Re: Keystroke logger detection

I recently investigated a trojan that installed BPK (BlazingTools Perfect Keylogger) which proceeded to FTP the captured information to a site. Lovely little trojan.

BPK is regarded by many as one of the best keyloggers. It attempts to hide itself. And yes, it can hide itself quite well. Then again, a person with the right tools can easily see the process running. Using Task Manager on the victim Windows 2000 box showed no processes running. So in that regard, it hides itself well from the general computer user.

A couple clicks to www.sysinternals.com and a download of Process Explorer v5.25 exposed BPK, plus a lot of other valuable information. I recommend anyone doing any investigative work on Windows systems, download all of their MONitoring tools. Great stuff!

This is just my most recent experience with a commercial keylogger.

Your mileage may vary.

John Herndon
Security Consultant

• steve baker <stephenbbaker@hotmail.com> wrote:
  > My client has recently requested that we verify the security on each of our