How The USB Keylogger Works

KeyCobra

Record mode

Installing the USB keystroke recorder is quite simple. All you do is unplug your USB keyboard, attached the device and plus it back into the USB port.

There are no drivers or software to download or install - it is true plug and play. The USB keylogger will start recording all keystrokes typed automatically onto the internal flash 2 seconds after it's plugged in.

USB Installation Before USB Installation After

Simply disconnect the keyboard USB cord from the computers USB port (or at the hub). You can do this even if the computer is up and running.

Connect the USB keylogger between the keyboard and the USB port. The keystroke logging will begin automatically - there are no other steps!

Playback Keystroke Mode

Once data has been recorded, you will be able to retrieve it from any computer that has a USB port. You do this by switching to Playback Flash Drive mode. The device should be connected the same way as it was in record mode.

Playback mode

Each keylogger has a built in combination code. It is 3 keys (which you can change). The default is K, B, S. Press these 3 keys simultaneously to begin Playback Flash Drive mode. Be sure not to hold SHIFT or press any other keys. The device will be available for playback once all 3 keys are pressed at the same time. The computer will automatically detect the keylogger as a storage device and you will see the following pop ups on your computer:

USB mass storage device

Select to view the files and you will see that the Flash Drive will have a file in it named LOG.TXT. This text log will contain all the captured data. The keystroke data is formatted the same way as it would have appear on the computer screen. The special keys will be in brackets ([Esc], [Ent], [Del] etc.). You will be able to view and search this file with any standard text editor software such as MS word or Notepad.

Keystroke Log File

You can simply drag the LOG.TXT file onto your desktop (or copy it anywhere on your hard drive). You can then switch back to record mode by simply disabling the drive through the operating system.

switch back to record mode

You can read the full details in our USB User Guide.

Configuration Options

You can configure the USB Keylogger through the file named CONFIG.TXT, which is located in the root folder of the Flash Drive. You can use any text editor to edit the file. You also can create the file as well if needed. It will need to contain the following text:

Password=KBS
LogSpecialKeys=Medium
DisableLogging=No

Simply copy the file to the root folder of the Flash Drive. The new configuration will be loaded the next time record mode is initialized.

USB Configuration options

Password will set the 3 key combination for triggering the Playback mode. Any three letter combination is allowed (the sequence does not matter). No numbers or special characters are allowed. KBS is the default value.

LogSpecialKeys will set the logging level for other special keys, such as Escape, Enter, F1...F12 etc. As mentioned above, you will see brackets around the special keys i.e. [Esc].

The allowed options are:
- None - Only text is logged, no special keys
- Medium - All text is logged with basic functions keys as well
- Full - All text as well as special keys are logged.

The default setting is Medium.

DisableLogging will allow you to disable the keystroke logging, however, it does not affect the mode switching. The allowed values are Yes (the logging is disabled) and No (the logging is enabled). The default value is No.

Layouts for National Keyboard Languages

You can enable a national layout for different language keyboards (like German or French etc). When you do this it will allow for national characters to properly get logged, including keyboards with Alt Gr, such as ö, ß, ó etc. The example below shows the advantage of applying the German layout.

Text logged with layout Text logged without layout
KeyLogger (PS/2 & USB) Kezlogger )PS-2 / USB=

The appropriate file named LAYOUT.TXT needs to be placed i the root folder of the device in order to enable a national language layout. The file needs to be copied in Flash Drive mode since there is no access to the flash drive in recording mode. You can get the layout files from our layout download section. The flash disks main folder should then have the LAYOUT.TXT and the log file (LOG.TXT).

National keyboard layouts

Simply safely remove the flash disk to enable the new layout. The layout file will load automatically on the next record mode initiation.