Would I need an anti-keylogger for Vista?

July 5, 2008 7:37 PM

Would I need an anti-keylogger for Vista?

I do online shopping/banking/etc and I'm wondering how dangerous it is without an anti-keylogger on a Vista platform. I've already paid for one on an XP machine, but the company doesn't have a version for Vista. Before I buy another for Vista I'd like to know what the mefites think about this.

posted by gttommy to computers & internet (10 comments total)

Is this like the radar detector thing? Where police started getting radar detector detectors, and then the radar detector companies started making radar detector detector detectors?
posted by JakeWalker at 7:43 PM on July 5

I think that a company that makes an anti-keylogger has a vested interest in trying to scare the crap out of you so as to convince you that you need one.

Me, I didn't even know that such a thing existed. I've never felt any need for such a thing and still don't. I doubt you do, either.
posted by Class Goat at 7:54 PM on July 5

Why do you think there may be a keylogger on your PC? If someone can install a keylogger, they can install much worse; consider a more complete solution.

One solution is to use something like Knoppix; because it's loaded from a read-only CD, in its default usage, it can't be tampered with. (Note that one could still theoretically add a logger to your physical hardware layer, or intercept your TCP/IP connection upstream of your computer, but the first is more difficult to do, and the second is theoretically avoidable by using encrypted https communications.)
posted by orthogonality at 8:01 PM on July 5

I'll echo the sentiments of the other responders. You're being paranoid. Just practice safe net -- keep your OS security patches up to date, use anti-virus and anti-spyware software (there are many free and/or inexpensive options), and consider using Firefox.
posted by pmbuko at 8:27 PM on July 5

Iwas under the impression that most commercial antispyware software detected keyloggers. Perhaps I'm wrong.
posted by PueExMachina at 10:03 PM on July 5

I doubt you need anything outside the ordinary AV software. Vista also runs windows defender by default. Thats a lot of scanning right there.

I think companies that sell products to detect specific sub-categories of malware are really selling you snake-oil. Your AV software definition file should be able to detect these things.

What you should be doing is running as a limited user and not as an admin. Also avoiding the high-risk vectors of malware like cracked software and other shady p2p stuff.
posted by damn dirty ape at 10:23 PM on July 5

If you have one of the Vista home versions (likely "Home Premium") you really can't run as a non-admin. But whenever you or one of your application programs tries to do something that could compromise system integrity, you get prompted for it. You need to keep your eyes open and not get into the habit of routinely clicking OK on that popup.

Nearly always it's stupid and you should permit, but do keep an eye on it and exercise prudence.
posted by Class Goat at 11:11 PM on July 5

I only started using it a couple of years ago after a friend had fallen victim to a keylogger which somehow self-installed itself in the background. As a result some hack got his details and took his cash. Of course, I'm not so sure if something like this can still happen these days with banks more aware of online threats, and Vista being very secure.
posted by gttommy at 11:50 PM on July 5

Specific anti key-loggers, even free ones are a waste. They try to install themselves as keyloggers (more or less) to get in the way of other keyloggers. However a new keylogger can easily jump the priority queue and capture the keys before the prevention takes place. (Basically the last person to say "I'm first" gets the keystrokes.) No software can stop keylogging without disabling your keyboard.

And it would not stop hardware based keyloggers (that plug in the USB between your keyboard and computer, or one of these.) or ones that pick up keypresses from wireless and Bluetooth keyboards. Or any of the dozen other ways that they can capture your secret data before it leaves your computer.

The best solution is to keep your virus definitions up to date and quit downloading crap that you aren't 1,000,000% sure about.

IF you are concenrned about online commerece, make something like an Ubuntu boot cd
and do your online banking/buying from that. It only runs off of a CD (and isn't Windows) so you won't get a virus, but it won't block hardware based keyloggers.

Practice good computer hygiene and never worry about this.
posted by Ookseer at 11:53 PM on July 5

"somehow self-installed itself in the background."

That doesn't really happen. Be vigilant to pop ups and ads and know the difference between them and real system messages, and you shouldn't have to worry. The secureness of an OS means nothing if you start running programs and clicking "OMG you haz virus" popups...
posted by gjc at 7:45 PM on July 6