Is there any util that can be used to detect key loggers? (net cafes)

lmfy2k · 3 Dec 2007 at 08:37

Hi guys

odd request here, im due to be going into Asia for a few weeks on a holiday

i plan to use some net cafes while im there, im a bit paranoid about key loggers on the computers that they may have installed!

im taking my usb pen drive with me, is there any small util i can use to see if there is any key loggers installed on the PC that i may use?

for general surfing, i point mind, but when i use hotmail, and my isp webmail

thanks

eXor · 3 Dec 2007 at 08:44

Utilities won't detect all keyloggers, especially custom ones.

You could always use a virtual keyboard. Just make sure there are no shoulder surfers nearby.

mattyfez · 3 Dec 2007 at 09:05

Just out of interest, would the onscreen keyboard in windows accessibility work the same or would a logger still pick it up?

Burnsy2023 · 3 Dec 2007 at 10:11

Windows VK would be fine, as long as you're using a mouse, they can't tell what your writing.

Burnsy

MarcLister · 3 Dec 2007 at 10:17

Haha a mate of mine is going on a year long backpacking trip to Asia next year after he finishes his degree. Hmm should I warn him about this?

Rhys · 3 Dec 2007 at 10:42

Cant you install an OS on the usb key and boot from that?

Burnsy2023 · 3 Dec 2007 at 10:43

Rhys said:
Cant you install an OS on the usb key and boot from that?

But you might not know proxy setting and other network config.

Burnsy

mattyfez · 3 Dec 2007 at 15:53

Burnsy2023 said:
Windows VK would be fine, as long as you're using a mouse, they can't tell what your writing.

Burnsy

What about a software keylogger, do they just rely on KB input like a hardware-plugtype logger would?

GarethDW · 3 Dec 2007 at 16:10

Burnsy2023 said:
Windows VK would be fine, as long as you're using a mouse, they can't tell what your writing.

This isn't strictly true. There are keyloggers in the wild that also use screen scraping to circumvent virtual keyboards. Here's an example of a real life one: http://www.hispasec.com/laboratorio/troyano_video_en.htm

Uhtred · 3 Dec 2007 at 16:10

I thought even virtual keyboards were at risk from key loggers the same as 'real' keyboards? Perhaps just take a notepad file with my username and copy/paste that into the username field, then type the password (so that if your usb drive gets lost your details can't be stolen that way)

GarethDW · 3 Dec 2007 at 16:11

mattyfez said:
What about a software keylogger, do they just rely on KB input like a hardware-plugtype logger would?

Only very basic ones hook onto keyboard input... any keylogger worth its salt will trap all I/O. I'd never use a net cafe for online banking or anything other than trivial browsing.