home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Windows 6-Pak - Disc 6
/
Windows 6-Pak (InfoMagic) (Disc 6) (1999).ISO
/
Context-Menu-Enhancements
/
slogger.exe
/
MANUAL.HT_
< prev
next >
Wrap
Text File
|
1999-01-19
|
17KB
|
297 lines
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="GENERATOR" content="Microsoft FrontPage 3.0">
<title>StealthLogger Online Manual</title>
</head>
<body bgcolor="#FFFFFF" text="#000000">
<blockquote>
<p><font color="#000000" size="4"><strong>Welcome to Stealth Logger online manual.</strong></font></p>
</blockquote>
<p><font color="#000000">Below you will find all information required to use Stealth
Logger.</font></p>
<div align="left">
<table border="0" width="80%">
<TBODY>
<tr>
<td><font color="#000000" size="4"><strong>Contents : </strong></font></td>
<td></td>
</tr>
<tr>
<td></td>
<td><dl>
<dt><font color="#000000" size="4"><a href="#1-1"><strong>Introduction to Stealth Logger.</strong></a></font>
</dt>
</dl>
<blockquote>
<dl>
<dt><a href="#1-1"><font color="#000000"><strong>What is Stealth Logger ?</strong></font></a>
</dt>
<dt><a href="#1-2"><font color="#000000"><strong>How does it work ?</strong></font></a> </dt>
<dt><a href="#1-3"><font color="#000000"><strong>Demo Limitations</strong></font></a> </dt>
</dl>
</blockquote>
<dl>
<dt><a href="#2-1"><font color="#000000" size="4"><strong>Starting the program</strong></font></a>
</dt>
</dl>
<blockquote>
<dl>
<dt><a href="#2-1"><font color="#000000"><strong>When will it start ?</strong></font></a> </dt>
<dt><a href="#2-2"><font color="#000000"><strong>How can I start it manually ?</strong></font></a>
</dt>
<dt><a href="#2-3"><font color="#000000" size="3"><strong>Can Windows 95 logon password be
logged ?</strong></font></a> </dt>
</dl>
</blockquote>
<dl>
<dt><a href="#3-1"><font color="#000000" size="4"><strong>Using Stealth Logger</strong></font></a>
</dt>
</dl>
<blockquote>
<dl>
<dt><a href="#3-1"><font color="#000000" size="3"><strong>Using INI file</strong></font></a>
</dt>
<dt><a href="#3-2"><font color="#000000" size="3"><strong>Log file</strong></font></a> </dt>
<dt><font color="#000000" size="3"><a href="#3-3"><strong>How fast Stealth Logger works ?</strong></a></font>
</dt>
<dt><a href="#3-4"><font color="#000000" size="3"><strong>How Stealth is it really ?</strong></font></a>
</dt>
<dt><font color="#000000" size="3"><a href="#3-5"><strong>What will Stealth Logger log and
what not ?</strong></a></font> </dt>
<dt><a href="#3-6"><font color="#000000" size="3"><strong>Multilingual</strong></font></a> </dt>
</dl>
</blockquote>
<dl>
<dt><a href="#4-1"><font color="#000000" size="4"><strong>Cautions</strong></font></a> </dt>
<dt> </dt>
<dt><a href="#5-1"><font color="#000000" size="4"><strong>Trouble shooting</strong></font></a>
</dt>
</dl>
</td>
</tr>
<tr>
<td></td>
<td></td>
</tr>
</TBODY>
</table>
</div>
<p> </p>
<hr width="80%">
<p> </p>
<p><a name="1-1"></a><font color="#000000" size="4"><u>Introduction to Stealth Logger.</u></font></p>
<blockquote>
<p><font color="#000000"><strong><u>What is Stealth Logger ?</u></strong></font></p>
<p align="left"><font color="#000000" size="3">The answer is simple : Stealth Logger is a
program that records keystrokes received from keyboard. They are then written into a human
readable file.</font></p>
<p><a name="1-2"></a><font color="#000000"><strong><u>How does it work ?</u></strong></font></p>
<p><font color="#000000">The program writes all keystrokes into a user-defined file. This
file can also be buffered in memory. That means all keystrokes are written to the log only
after this buffer is full. The size of buffer is also user-defned. Window titles are
logged optionally with time stamps.</font></p>
<p align="left"> </p>
</blockquote>
<p><a name="2-1"></a><font color="#000000" size="4"><strong><u>Starting the program</u></strong></font></p>
<blockquote>
<p><font color="#000000"><strong><u>When will it start ?</u></strong></font></p>
<p align="left"><font color="#000000" size="3">By default, setup program will configure
Stealth Logger to start BEFORE Windows logon promt.( This doesn't work under NT ).</font></p>
<p align="left"><font color="#000000" size="3">Stealth Logger may be run from any
directory. Also you may rename program file as you like. Note that DLL file - wsdll.dll
may not be renamed. </font><font color="#000000">DLL must be in the same directory as
ws32.exe or in Windows system directory. Stealth Logger may be configured through
"sl.ini" config file. INI file must be in the same directory as executable or in
'current directory' - line that is written to log file every time Stealth Logger is
starting. <br>
( after '[ *** Started *** , date ]' message )</font></p>
<p align="left"><a name="2-2"></a><font color="#000000"><strong><u>How can I start it
manually ?</u></strong></font></p>
<p><font color="#000000" size="3">You may simply run it from command promt or from start
menu. If you want the program to start automatically you may add shortcut to Startup
folder or add following string to WIN.INI file:</font></p>
<p><font color="#000000" size="3">[windows]</font></p>
<p><font color="#000000" size="3">load=PathToLogger\ws32.exe</font></p>
<p><font color="#000000" size="3">( [windows] means "Windows" section of
win.ini; PathToLogger is path to Stealth Logger; you may also replace "load"
with "run" )</font></p>
<p><a name="2-3"></a><font color="#000000" size="3"><strong><u>Can Windows 95 logon
password be logged ?</u></strong></font></p>
<p><font color="#000000" size="3">Yes. Setup program will configure Stealth Logger to
start before Windows 95 starts and BEFORE logon promt. That means that Windows 95 password
and user name WILL BE RECORDED.</font></p>
<p> </p>
</blockquote>
<p><a name="3-1"></a><font color="#000000" size="4"><strong><u>Using Stealth Logger</u></strong></font></p>
<blockquote>
<p><font color="#000000" size="3"><strong><u>Using INI file</u></strong></font></p>
<p><font color="#000000" size="3">Stealth Logger INI file is optional. If Stealth Logger
cannot find it it will use defaults.</font></p>
<p><font color="#000000" size="3">1. <strong>Log file path</strong> ( eg
"C:\Temp\log.out" ) File where logger will save all keystrokes and windows
received. <u>Default = <a href="C:\Temp\w32.dll">C:\Temp\w32.dll</a></u>. Syntax: <br>
<strong>"logpath = [path]"</strong></font></p>
<p><font color="#000000" size="3">2. <strong>Buffer size.</strong> If = 0 then program
will record key name immidately after it is pressed. If > 0 key scancodes will be put
in buffer and when it is full buffer will be written to the log file. Syntax: <br>
<strong>"buffer = x"</strong> where x - number of keys to be remebered in buffer
before saving to disk. Note: if user was typing something and buffer was for example
half-full and user pressed Reset or System hung then that half of buffer will not be
written to disk ! If everything is ok buffer is saved when it is full or when the next
window is activated.</font></p>
<p><font color="#000000" size="3">3. <strong>Keyrepeat</strong>. If user presses ALT key
for example and holds it, key repeat setting specifies how many chars will be written to a
log/buffer. If set to 0, Stealth Logger will record every repeated key. If keyrepeat is 0
your log may look terrible : <ALT> <ALT> <ALT> <ALT> <ALT>
<ALT> <ALT> <ALT> <ALT> <ALT> and so on. Syntax:<br>
<strong>"keyrepeat = x"</strong> where x = number of chars.</font></p>
<p><font color="#000000" size="3">4. <strong>Windowlog</strong>. This specifies whether to
record or not window titles. For example you left logger somewhere working for a week or
more. When you look at the log you'll discover that it's size is really huge. That is
because Window titles take a lot of HD space. But if you check your log often and then
delete it you will not get it so huge. With window titles logger switched on you can
understand exactly what was going on on a computer. Syntax:<br>
<strong>"windowlog = x"</strong> where x = 0 ( Do not log ) or 1 ( Log )</font></p>
<p><font color="#000000" size="3">5. <strong>Filter</strong>. Add this value if you want
Stealth Logger to write down keystrokes received only in selected windows. format of this
command: <strong>"filter = window1;window2;window3;...."</strong>. SL will
search each of substrings ended wih ";" in opened window title, although title
may be much longer than substring. If it finds a substring, like "window1", it
will record it to the log and then write down all keys pressed until next window is
activated. Note: in principle search is case sensitive. But if you forgot where is
uppercase, write the WHOLE substring in lowercase. SL will then transform windows to
lowercase and search in them.</font></p>
<p><font color="#000000" size="3">Example : You want to log only in Telnet application.
You add "filter = telnet;" or "filter = Telnet;" to SL.INI. And then
you get in your log only those letters which were typed in window that contain
"telnet" :<br>
like "Telnet: 127.0.0.1"</font></p>
<p><font color="#000000" size="3">6. <strong>Saveedit</strong>. Very useful feature. When
a dialog box appear it's contens ( Static and Edit boxes - these typically are text and
text edit ) are dumped to a log file. Takes much space but is VERY useful when using with
"filter" option. Syntax is : <strong>"saveedit = 1"</strong></font></p>
<p><font color="#000000" size="3">7. <strong>Crypt</strong>. Also very useful if you don't
want somebody else to see your log file. Crypt value syntax can be following :<br>
<strong>"crypt = [value]"</strong> Where [value] can be :<br>
* empty ( or whole string is absent ) - no log crypting; <br>
* "inverse" - This does not crypt log also. This only inverts characters and
makes text unreadable. This is the most recommended option because it is 100% safe.<br>
* [CryptedPassword] ( Any string except above ) - Using SL with this value in INI will
crypt your log file. Do not write your password in plaintext here ! [CryptedPassword]
value is unique string generated by LogViewer and is actually your encrypted password. You
do need even to know all this. All should have done automatically. Run LogViewer utility
and use it to crypt/uncrypt log.</font></p>
<p><font color="#000000" size="3">BE CAREFUL with crypted logs. You may not write logs
encrypted with different passwords to one file ! And you may only delete crypted log file
to clean it while SL is resident. You may not edit it ! This may get your log corrupted
and undecryptable or only half decryptable.</font></p>
<p><font color="#000000" size="3"><strong>NOTE : every string in ini file must be : X = Y.
You must put spaces after and before '=' sign. If you dont the program will not read
settings correctly !</strong></font></p>
<p><a name="3-2"></a><font color="#000000" size="3"><strong><u>Log file</u></strong></font></p>
<p align="left"><font color="#000000" size="3">Log file is NOT crypted. It is written in
human-readable format. So everybody can read it. Hide your log somewhere where nobody can
find it, give it extensions like .dll or .exe ( of cource don't run such files ).</font></p>
<p><a name="3-3"></a><font color="#000000" size="3"><strong><u>How fast Stealth Logger
works ?</u></strong></font></p>
<p><font color="#000000" size="3">That depends on computer you are using and buffer length
of Stealth Logger. On slow machines with little RAM you may see or hear disk activity
after each keypress. If you set buffer length = 30 you will not see anything even on 386.
NT is a little bit slower with Stealth Logger. But it accesses hard disk a lot even if
system is idle so you also should not see anything.</font></p>
<p><a name="3-4"></a><font color="#000000" size="3"><strong><u>How Stealth is it really ?</u></strong></font></p>
<p><font color="#000000" size="3">REALLY stealth ! There is no window, it is not visible
in taskbar. It doesn't appear even in Task Manager ( under Windows 95 only ) So nothing
can tell you that the system is being monitored.</font></p>
<p><a name="3-5"></a><font color="#000000" size="3"><strong><u>What will Stealth Logger
log and what not ?</u></strong></font></p>
<p><font color="#000000" size="3">Stealth Logger will log EVERYTHING except what was typed
in DOS applications under Win95 or NT. There may be programs that have protection against
keyloggers also.</font></p>
<p><a name="3-6"></a><font color="#000000" size="3"><strong><u>Multilingual</u></strong></font></p>
<p><font color="#000000" size="3">If you are using different from English language,
Stealth Logger should ask keyboard driver to 'translate' such keystroke. For example : I
am typing in Russian. </font></p>
<p><font color="#000000" size="3">When I press English letter 'A', system prints on the
screen another Cyrillic letter mapped to A. keylogger "translates" such letter
and logs it translated !</font></p>
</blockquote>
<p><a name="4-1"></a><font color="#000000" size="4"><strong><u>Cautions & Disclaimer</u></strong></font></p>
<blockquote>
<p><b><font color="#000000">Hacking or breaking into other computers is ILLEGAL !!! This
software is designed for use by system administrators or computer owners.</font></b></p>
<p><b><font color="#000000">Author is NOT responsible for any misuse or damage caused by
this software. Final user takes all responsibility of using this software.</font></b></p>
<p><font color="#000000">You may forget that it is in memory and get your own password
logged. BE CAREFUL</font></p>
<p><font color="#000000">Do not run multiple copies of Stealth Logger (latest versions do
not allow this) . That will get your log unreadable.</font></p>
<p> </p>
</blockquote>
<p><a name="5-1"></a><font color="#000000" size="4"><strong><u>Trouble Shootng</u></strong></font>
<ul>
<li><font color="#000000">I installed Stealth Logger and rebooted my computer. It seems that
Stealth Logger was not started. Do I have to edit WIN.INI file manually ?</font> </li>
</ul>
<blockquote>
<p><font color="#000000">No, you do not. Setup program will do everything for you. Stealth
Logger MUST start at next boot. You may see whether it is in memory by running LogViewer
utility.</font></p>
</blockquote>
<ul>
<li><font color="#000000" size="3">The SL.INI file does not work. I have changed my log
directory to something besides the default and it does not take effect, even after
restarting my computer. Right now it is logging to my C:\TEMP\W32.DLL file. Is it supposed
to be renamed or moved to another directory ? The current directory in which the program
is installed is in my C:\PROGRAM FILES\SL16 and that is where the SL.INI is located as
well</font> </li>
</ul>
<blockquote>
<p><font color="#000000" size="3">That means that SL does not find its ini. The best place
to keep this sl.ini is directory that is written to the log after "*** started
***" message and before User string. Example :
--------------------------------------------------------------------<br>
*** Started *** , 10:14:53
07/06<br>
--------------------------------------------------------------------<br>
[C:\: 10:14:53
07/06]
<strong><-- Here is it</strong><br>
[Program Manager: 10:14:57 07/06]<br>
<alt> <alt><br>
With current configuration as above "sl.ini" must be in "C:\" root.
That is because program starts before windows logon.</font></p>
</blockquote>
<p><font color="#000000"><strong>If you have any problems using Stealth Logger, please
visit Stealth Logger FAQ at </strong></font></p>
<p><font color="#000000"><strong>For latest updates visit Stealth Logger Official homepage
at <a href="http://ssoft.virtualave.net">http://ssoft.virtualave.net</a></strong></font></p>
<p><font color="#000000"><strong>Feel free to <a href="mailto:estla@kodu.ee">mail me</a></strong></font></p>
</body>
</html>