Keylogging Malware (keyboard, mouse, Windows, work)

[PawleysDude]

I was asked a question today that suddenly made me realize how little I know about how malware works. The question was "If my computer is infected with a keylogger trojan, but I always enter passwords, credit card numbers, etc by copying them from a document and pasting them into a website, can a keylogger still read the entries?"

I understand there's a risk in having this type of info saved in a document, but that's another issue. Anybody know the answer to this question? Thanks for your help.

[kazyn]

Most of them can't, no. However, some of the more sophisticated ones DO read your clipboard each time you copy and paste, to work around the work around.


Most current-gen keyloggers simply log keys. They're usually bundled with several other types of viruses to eliminate things like UAC and A/V programs, so that it can do it's job efficiently and without interruption.

[PawleysDude]

Thanks very much for both responses. Good stuff.

[reinvent01]

As of yet, even the most sophisticated malware cannot track mouse clicks. Most of the security pros I know don't cut and paste, they use virtual keyboards to enter in sensitive information.

One of the ways to severely cut back on malware if you're a Windows user is to use OpenDNS for your DNS settings. They block known malware sites and other noxious crap on the Internet.

[Brian.Pearson]

I use a program called KeyScrambler that scrambles what you type. A keylogger would read gibberish. It's just a precaution since my protective programs keep the bad guys away.