Anti-Keylogger Software Oxynger Keyshield review

Martin Brinkmann
Oct 19, 2013
Security
|
7

Keyloggers -- programs that record key strokes -- come in many shapes and forms. From hardware keyloggers that get attached to the computer's hardware in one form or another over regular software keyloggers to programs that take screenshots or videos of the computer screen when there is activity.

While it may be relatively easy to make sure that no resident programs are running on your computer system, it is not that easy if you are using public computer systems or other systems that you do not have full control over regularly.

The best protection against keyloggers is to be careful about what you do when you are using a computer system. If you do not enter any confidential data using the keyboard, say your credit card number or login information, then there is nothing of importance to record.

Password managers for instance offer good protection against many forms of keyloggers, as they can log you in automatically without you typing a character into the login box.

But if you want better protection, you need to deploy specialized anti-keylogger software.

Oxynger KeyShield

Oxynger Keyshield is a virtual keyboard application with strong anti-keylogging capabilities. It is unfortunately only available for Windows 7 and later. In addition to that, it requires the Microsoft .Net Framework 3.5 which should be preinstalled on all operating system that it supports, and desktop composition on Windows 7.

A setup and portable version is available for download on the developer website. One could argue that the portable version is not really that if it requires the .Net Framework 3.5, but it comes pre-installed on all supported operating systems.

Random keyboard layout

The first thing that you may notice when you start the program for the first time is that it uses a random keyboard layout. While this means that it will take you longer to click on characters to send them to the application you want to enter them in, it is an essential protection against screenshot and video capturing keyloggers.

One could argue that a screenshot would still reveal what the user clicks on based on the position of the mouse cursor on the keyboard, but that is not the case, as KeyShield uses protection against these types of recordings.

You can test the basic functionality by yourself by trying to take a screenshot of the interface. You will notice that its interface is completely black on the screenshot, so that it is not possible to determine which keys have been clicked on.

That's the reason why you do not see anything on the screenshot of the application.

The random layout makes it quite difficult to type longer strings, as you won't find the keys on their default position. While that is quite ok for entering a username and password, or critical information such as your credit card number or bank account information, it has not been designed to enter larger strings comfortably.

Compatibility

As far as compatibility goes, it seems to work with the majority of input fields that you come across on your computer or the Internet. The developer website offers a list of compatible applications, but that is just a selection and not the full list of supported programs.

Keylogger protection

That's not the only protection though that its developers have built into the application.  According to the developer's website, it protects 100% against the following types of keyloggers:

  • Hook based
  • Kernel or driver based
  • API based
  • Hardware

Preferences

The program preferences provide you with a couple of interesting options.

Here you can enable the shoulder surfing protection, which disables the highlighting of keys on the virtual keyboard when you click on them.

Another option that you have is to disable the random keyboard layout, so that you can work with the default Qwerty layout instead. while I would not suggest to do so, as it may make you vulnerable against keyloggers that log the mouse position and events, it may make entering larger amounts of text more comfortable.

The program uses quite a chunk of memory while it is running: 31 Megabyte on my Windows 7 Pro 64-bit test system while running in the background.

Verdict

Oxynger KeyShield ships with a boatload of anti-keylogger features. While I cannot say anything about the real-world effectiveness of these protective measures, it appears to be a sophisticated program that has more to offer than most virtual keyboard / anti-keylogger solutions.

The screenshot / capture protection works well, as I was not able to take a screenshot of the program interface, no matter what I tried. The only thing that would work 100% is to take a camera and capture the monitor of the computer this way.

I'd probably wait until the program has been vetted by experts before you deploy it on your computer system or take it with you on trips.

Advertisement

Previous Post: «
Next Post: «

Comments

  1. dinadan said on December 30, 2023 at 1:18 am
    Reply

    I have happily used oxynger freeware portable v.110 for years.
    I recently visited the site in dec.2023. They are now at v.230.
    BUT- the freeware version does not have protection against
    Keystroke and Mouse logging anymore.
    So I will stick with v.110.

  2. convertvob said on October 28, 2013 at 9:17 am
    Reply

    Before I aways used SpyShelter. Thanks, I will have try, it’s free I like.

  3. hesterl said on October 28, 2013 at 9:11 am
    Reply

    I think all anti-keylogger program can not anti boss’ keystoke, if you detecte it , what shuld you do? Unintall it? I think you should forget this thing or leave away from the company.

  4. tor user said on October 28, 2013 at 7:07 am
    Reply

    Anything that says it guarantees 100% protection immediately gets an F in my book… I mean, that’s the surest sign of snake oil.

    1. Martin Brinkmann said on October 28, 2013 at 9:03 am
      Reply

      I do agree with that. May still offer solid protection.

  5. Hey guys said on October 20, 2013 at 2:29 am
    Reply

    Someone should test this versus the pentests like:

    http://www.zemana.com/LeakTest/keylogger-test.aspx

    Anyhow, this seems similar to other virt keyboards all of which were eventually bypassed. Be curious if this is actually different or at least requires high-level exploits and zero-days.

    The best anti-loggers or user setups tend to be a combo of things like secure input along with a HIPS.

    Anyhow, thanks, Martin–luvs ya.

  6. Arun said on October 19, 2013 at 10:51 am
    Reply

    Have you tired zemana anti logger free?
    Works great for me.

Leave a Reply

Check the box to consent to your data being stored in line with the guidelines set out in our privacy policy

We love comments and welcome thoughtful and civilized discussion. Rudeness and personal attacks will not be tolerated. Please stay on-topic.
Please note that your comment may not appear immediately after you post it.