Thread: HELP NEEDED -> Vista keylogger (with by UAC-bypass)

Hi guys !

I am not really a c++ coder, but i fortunally could tinker (with code snippet: basic_keylogger_source.rar) my executable keylogger incl. ftp-uploading + firewall bypass for Windows XP.

Although i run my logger with administrator rights under Vista 64bit it doesn't acts like it does under Windows XP.

Now i would be very thankful if you can give me some tips on coding my "stealth" keylogger for Vista systems.

Thanks a lot!


!Cheers!

Its verry hard to Bypass vista UAC,

What you could do is, do not let ur keylogger to copy its self to System32 thats an bad idea in vista

Let it copy it self to *C:\Users\NameHere\AppData* by doing that you dont need it to run like admin.

So at startup of ur Keylogger

check if it runs on XP? if its true then -> copy to System32
if its vista -> copy to AppData

but by putting it in register ( for startup with windows ) you will have problems with Windows Defender ( Vista ) or you must use Service or Activex but there for you will need (Run As Admin).

i hope this is little help 2 you.

if i get home ill post
how to bypass uac

modify registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center" & Chr(34) & " /v UACDisableNotify /t reg_dword /d 00000001 /f"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Policies\System" & Chr(34) & " /v EnableLUA /t REG_DWORD /d 00000000 /f"

i havent try it by my self but i found this
tell me if it worked maybe there is more to do
to get rid of the UAC

root86 mate , you need to Run As Admin to change that.
And windows will show popup that UAC is disabled.

Originally Posted by root86

modify registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center" & Chr(34) & " /v UACDisableNotify /t reg_dword /d 00000001 /f"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Policies\System" & Chr(34) & " /v EnableLUA /t REG_DWORD /d 00000000 /f"

i havent try it by my self but i found this
tell me if it worked maybe there is more to do
to get rid of the UAC

then get admin rights...

>>>> UACDisableNotify !

Originally Posted by root86

then get admin rights...

>>>> UACDisableNotify !

if u have admin rights , u don't have to worry about UAC

THX.

In the "(int) main-function" of the program i disable the firewall first, so Windows Defender/Firewall don't bugs ;-)

It seems that this works fine ...

install the keylogger as windows service, so you dont need to write to registry