On the Local Options you are able to password protect Spytector, in this case nobody will have access to it without knowing the password.

The interface (GUI) supports few languages (English, French, Portuguese) and skins that can be changed on the fly.

All the settings you use to configure the Spytector can be saved, so the next time you run it you don't have to fill again all the necessary information.

The application hints can be turned on/off from this panel.

By clicking Load Default Settings, all the current settings will be replaced by the initial (default) settings.


<< back to top

On the Basic Settings panel you are able to set the names for the server, logfile and startup key.

The server and the logfile can reside in <system> or <windows> directories, as well as in any other specified location. The server is started automatically at the Windows boot, it's using the ActiveX startup method and you're able to set the registry key name.

The server is using the default emailer and the default browser (it injects in them) to send the log to you, in this way the firewall being bypassed. The injection option is automatically changing, according to the other settings you choose, so you don't have to modify it manually unless you want a specific behavior of the server.

All the above are valid for Windows NT, 2k, XP. In the case of Windows VISTA the server cannot be instaled on the <system> or <windows> directories and the ActiveX startup cannot be used. Under VISTA, the keylogger will be copied on a <local settings> directory and will use a system process (svchost.exe) for running.


<< back to top

On the Email Settings panel you should write the specific info needed for receiving the logs. After you have filled in the required info, it's good to use the Test button to see if the settings are OK.

The email feature works perfectly with all wel known email providers (Hotmail, Gmail, Yahoo etc.).

The logs sent to your email address can be either encrypted or plain text, depending on the option you chose.

The regular SMTP port is 25 but few ISPs (Internet Service Providers) may change it (2525, 26 etc.), so you can modify it accordingly.


<< back to top

On the FTP Settings panel you should write the specific info needed for receiving the logs. After you have filled in the required info, it's good to use the Test button to see if the settings are OK.

The logs can be uploaded either in the root folder or in any folder you specify. If the folder doesn't exist, it'll be created by the keylogger.

The logs sent to your FTP address can be either encrypted or plain text, depending on the option you chose.

The regular FTP port is 21 but sometimes can be different and you need to change it accordingly.


<< back to top

The Server Options panel gives you few choices to customize the server a bit more: server overwriting (the server can be overwritten by another server which is ran afterwards on the same computer), melting (the original server is deleted after the first run), disabling the System Restore, message box configuration (at the first run of the server a message is displayed), uninstalling after a specified number of logs sent or when a hotkey is pressed, access restriction, uninstall by checking a specific internet address (if the remote file exists - the address is valid - the server will uninstall itself).

The keylogger can be configured to be active after a specified time interval or after the computer restart.

Spytector server allows you to restrict the access to specific websites and applications. By clicking the Configure button a new panel shows up and from there you are able to establish the filters for applications and websites. In the case of the applications you have to add to the proper list the executable name (by example, if you add 'aim' then aim.exe will be stopped). On the websites list you can add keywords (by example, if you add 'porn' to the list then all the websites which contain the keyword, like http://freeporn.com and http://porn-star.com, will be blocked).


<< back to top

On the Log Options panel you can enable the option for the keylogger filter. The keylogger can be active only when a specific window is focused and its title contains the specified keywords. This option comes in handy if you don't want to have the logs filled with junk data.

The option for log formatting is enabled by default (whenever BACKSPACE is pressed the last trapped character won't be written to the log). If the Smart Keylogger checkbox is unchecked the log file will contain all the pressed characters and {BACKSPACE} keys.

The Protected Storage content can be included at the beginning of every log received. In some cases in the Protected Storage is stored a lot of junk data and if you're not interested by the stored passwords you have the option not to include it in the log. The Protected Storage is not retrieved under Windows VISTA.

The FireFox passwords can be decrypted and included at the beginning of every log received (just after the Protected Storage).

Spytector keylogger intercepts both sides of chat (messenger conversations) for all the most used chat applications (AIM, ICQ, Yahoo Messenger, MSN Messenger). The whole messenger conversations are included in the logs only if you check the appropriate checkbox.

The URL history is included by default at the beginning of every log received. The default number of URL entries (visited websites) is 20. In the case you're not interested to receive such info just uncheck the appropriate checkbox.

According to your needs, the logs can be received either when they reached a minimum size (default is 30 KB) or at specified day intervals.


<< back to top

The icon of the server can be replaced with any icon with 16x16 and 32x32 pixels and with 256 color depth (you can use the icons built into Spytector, or import your own). The icon size is 3638 bytes and in the default server isn't included any icon.


<< back to top

The logs can be viewed in a specially designed window included in Spytector, the Log Viewer. There are several options for loading the logs in the Log Viewer. If the logs are received by email, the easier method is to copy the email text body to the clipboard and afterwards use the Paste Log Text From Clipboard button. If the logs are downloaded by FTP, then the best way is to use the Load Decrypted Log button. For loading the local encrypted logs, from the <system> directory, it must be used the Load Encrypted Log button.

The different log sections are colored, so the user can easily see the PC activity. Initially, all the sections (Passwords, FireFox, URL history, Boot etc.) are put together, with the Passwords on top. From the upper right combo box, the user can choose different sections for viewing. Also, it's possible to search the log after specific keywords. The search can be executed upwards, downwards, case sensitive and/or after whole words.

The logs are deleted after they are loaded in the Log Viewer, for later viewing the logs can be saved as RTF and HTML.

Also, in the case you don't use the email or FTP delivery options, it's possible to retrieve the local logfile manually. On the bottom of Spytector's main window, near the Log Viewer button is located the Retrieve Local Log button. As the name says, the button must be used to retrieve and decrypt the local logs. By clicking it a popup menu with 2 options appears and it's possible either to retrieve the local logs automatically or to manually browse after them. Because the logfile name is configurable by the user, the automatic retrieval can fail so you have to browse for the logfiles to the <system> directory. The logs are automatically deleted after decryption.


<< back to top