sectionsix
Premium
join:2004-11-03
Tempe, AZ
| reply to Noone
Re: Is Threafire a keylogger?
said by Noone :
I tried their version no. 3.5.0.21 and used it for about 7 weeks before uninstalling it. It had a medium learning curve, which took about a week to learn all my programs and their functions. After that it was smooth sailing. The only thing that would slow me down is when it did a system scan; would take about 15 minutes and brought my computer down to a near crawl.
*Warning!!!* After I uninstalled it, I ran a SnoopFree Privacy Shield to detect any keyloggers and upon reboot it detected "TfKbMon.sys" was "acting like a key logger". So I deleted that file under C:\win\system32\drivers. The next day I booted my computer for the first time and couldn't use my usb keyboard or mouse! Long story short, the uninstall obviously didn't complete its job to the fullest and I had to load the live disc of Ubuntu to get access to my computer, wherein I copied the file back into the driver directory and rebooted with kb/m working fine.
I have noticed that TfKbMon.sys sometimes does not always uninstall either. After uninstalling, I usually check for left overs with autoruns and a couple of other tools... I did the same as you, deleted it. Luckily, I had a backup image. |
|
Noone
@omcastbusiness.net
| reply to tempnexus
I tried their version no. 3.5.0.21 and used it for about 7 weeks before uninstalling it. It had a medium learning curve, which took about a week to learn all my programs and their functions. After that it was smooth sailing. The only thing that would slow me down is when it did a system scan; would take about 15 minutes and brought my computer down to a near crawl.
*Warning!!!* After I uninstalled it, I ran a SnoopFree Privacy Shield to detect any keyloggers and upon reboot it detected "TfKbMon.sys" was "acting like a key logger". So I deleted that file under C:\win\system32\drivers. The next day I booted my computer for the first time and couldn't use my usb keyboard or mouse! Long story short, the uninstall obviously didn't complete its job to the fullest and I had to load the live disc of Ubuntu to get access to my computer, wherein I copied the file back into the driver directory and rebooted with kb/m working fine. |
|
sivran
Long Live The Suite
Premium
join:2003-09-15
Arlington, TX
clubs:
 ·RoadRunner Cable
| reply to tempnexus
I had to stop using ThreatFire. It conveniently forgot that I had added certain programs (which never should have been blacklisted in the first place) to the whitelist. Upon starting that program, it killed it, blackbox for windows(explorer shell replacement), and media player classic. It moved the executables for them to a location I never found, fortunately I had back ups hidden away. 
...and then it promptly crashed and started giving errors when I tried to access the gui to try and fix it. Reboots didn't help either.
Was doing quite fine up til then.
--
The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no warrants shall issue, but upon profitable cause... |
|
SUMware
Premium
join:2002-05-21
2 edits | reply to HA Nut
said by HA Nut  :I thought TF monitored for keyloggers. Maybe the reason it has the filter??? Yep.
»www.threatfire.com/faqs/
ThreatFire protects in real-time against viruses, worms, trojans, spyware, adware, rootkits, keyloggers, and buffer overflows.
»www.techsupportalert.com/best-free-hips.htm
Thankfully, a new generation of HIPS programs has emerged that use white lists, black lists, policies and behavior analysis rules, along with other techniques, to reduce the number of messages and the load on the user.
A prime example of this class of product is ThreatFire (formerly Cyberhawk) from PCTools.
It is the stand-out free product in the HIPS category. |
|
HA Nut
Premium
join:2004-05-13
USA | reply to tempnexus
I thought TF monitored for keyloggers. Maybe the reason it has the filter??? |
|
Cudni
La Merma - Vigilado
Premium,MVM
join:2003-12-20
Someshire
| reply to tempnexus
they call it a keylogger because some other security software used in conjunction with it told them so 
i think it is mainly to do with that other sofware misreporting the action of the TF module(s)
Cudni
--
"Mercifully, he hit him with the soft end of the pistol."
Help yourself so God can help you.
Microsoft MVP, 2006 - 2008 |
|
tempnexus
Premium
join:1999-08-11
Boston, MA
| Hhehe was browsing through comments on this site and saw many people calling TF a key logger? Why does Tf installs a keyboard filter anyhow?
»www.techsupportalert.com/best-free-hips.htm |
|
