, and you can read everything at a surprising distance.

[socks435]

I think it might thwart the operation of the more simple keyloggers. However more sophisticated malware will do screenshots or monitor your mouse movements as well. After all, graphical password entry is part of quite a few significant online banking front-ends, so malware developers will be aware of the possibility.

Thank you for the reply. I've got Malwarebytes, BitDefender, Trojan Killer, AntiLogger and a few more apps I'm scanning my system daily with but you never know when you can get a new keylogger/virus that will steal all your funds...

Adding multiple virus scanners will not significantly increase your security, but primarily slow down your system. There is no 100% security, but the most important contribution is user behavior when doing things online. Not visiting questionable sites and not downloading files or opening attachments from unverified sources is a huge contribution to security.

But if you have a larger amount of Bitcoin that you do not need for daily purchases I would strongly recommend using paper wallets for long term storage.

ya.ya.yo!

Having multiple virus scanners won't slow down my system, or at least it's not noticeable for mine. I know there's no 100% security, this is why I said you never know when you can get infected. I'm usually sending the suspicious files/websites to a few antivirus/malware research labs, waiting for their reply after a detailed look before accessing them.

I think better to use top 10 user friendly anti virus which is kaspersky i use this anti virus since 2010 and i think they are already upgrade that they can also protect your crypto currency wallet.. almost all virus he can scan it.. and remove it.. just install kaspersky in newly install os and clean before you can start installing your wallet and all needed with you computer..
Malwarebytes bitdefender and trojan killer and antilogger can be use only if you computer is already infected if your computer is already clear using those tools better to install right now total security also install the plugins in your browser with kaspersky that can protect your login details while you are login like paypal..

[Kprawn]

I just use a separate computer with a clean bootable OS to access my wallets and not the computer I use on a daily basis. They will target the computer you use daily, because it's online most of the

time, giving them time to bypass conventional attempts at stopping their attacks and injecting their malicious code. Another thing to do, is to put honey traps up for them... once those are triggered,

you would know if someone is watching and recording your travels on the internet. Do not waste a lot of money on AV software, because none of them are 100% bullet proof. 

[20kevin20]

A few keyloggers have a system to take screenshots when you are using on-screen keyboard(or those sites where they give you a little numpad and you have to click the numbers)
just be careful, keep your system clean and if possible use linux (vm can help with that)

Thank you for the reply. I've got Malwarebytes, BitDefender, Trojan Killer, AntiLogger and a few more apps I'm scanning my system daily with but you never know when you can get a new keylogger/virus that will steal all your funds...

This is the absolute worst thing I've seen so far.

1. C O N F L I C T S - The antivirus would see the other antivirus as a virus, and vice versa.
2. System load - more than one antivirus is just... No. It will also be worsened by #1
3. Blatantly unnecessary - An antivirus usually detects 99% of malware. Also see #1 and #2.
4. Infinite-loop quarantine - When an antivirus quarantines a file, the other antivirus grabs the quarantined file. The first one detects this and takes the file from the second antivirus. The cycle repeats. Results in #2

Just... Don't for the love of god.

I'm not running all of them at the same time. BitDefender is the one running 24/7. Trojan Killer can only run in Safe Mode, where I disable all the other apps. AntiLogger has just the keys encryption turned on, and I got the free version of MalwareBytes which doesn't offer real time protection. The free version requires you to start the scan, it doesn't start automatically. I've never had problems with them running together like laggs, freezes or anything else. And before I heard of TrojanKiller I used Kaspersky, then I moved to AVG, and then to BitDefender. None of them found a virus on my PC, TrojanKiller did. I know about antivirus conflicts. When you install one of the ones I got and you have a conflicting software, they will ask for your permission to uninstall it.

[GreenBits]

Yes. There are keyloggers that will detect OSK (on screen keyboard) entries, as well as keyloggers that copy and cache the contents of your clipboard, should you try to cut and paste from a document. Always use a secure terminal or device for any sensitive bitcoinery.