Hardware Keylogger User Guide - KeyGrabber USB

Hardware Keylogger User Guide - KeyGrabber USB
KeyGrabber USB
User’s Guide
KeyGrabber USB
16 MB / 2 GB
inc. Mac Compatibility Pack (MCP)
Check http://www.keelog.com/ for the latest version of this document.
1
Copyright © 2016 KeeLog
KeyGrabber USB
Table of contents
Table of contents.............................................................................................................. 2
Getting started ................................................................................................................. 2
Introduction ...................................................................................................................... 3
About the product ......................................................................................................... 3
Features....................................................................................................................... 3
Requirements ............................................................................................................... 3
Applications .................................................................................................................. 4
Quick start ....................................................................................................................... 5
Recording keystrokes ....................................................................................................... 6
Viewing recorded data ...................................................................................................... 7
Flash Drive options........................................................................................................... 9
Phrase searching .......................................................................................................... 9
Memory erasing ............................................................................................................ 9
Memory formatting ...................................................................................................... 10
Configuration options...................................................................................................... 11
Mac Compatibility Pack .................................................................................................. 14
National keyboard layouts ............................................................................................... 15
Using KL Tools............................................................................................................... 16
Specifications................................................................................................................. 17
Troubleshooting ............................................................................................................. 18
List of special keys ......................................................................................................... 20
Legal disclaimer ............................................................................................................. 21
Getting started
Already familiar with KeyGrabber keyloggers?
 Start key-logging in 2 simple steps: section Quick start
New to KeyGrabber hardware keyloggers?
 Learn about keystroke recording first: section Recording keystrokes
 Then learn to retrieve the recorded data: section Viewing recorded data
Questions or problems?
 Go through the Troubleshooting section.
2
Copyright © 2016 KeeLog
KeyGrabber USB
Introduction
About the product
The KeyGrabber USB is an advanced USB hardware keylogger with a huge 16 MB or 2 GB
internal flash disk, organized as a file system. Text data typed on the USB keyboard will be
captured and stored on the internal Flash Drive in a special file. This data may be retrieved on
any other computer with a USB port and keyboard, by switching to Flash Drive mode. The
keylogger will pop up as a removable drive, giving instant access to all captured data. The
KeyGrabber USB is 100% transparent for computer operation and no software or drivers are
required.
Features

Huge memory capacity (up to 2 GB), organized as a flash file system

Compatible with all USB keyboards (including Linux & Mac)

Mac Mode ensuring full compatibility with all Apple keyboards (MCP version only)

Ultra fast memory contents retrieve via USB port

Transparent to computer operation, undetectable for security scanners

No software or drivers required, operating system independent

Memory protected with strong 128-bit encryption

Quick and easy national keyboard layout support

Ultra compact and discrete, only 1.5" (38 mm) long
Requirements

Computer with standard USB 1.1 or 2.0 port

USB HID-compliant keyboard (Low-Speed, Full-Speed, or High-Speed)

Operating system with USB Mass-Storage device support
3
Copyright © 2016 KeeLog
KeyGrabber USB
Applications
Employers:

Monitor acceptable internet usage

Monitor employee productivity

Detect unauthorized access attempts

Backup typed text

Collect computer usage statistics
Parents:

Monitor your family's computer activity

Protect your child from on-line hazards and predators

Observe WWW, E-mail, and chat usage

Save a copy of written documents
Investigators:

Monitor remote computers

Retrieve unknown passwords, operating system independent

Collect computer-related evidence

Detect unauthorized use of computer equipment
4
Copyright © 2016 KeeLog
KeyGrabber USB
Quick start
This section contains concise information on basic keylogger handling. If you need detailed
instructions, please refer to sections Recording keystrokes and Viewing recorded data.
To record keystrokes, plug the device in-between the keyboard and USB port.
To view recorded data, plug the device in-between the keyboard and USB port, and press
the 3-key combination simultaneously (by default K, B, S)
The keylogger will pop up as a removable drive, containing the file LOG.TXT. This file will
contain all recorded keystroke data.
5
Copyright © 2016 KeeLog
KeyGrabber USB
Recording keystrokes
Installation of the KeyGrabber USB is quick and easy. Simply plug it in between the USB
keyboard and the USB port. No software or drivers are required. The USB hardware
keylogger will start recording all data typed on the keyboard to the internal flash disk. Once
recording starts, new data will be appended to the end of the log file. The device is completely
transparent for computer operation.
Disconnect the USB keyboard from the USB port at the computer or hub.
This can be done even with the computer up and running.
Connect the hardware USB keylogger between the USB keyboard and the USB port.
Keystroke logging will start automatically.
Note: If an external USB hub is being used, connect the keylogger between the hub and the
USB keyboard.
6
Copyright © 2016 KeeLog
KeyGrabber USB
Viewing recorded data
Once keystroke data has been recorded, it may be retrieved on any computer with a USB
port. This is done by switching to Flash Drive mode. The KeyGrabber USB and keyboard
should be connected in the same way, as during normal recording.
Each device has a built-in 3-key combination (by default K, B, S). Press these 3 magic keys
simultaneously to trigger Flash Drive mode.
After a few seconds, the hardware keylogger will automatically get detected as a mass
storage device. The operating system will use the standard built-in mass storage driver (MS
Windows 7 in the following examples).
Depending on the drive letters available, the device will be visible as a new drive, for example
F:. Use the systems file manager to browse this disk (for example Explorer). The keyboard
will be disconnected and unavailable, so the mouse must be used to browse the disk.
7
Copyright © 2016 KeeLog
KeyGrabber USB
The removable disk will contain the file LOG.TXT with a text log of all captured data.
Keystroke data is formatted in the same as it would appear on the screen, with special keys in
brackets ([Ent], [Esc], [Del] etc.). This file can be viewed and searched with any text editor,
such as Notepad or MS Word.
During Flash Drive mode, the USB keyboard is inaccessible, and usually the mouse is the
only operating device. Therefore it is a good idea to copy the file to the hard drive, and restore
standard operation. Erasing and editing the file LOG.TXT is obsolete, because the flash disk
has a huge memory worth of years of intensive typing.
Switching back to standard mode can be achieved by a safe software removal of the flash
disk. Use the systems standard disk removal procedure. For MS Windows, left-click on the
Safe Removal icon in the system tray and select the appropriate drive. Some systems will
require to unplug the reconnect the keylogger.
Note: During the first switch to Flash Drive mode, the operating system can ask for drivers. In
such case choose automatic driver installation (usually default option).
Note: While in Flash Drive mode on non-MCP devices, the USB keyboard is disabled. Use the
mouse to operate the system. If mouse operation is dependent on the keyboard (i.e. wireless
desktop or USB keyboard with mouse attached to it), connect the keyboard/mouse combo to
a different USB port after switching to Flash Drive mode.
8
Copyright © 2016 KeeLog
KeyGrabber USB
Flash Drive options
Flash Drive mode allows several standard examination and maintenance procedures to be
performed through the operation system. The most common operations are described below
with MS Windows as an example operating system.
Phrase searching
Copy the log file LOG.TXT to the hard drive and restore standard mode, by disconnecting the
flash disk. Open LOG.TXT in any text editor, such as Notepad or MS Word. The entire log file
may be viewed, or searched using the text editor built-in Find option (CTRL-F). To locate
WWW & E-mail addresses, define the search phrase as ‘www’, ‘.com’, ‘@’ etc.
Memory erasing
A flash disk capacity of 16 MB / 2 GB makes memory erasing obsolete. This is equivalent to
several years’ worth of intensive typing. However, it is possible to keep the log file clean by
erasing it occasionally. This can be achieved by the standard system file delete procedure
while in Flash Drive mode. For MS Windows active the context menu for the log file and select
Delete. A new log file will be created on the next power-up.
9
Copyright © 2016 KeeLog
KeyGrabber USB
Memory formatting
Flash disk formatting will erase all data present, including the log, configuration, and layout
files. For MS Windows activate the Flash Drive context menu and choose Format. Make sure
the correct disk is selected and check the option Quick Format.
Disconnect and reconnect the keylogger from the USB port immediately after formatting has
finished. Default settings will be restored and a new log file will be created.
10
Copyright © 2016 KeeLog
KeyGrabber USB
Configuration options
The KeyGrabber USB may be configured through the file CONFIG.TXT, placed in the Flash
Drive root folder. Use any text editor to prepare such a configuration file, containing the
following text:
Password=KBS
LogSpecialKeys=Medium
DisableLogging=No
Copy this file to the root folder in Flash Drive mode. The new configuration will be loaded on
next power-up.
The following list presents the most common configuration options. All variable and value
strings are case insensitive.
Password sets the 3-key combination for triggering Flash Drive mode. Any three-letter key
combination is allowed (sequence is irrelevant). The password setting is national-layout
independent. Default value is KBS.
LogSpecialKeys sets the logging level for special keys, such as Enter, Escape, F1...F12 etc.
Special keys are logged in brackets, i.e. [Ent]. Allowed values are None (only text is logged),
Medium (text with basic function keys are logged), and Full (text with all special keys are
logged). Default value is Medium.
DisableLogging allows to disable keystroke logging, however does not affect mode
switching. Allowed values are Yes (logging disabled) and No (logging enabled). Default value
is No.
DisableLayout allows disabling the currently loaded layout, without having to delete the
layout file. Allowed values are Yes (layout disabled) and No (layout enabled, if present).
Default is No.
11
Copyright © 2016 KeeLog
KeyGrabber USB
MacMode allows to enable/disable Mac Mode on devices with the MCP option. Mac Mode is
a special mode ensuring full compatibility with all Apple keyboards. Allowed values are Yes
(Mac Mode enabled) and No (Mac Mode disabled). Default value is Yes.
Encryption enables flash disk encrypting. Encryption will ensure full confidentiality of the
stored data, even if the device is physically tampered with. Allowed values are Yes
(encryption enabled) and No (encryption disabled). Default is No.
Important: toggling the encryption setting will format the entire flash disk. All data will be lost,
including the configuration and layout files!
An example configuration file contents is shown below:
Password=SVL
LogSpecialKeys=Full
Encryption=Yes
MacMode=No
A full list of available parameters with descriptions is available below.
Basic parameter list
Parameter
Password
LogSpecialKeys
DisableLogging
DisableLayout
MacMode
Values
3-character password
(default KBS)
None
Medium (default)
Full
Yes
No (default)
Yes
No (default)
Menu
Yes (default)
No
Example
Description
Password=SVL
Three-character key combination for
activating Flash Drive mode.
LogSpecialKeys=Full
Special key logging level.
DisableLogging=Yes
Keystroke logging disable flag.
DisableLayout=Yes
National layout disable flag (see
section National keyboard layouts).
MacMode=No
Mac Mode enable flag. Available only
on devices with MCP.
12
Copyright © 2016 KeeLog
KeyGrabber USB
Advanced parameter list (use only when you know what you’re doing!)
Parameter
Values
Example
Description
Encryption
Yes
No (default)
Encryption=No
Flash
drive
encryption
setting
(caution: changing this value will reformat the flash drive).
SupportReportProtocol
=No
Report protocol support flag.
CheckShortFrame=No
Short frame fast filter option.
CheckModifierByte=No
Modifier byte check flag.
FrameFilter=226
Frame filter value.
KeyboardSpeed=Auto
USB keyboard speed setting.
CheckOverflow=Yes
Overflow check flag.
SupportReportProtocol
CheckShortFrame
CheckModifierByte
FrameFilter
KeyboardSpeed
CheckOverflow
Yes
No (default)
No
Low (default)
Medium
High
Yes (default)
No
Filter value
(range 0…255,
default 98)
Auto (default)
Full
Low
Mixed
Yes
No (default)
13
Copyright © 2016 KeeLog
KeyGrabber USB
Mac Compatibility Pack
The Mac Compatibility Pack (MCP) is a hardware enhancement ensuring full compatibility
with Apple Mac computers and keyboards. Several Apple keyboards are USB High-Speed
and Low-Speed combos, creating a challenge for all types of USB keyloggers. The aluminum
Apple A1243 and A1242 are typical examples:
The KeyGrabber USB with the Mac Compatibility Pack features a special Mac Mode (enabled
by default), which will convert the keystroke data stream to USB Full-Speed, ensuring proper
operation of the keyboard and logging of all keystrokes. Mac Mode is compatible with
standard keyboards too, so the KeyGrabber does not have to be reconfigured.
When enabled, Mac Mode will add an additional pass-through USB hub to the system. If this
is undesired, Mac Mode can always be disabled, restoring normal operation. To disable Mac
Mode, open the configuration file CONFIG.TXT (see section Configuration options) and add
the following entry:
MacMode=No
This option can also be configured with KL Tools (see section Using KL Tools)
14
Copyright © 2016 KeeLog
KeyGrabber USB
National keyboard layouts
It is possible to enable a national layout for language-adapted keyboards, such as French,
German etc. This will allow national characters to get logged properly (including those with Alt
Gr), such as ö, æ, ß, ó etc. The following example demonstrates the advantages of applying
the German national layout.
Text logged without layout
Text logged with layout
Kezlogger )PS-2 / USB=
KeyLogger (PS/2 & USB)
To enable a national layout, the appropriate layout file named LAYOUT.USB must be placed
on the flash disks root folder. The file must be copied in Flash Drive mode. Layout files may
be obtained from the CD-ROM attached with the device.
To enable the layout, safely remove the flash disk. On power-up, the layout file will be loaded
automatically.
15
Copyright © 2016 KeeLog
KeyGrabber USB
Using KL Tools
KL Tools is a free application delivered with all KeyGrabber series devices. KL Tools assists
in configuring a KeyGrabber keylogger and retrieving the recorded data it contains. It is not
necessary to operate the device, but may speed up usage by its intuitive user interface.
KL Tools is available on the CD-ROM attached with the device. Installing KL Tools is
straightforward. Simply follow the installation wizard and answer standard questions. When
initialized, KL Tools will ask for the device type, and assist in configuring the device and
retrieving the log file. There is no special knowledge required to use KL Tools – simply follow
the instructions displayed by the application.
16
Copyright © 2016 KeeLog
KeyGrabber USB
Specifications
Power supply – 4.5 V – 5.5 V DC (drawn from the USB port)
Power consumption – 65 mA (0.33 W)
Keyboard support – USB HID-compatible keyboard (Low-speed, Full-speed, High-speed)
Maximum burst log speed - 500 byte/s (approx.)
Maximum continuous log speed - 100 byte/s (approx.)
Memory capacity – 16 MB / 2 GB
Data retention - 100 years
Maximum log read speed – 150 kB/s
Dimensions inc. connectors (L x W x H) - 53 mm x 20 mm x 12 mm (2.1" x 0.8" x 0.5")
All KeyGrabber products come with 1 year warranty against manufacturer defects. Defect
products must be shipped by the customer. All warranty repairs and delivery to the customer
will be paid by the manufacturer.
17
Copyright © 2016 KeeLog
KeyGrabber USB
Troubleshooting
The KeyGrabber USB will not work with the following hardware configurations:
1.
2.
3.
4.
Internal laptop keyboards
Bluetooth keyboards
USB-PS/2 and PS/2-USB adapters
Non-conformant USB keyboards
The keyboard is not responding
The keyboard connector or the keylogger connector is not inserted firmly. Please check the
connection with the USB keyboard and port.
The keylogger does not switch to Flash Drive mode
Please check the following:
1. Is the keylogger inserted between the keyboard and the keyboard port on the PC or
hub?
2. Is your 3-key combination correct?
3. Are you pressing the 3 keys simultaneously? The 3-key combination will not be
accepted if pressed sequentially.
Problems with logging national characters
Please check if you have downloaded the correct layout file and copied it to the flash disk root
directory? If not, please check the National keyboard layouts section.
The keyboard doesn’t work in Flash Drive mode
This is normal behavior for non-MCP devices. In Flash Drive mode, the keylogger will install
the removable disk instead of the keyboard. Use the mouse to copy the log file to the hard
drive, then restore normal operation. Alternatively, you may connect the keyboard to a
different USB port after switching to Flash Drive mode.
The mouse and keyboard don’t work in Flash Drive mode
This can happen on wireless keyboards and keyboard/mouse combos for non-MCP devices.
In Flash Drive mode, the keylogger will install the removable disk instead of the
keyboard/mouse combo. To get around this, connect the keyboard/mouse to a different USB
port after switching to Flash Drive mode.
18
Copyright © 2016 KeeLog
KeyGrabber USB
I’ve checked everything, nothing helps!
If you are still experiencing problems, please do the following:
1. Check if the problem appears on a different keyboard.
2. Check if the problem appears on a different computer.
3. Contact the dealer you have purchased the device from. Please supply all necessary
information (keyboard model and manufacturer, OS type and version, and a short
description of the problem).
19
Copyright © 2016 KeeLog
KeyGrabber USB
List of special keys
[Esc]
[F1]
[F2]
[F3]
[F4]
[F5]
[F6]
[F7]
[F8]
[F9]
[F10]
[F11]
[F12]
[Ctl]
[Alt]
[Ins]
[Hom]
[PUp]
[PDn]
[Del]
[Win]
[Aps]
[Cap]
[Ent]
[Bck]
[Tab]
-
Escape
F1
F2
F3
F4
F5
F6
F7
F8
F9
F10
F11
F12
Control
Alt
Insert
Home
Page Up
Page Down
Delete
Win
Apps
Caps Lock
Enter
Backspace
Tab
[Prn]
[End]
[Scr]
[Up]
[Dwn]
[Lft]
[Rgh]
[Num]
[-N]
[+N]
[.N]
[/N]
[*N]
[0N]
[1N]
[2N]
[3N]
[4N]
[5N]
[6N]
[7N]
[8N]
[9N]
[Pwr]
[Slp]
[Wke]
20
-
Print Screen
End
Scroll Lock
Up
Down
Left
Right
Num Lock
- (num)
+ (num)
. / Delete (num)
/ (num)
* (num)
0 / Insert (num)
1 / End (num)
2 / Down (num)
3 / Page Down (num)
4 / Left(num)
5 (num)
6 / Right (num)
7 / Home (num)
8 / Up (num)
9 / Page Up (num)
Power
Sleep
Wake
Copyright © 2016 KeeLog
KeyGrabber USB
Legal disclaimer
KeyGrabber does not take responsibility for any damage, harm or legal actions caused by
misuse of its products. The user should follow the guidelines contained in this document,
otherwise no liability will be assumed. It is the user's responsibility to obey all effective laws in
his/her country, which may prohibit usage of KeyGrabber products. Please also consider, that
not knowing the law does not allow to not obeying it. A good example is the U.S. Department
of Justice Letter on Keystroke Monitoring and Login Banners, according to which a clear
notice should be displayed, warning that user keystrokes may be logged. Please check with
your legal representative for logging requirements in your country.
For more information on KeyGrabber products,
visit our website:
http://www.keelog.com/
You should not use this device to intercept
data you are not authorized to possess,
especially passwords, banking data,
confidential correspondence etc. Most
countries recognize this as a crime. Please
consult a legal representative for logging
requirements in your country.
21
Copyright © 2016 KeeLog
KeyGrabber USB
Notes:
European Office
U.S. Office
KeeLog
Lekcyjna 42
PL 51-169 Wroclaw
Poland
Aqua Electronics
1550 Louis Ave.
Elk Grove Village, IL. 60007
U.S.A
http://www.keelog.com/
keelog@keelog.com
RoHS
Copyright © 2004-2016. All rights reserved.
22
Copyright © 2016 KeeLog
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertising