GuardedID® – Next Generation Security |
|
Windows 10 USERS: Click for How to reset default browser to Internet Explorer.
WEBROOT USERS: Click to configure Webroot.
Using GuardedID®
Managing GuardedID®
Keylogging & GuardedID®
Driver Warnings
I use Windows 8.1. GuardedID stopped working after Microsoft installed February Security Updates.
Microsoft Security Update for Windows 8.1 (KB3126593) 2/9/2016 causes GuardedID to stop.
This update changes a function used in GuardedID licensing and installer. To restore GuardedID operation, uninstall "Security Update for Windows 8.1 (KB3126593)".
Use Start | Search "programs and features"
Choose "View installed updates" then "Search installed updates" for "KB3126593"
Uninstall the update.
GuardedID will operate normally.
An update for GuardedID is available. Use "Check for updates" function. Once the GuardedID build is installed, reinstall KB3126593.
Is GuardedID Compatible with Windows 10
Yes. GuardedID is compatible with Internet Explorer on Windows 10. Windows 10 users need to reset the default browser to Internet Explorer. (See link at top.)
Microsoft EDGE is not protected at this time because EDGE does not support extensions. Microsoft has announced that EDGE will support extensions in the future.
Firefox has ended support for all binary extensions, including GuardedID's toolbar. The "G" in the tray still protects your keystrokes (watch for the blinking). CryptoColor is supported in Internet Explorer only at this time. A CryptoColor plug-in is in development. Look for it later in 2016.
Is GuardedID Compatible with IE 11
Yes. GuardedID is compatible with IE11. Before installing GuardedID, apply the latest Windows Security Updates. If there are issues loading toolbars, please verify Internet Options - Advanced settings has "Enhanced Protection Mode" set off (the factory default setting.)
Why do fields change color when I click into them? What is "CryptoColor®"?
The CryptoColor® feature changes the background color of a text field to let you know that your keystrokes are being encrypted from the keyboard. The CryptoColor® feature was first introduced in GuardedID® Version 1.2
How do I know GuardedID® is working when typing in desktop applications?
When you are in a desktop program like Excel or eMail, the "Desktop Protection" agent is active. When you see the "G" in the Notification Area at the bottom right of your desktop, you know that GuardedID® Desktop Protection is ready. Each time you press a key, the "G" will flash to indicate that encryption has occurred.
I do not see the "G" in the system notification area (system tray) at the bottom of my screen.
On Windows7 and Windows 8 Desktop, if you cannot see the "G" in the system notification area, you can:
"right-click" on the current time in the notification area (bottom right of screen). A menu will pop up.
Select "Customize notification icons".
Find the "G" and "GID Desktop Application" in the left column. Change its setting to "Show icon and notifications."
Press the "OK" button.
How do I know GuardedID® Premium is protecting browsers (other than IE and Firefox) like Chrome?
When you are using browsers like Chrome, Opera, etc. that do not have GuardedID toolbars, the "Desktop Protection" agent is active. When you see the "G" in the SysTray at the bottom right of your desktop, you know that GuardedID® Protection is ready. Each time you press a key, the "G" will flash to indicate that encryption has occurred.
Why does the toolbar show a red "Off" when the cursor is not in a field where I can type into?
Inside the browser, GuardedID is only active when the keyboard cursor is in a text input field. If you click inside a web page where there is no input field, GuardedID will show RED "Off'. Once you move the cursor into a text entry field on a web page, GuardedID will turn "ON" and protect your typing.
Why does the toolbar show a red "Off" when typing in the fields at the top of the browser?
The fields at the top of the browser (the Address or URL field and the Search field) are outside the Internet data section of the browser. The Toolbar is only active when the keyboard cursor is "inside" the data section. The top bar fields are protected by the "Desktop Protection" agent. The flashing "G" indicates safe operation in those fields.
Sometimes I see the wrong character when I type. What can I do?
Certain programs use Windows Message Hooks in a non-standard way that makes them appear to GuardedID® as keyloggers. Every time you type into one of these programs you will see numbers in sequence (1-2-3-4-etc.) instead of what you are typing. To use these programs,
Version 3- Please exit "GuardedID® Desktop Protection" (the "G" in the bottom right of the desktop). Restart Desktop from the Start | Programs menu when you are finished with the non-standard program.
Version 4- Disable "GuardedID® Desktop Protection" (Use the Right-click menu of the "G" icon in the System Notification area). Enable GuardedID when you are finished with the non-standard program.
It is also possible to see an occasional number where typing normally works. This can happen if GuardedID® loses track where you are typing. If you type a letter and you see a number, GuardedID® has lost track of which field on your desktop you are working in. The best way to recover is to log off your desktop and log back on again. Otherwise you can open an application like Notepad, wait a few seconds and then type. Then try going back to the original application. If a number displays instead of a letter, GuardedID® will be "Out of sync". The character you typed when the number showed up will come out next, no matter what key you press. The display will be one key behind the keyboard for every number that showed up. When you wait 2 seconds, GuardedID® resets the buffer.
If the problem continues, report it to a system administrator and/or contact tech-sup@guardedid.com.
Internet Explorer has an advanced setting "Enable third-party browser add-ons". To make sure this is enabled, select Tools in the IE menu and click "Internet Options". Select the "Advanced" tab. In the second group you will find the setting. Make sure it is checked. Close and re-open IE to activate the setting. Then repeat the steps to make the toolbar appear.
GuardedID® uses the Windows driver signatures to be certain that your kernel is intact. If this message is reported for a Microsoft driver like "i8042prt.sys" for Windows 7, the issue is likely due to Microsoft update KB3004394. Copy and paste http://support.microsoft.com/kb/3024777 into the address bar of this browser for more information. Otherwise a disk error or software error (again, not connected in any way to GuardedID) has damaged the Windows catalogs in which case see http://technet.microsoft.com/en-us/library/cc734083.aspx. If the driver is not a Microsoft driver, it is either an old, unsigned driver (contact the device vendor for a current, signed, driver), or a rogue driver which should be removed before using the computer for sensitive operations.
I received a "GuardedID® keyboard driver is not responding" warning. What should I do?
GuardedID® constantly verifies that its kernel driver is secure. Under some conditions, legitimate Windows programs might block this verification. If you type 10 characters and GuardedID® cannot verify, it will issue this warning.
The recommended solution is to reboot. If that is not practical, warm restart by closing the Internet browser and exiting the "Desktop Protection" ["G" in system tray on bottom right of desktop]. Then go to Start | Programs | GuardedID® and restart "Desktop". If warm start does not help, try reboot. The most common repair is to uninstall GuardedID, reboot, then reinstall GuardedID, making sure that the installation is free of warnings. Reboot after installation. If the problem continues, report it to a system administrator and/or contact tech-sup@guardedid.com.
Why do I see a notice about "LicMgrEP.exe"?
The "LicMgrEP.exe" is part of GuardedID Protection license manager. If you are installing or using GuardedID for the first time, the notice may come from the Internet Security software. Allow LicMgrEP.exe to continue as long as it is properly signed from StrikeForce Technologies.
I am using Firefox with Vista and some sites are slow. Can I do anything?
Yes, you can elect to turn off some of GuardedID®'s security features, however, that is not recommended. One of GuardedID®'s security features is "Clickjack warning". Clickjacking is a type of cyber threat whereby an invisible link or button containing malicious code can be placed over a legitimate link or button on any website without the user's knowledge. This malicious link could also appear as a non-threatening link which essentially sends you to another website without your knowledge. When a user clicks on an unseen link the cybercriminal has the ability to take control of that PC and do whatever they want with it such as download keystroke loggers or malware which can wipe out the computers hard drive. Another example is the following: A web user might think that they are clicking on a button to close a dialog box, however, the button press actually deletes all their e-mail messages in their Gmail account. Or, a user might believe they are clicking on a button to decline to take a survey, when they are actually transferring money from their bank. This technique could be used to raise an article's Digg score or get paid for a pay-for-click advertisement.
GuardedID®'s Anti-Clickjacking feature helps prevent against these types of attacks by taking the invisible buttons and/or links and making them visible, by highlighting them with red dashes, showing the end user that the web page that they are on may contain malicious code. GuardedID®'s Anti-Clickjacking feature will also highlight in red dashes, ads, links, or content which is being served from a third party site. When you travel to these third party sites you should always use caution making sure you are on a legitimate site.
Because of the features of GuardedID® that help to keep you secure and alert of potential compromises, there could be some sites that will take longer to fully appear when using Firefox with Vista. To address this issue go to the GuardedID® toolbar and click on Manage, then click on Preferences. Under the Anti-Clickjacking Options section click on the boxes to turn off these features. This should eliminate the slowness in Firefox. If this does not solve the issue, then GuardedID® is most likely not causing the slowness and you may want to reset your GuardedID® preferences as they were.
A serial number (called Machine ID) is assigned to each machine. Your Machine ID is already activated, but with a different license key. If you have another License Key, try to activate with it. If not, please contact GuardedID support to resolve this issue.
Does GuardedID work with games, such as GT family or WOW (World of Warcraft)?
No. You must disable GuardedID during game play. GuardedID is designed to protect your browser sessions and desktop applications (MS Word, Excel, Outlook, VPN Clients, IM Chats, etc.). GuardedID protects some "online web browser games" but not all of them. GuardedID currently does not protect gaming applications that sit on your desktop like GT or WOW (World Of Warcraft), because games like that remap the keyboard for gaming functionality, etc. Before you launch these games , right click on the "G" in you system tray (bottom right) and "Disable or Exit" GuardedID. You will then be able to game with no issues. After you are finished gaming, go to start/run/programs/Guardedid and click on Desktop to restart GuardedID's Desktop protection.
Certain games played inside IE or Firefox may be affected by GuardedID. If your game play is disrupted, you can disable GuardedID by right-clicking on the "Tools" item in the browser's menu and un-tagging GuardedID. Approve disabling of GuardedID (if asked). After you are finished playing, return to the "Tools" menu and re-enable GuardedID toolbar. Close and re-open the browser to activate GuardedID protection.
Do I still need my anti-virus product suite?
Yes. GuardedID® blocks keys from keyloggers. You still need programs to keep viruses out of files (anti-virus/anti-adware) and to keep intruders out of your machine (personal firewall).
I am replacing parts on my computer. Will GuardedID® still work?
Before you replace parts on your computer, deactivate GuardedID® and make sure you have a copy of your license key. You can do this with the "Manage | Manage License" tool in the GuardedID® Icon or toolbar. Once your computer is repaired or replaced, simply press the "Activate" button of the GuardedID® Icon, enter your license key, and press "Activate". GuardedID® will start protecting your new computer.
How do I move a GuardedID® license from one computer to a new one?
If the old computer still works, deactivate GuardedID® and make sure you have a copy of your license key. You can get your old license and deactivate it using the "Manage | Manage License" tool in the GuardedID® toolbar and copying down the long string of characters with the dashes in the License field.
Once your new computer is ready, and GuardedID® is installed, simply press the "Activate" button in the GuardedID® toolbar. The Manage License form will open where you enter your license key (that you previously wrote down), and press "Activate". GuardedID® will start protecting your new computer.
If the old computer is not available, send an email with the name and email address you used when you purchased GuardedID® to GuardedID® support at tech-sup@guardedid.com. You will receive additional instructions.
Can I use the software on my other computers?
One GuardedID® license will protect two computers.
GuardedID® protection is provided to most desktop programs by the "Desktop Protection" component represented by the "G" in the Notification Area. End or temporarily Disable protection by RightClick on the "G" in the SysTray and select "Exit" or "Disable". GuardedID® will display a reminder that you are terminating desktop protection.
You can turn GuardedID® toolbars off by changing the Secured Mode "Always On" setting using the GuardedID® "Manage | Preferences" tool. Uncheck "Always On", Press OK, then close all web browser programs. When you open the web browser program again, GuardedID® will not Activate to the Secured Mode.
Also, you can disable GuardedID® in one browser program, but not the other, using each program's setting for add-on programs.
Keyloggers work by placing hooks into the Windows message stream thereby enabling them to log the keystrokes.
What are the existing methods for detecting keyloggers?
The existing methods for detecting keyloggers fall into one of two categories -- (1) Scanning for known keyloggers, and (2) Trying to prevent the keyloggers from hooking into the Windows message stream. Neither method is foolproof, since new keyloggers cannot be detected with the first method and it is difficult to stop keyloggers from hooking into the Windows message stream.
GuardedID® is a software program which encrypts your keystrokes between the keyboard and your desktop applications and Internet browsers, so that keyloggers cannot steal your personal or financial information.
The Standard Edition works with Internet Explorer and Firefox to block keyloggers from grabbing information going to Internet applications.
GuardedID® Premium Edition adds protection for desktop applications like Office, email, accounting, messaging, etc.
GuardedID® Enterprise Edition packages the Premium Edition solution with central management, vendor support, and multi-seat licensing.
What is "Screen-scraping" (aka "Screen Logging")? Does GuardedID Protect me?
GuardedID® Premium Version "Desktop Protectection" includes a blocker to hide the screen from screen loggers. "Screen-scraping" loggers capture snapshots of your screen each time you make a change. GuardedID does not stop the loggers, it sends them all black screens!
If my computer is infected with a keylogger, will Guarded ID protect me?
Yes. GuardedID® will protect the keys you type inside your browser, even if your anti-malware programs do not have current signatures. When the GuardedID® light is Green and says "ON", (or the "G" in the SysTray is flashes as you type), GuardedID® is protecting your keystrokes from keyloggers.
What Internet Browsers are supported by GuardedID?
GuardedID® Premium (also Enterprise) works with all major browsers. GuardedID® provides additional protection for the most popular browsers by installing a toolbar. The GuardedID® toolbars are provided for Internet Explorer 9 on and Firefox releases from 29 on. (GuardedID is usually available within days of a new Firefox release.)
Note- If you choose to install Firefox after you have already installed GuardedID® you must re-run the GuardedID® installer.
What is the "Premium" Version of GuardedID?
GuardedID® "Standard" versions protect your keystrokes when you work in Internet Explorer or Firefox. Version 4 adds protection for Chrome, Opera, and Safari. GuardedID® "Premium" version adds "Desktop Protection". "Desktop Protection" covers local programs like Skype, eMail, bookkeeping, editors, and Window's "Login" screens.
What versions of Windows does GuardedID® work with?
GuardedID® works with all versions of Windows 8, Windows 7; Windows Vista; 32-bit versions of Windows XP; Windows 2003
Will GuardedID® work with any keyboard?
GuardedID® works with PS/2 keyboards as well as USB keyboards, including wireless keyboards. Certain enhancement drivers for advanced specialty keyboards may not function when GuardedID® is enabled.
Does GuardedID® protect a USB keyboard plugged into my laptop?
GuardedID® protects typing from all active keyboards; the laptop keyboard and/or USB keyboard and/or PS/2 keyboard.
Does GuardedID® hide my keystrokes when I am using Remote Desktop programs?
No. The keystrokes going to Remote Desktop Connection programs cannot be hidden by the current GuardedID® releases.
What are the existing methods for detecting keyloggers?
The existing methods for detecting keyloggers fall into one of two categories -- (1) Scanning for known keyloggers, and (2) Trying to prevent the keyloggers from hooking into the Windows message stream. Neither method is foolproof, since new keyloggers cannot be detected with the first method and it is difficult to stop keyloggers from hooking into the Windows message stream.
What is the difference between GuardedID® and other anti-keyloggers?
GuardedID® takes a unique approach to snoop protection. It encrypts all keystrokes and transfers them to the browser via a proprietary path, bypassing the Windows message stream completely. Thus existing and new keyloggers can't get their hands on the keystrokes.
Driver Warning for \Driver\i8042prt or \Driver\kbdhid on Windows XP
Usually indicates that Windows Crypto service has been disabled in some way. The Microsoft Crytographic Services are important for protecting your computer security.
The "Resolution" section of the following Microsoft article has the steps that usually help to resolve the problem with cryptographic services which causes GuardedID to warn about \drivers\i8042prt.
http://support.microsoft.com/kb/822798/
Driver Warning for \Driver\DKbFltr on computers with Windows 7 64-bit
Check your computer for the following conditions:
===============================================================================
- In the folder [C:\WINDOWS\system32\drivers\] the file "DKbFltr.sys" shows 0kb in size.
- In the 64-bit folder [C:\WINDOWS\sysWOW64\drivers\], there is a "DKbFltr.sys" and its size is ~25kb, and it is properly signed (view its properties)
=============================================================================
If this is the case, delete the 0kb file C:\WINDOWS\system32\drivers\DKbFltr.sys and the GuardedID Status will return to normal. Acer laptops with Windows 7 64-bit are likely to have this problem.
Driver Warning for an unsigned driver from a valid source
Older or special Windows XP keyboard Drivers might not be signed. This applies to some versions of \Driver\Ps2, \Driver\Ps2Led, \Driver\qkbfiltr, \Driver\PCTCore, \Driver\hask, and \Driver\HpqKbFiltr. Others are specialty devices for gaming, etc.
Find the driver file in %systemroot%\system32\drivers (usually with a ".sys" suffix. e.g. \Driver\Ps2 = Ps2.sys)
Select the file, right-click, select Properties
Check for "Digital Signatures" tab. If the file is not signed, check with the manufacturer for an updated driver.
Driver Warning for an unknown driver and unknown source
Find the driver file in %systemroot%\system32\drivers (usually with a ".sys" suffix. e.g. \Driver\Ps2 = Ps2.sys),
scan it with your anti-virus program and research it on the Internet with sites like Virus Total.
Get Guarded