PLEASE READ THIS ENTIRE FILE
=============================
Product: WinSession Logger (the Software) Limited version works for 3 hours and you have to click the start button.
Version: 4.9
Release Date: May 2010
---------------------------------------------------------
CONTENTS
- Requirements
- Critical for Windows Vista/7
- About WSL
- CONTACT & ORDERING of Additional Licences
- Changelog
- Steps for sending a keylogger with invisible installer included in other exe
REQUIREMENTS SUGGESTED:
-Pentium 4(but also could run in older processors )
-Microsoft Windows Vista/XP/2003/2000/7
-An Internet browser: Internet Explorer( 6,7,8) Firefox 3, Opera 5 ,Mozilla or Netscape(6.0 or higher)
-Broadband Internet connection, upstream(not downstream, ADSL lines sometimes are very slow 100Kbps) of 256 Kbps or faster, via Ethernet interface(only for messages capture)
-18 MB on hard disk, NTFS or FAT32 filesystem. To save logs you could require 1GB or more, after severals months of use
-A English,Spanish,portuguese, etc. keyboard with 102 keys or more.
-ANSI support, UNICODE keystrokes will not be saved.
-An Administrator account, to install and changue configuration.
-Install as local user but if your computer is connected to a domain controller request additional instructions.
Last changes related to compatibility with browsers
Internet Explorer 6 and 7, Firefox 1.5, 2.0.x
---------------------------------------------------------
Critical for Windows Vista/7
1.- Please change PERMISSIONS of the selected folder, for read and write for everyone
Otherwhise, no one log will be created, nor settings will be saved.Sometimes you should apply the same if you are using XP/2K
Except for the current administrator.
If you don't know about it, use another folder for instalation example:
c:\my_programs\otherpath
2.- Disable User Access Account, UAC if you plan to use content Filter, reboot your pc.
3.- Remove by hand the links of AVD of other desktops on your PC
4.- The funcion for capture urls doesn't work with Internet Explorer 7, yet.
-----------------------------------------------------------
IMPORTANT INFORMATION
About WSL
the Software is a surveillance application,When running
will log activity from any user, keystrokes,images,etc.
The Freeware Licence is limited to 60 Minutes of Monitoring/Restricting,
when this time expires the monitoring will Automatically stop.
If you are reading this file you are using the registered version of WinSession Logger(AVD)
When running monitoring, you can type your password at any time
and a dialog will be displayed, saying: The monitoring process
is loaded, terminate?. If you agree select OK.
If the keylogger is killed by other process your computer will be shutdown in about a minute.
YOUR FIRST PASSWORD IS: 123456 or wslpro (lowercase)
Always run configuration (Vir_cleaner.exe) as Administrator(to change configuration)
--------------------------------------------------------------
CONTACT & ORDERING of Additional Licences
You are allowed to install this software in two computers on your LAN with one licence,including two "remote installation" with "packer".
disconts per volume are applied.
Visit the Website: http://www.cromosoft.com for support, bugs or suggestions.
Online Order
execute: register_mydb.exe from your installation path
Changelog
--------------------------------------------------------------
Version 4.9 Includes FireDaemon Pro Trial Version as an optional addon, FireDaemon Pro will increase the reliability of WinSession Logger, WSL will run as a interactive service and can't be stoped or deleted, store urls from Google Chrome, save queue of documents from default printer as prj files.
Version 4.8.3 Licence will be applied only if activation works as expected, as addon is provided
Version 4.8.2 Fixed bug with TLS at remote deployment.
Version 4.8 Implicit TLS was added for email delivery, files were recompiled to avoid warnings of NOD V4, installing licence requires Internet, now using your secret password you can start, stop the keylogger.
Version 4.6 Limited version, Email delivery is posible using TLS(used by gmail), screen capture of websites was added, compatible with Internet Explorer 8, Firefox 3
version 4.5.1 Fixed 1 bug related to updating the software from trial version.
version 4.5 Removed WinPcap, removed function to capture MSN messages from Ethernerd Cards, was not very usefull because
WinPcap was required to run as administrator.
Version 4.4.3 Fixed the bug, with a showmessage if MSN capture was selected.
Version 4.4B The feature "invisible in the process list" was added but works only for users who are administrators.
Version 4.3 Compatible with Internet Explorer 7 of Windows Vista, email delivery to two addresses, delivery of logs at the same hour once at day(by email)
version 4.2.5 Fixed bug with web delivery, added function for sending *.log files at a specific hour, also will be included *.logs of the previous day.
version 4.2 Fixed bug with remote deployment, no email logs were delivered if the user has not administrative rights, function delete logs after delivery will delete logs of folder data not only for remote installations, the option "delete logs after delivery" will delete the entire content of the data folder if email delivery is enabled, in other cases only logs files created few minutes ago will be deleted, http delivery still has problems.
version 4.1.9,Was added an autodetect function for your NIC when MSN capture is enabled,don't use if you have several NICs,was disabled temporaly, ShutDown function when a instance of the keylogger is killed, sometimes fails if the registry is very busy, was detected and fixed a bug observed in few computers, introduced by an third part library when the keylogger runs under restricted users,lists for content filter and others were resized from 40 to 100, bugs of "content filter" was fixed
version 4.1.5, fixed an important bug, as you know configuration is saved in a ini file and in the Windows registry, when you open WinSession and close it without making changes, registry values were deleted.Now finally fixed.
version 4.1.2, fixed an eventual bug, sometimes after hibertating computer was shutdown because the service of wsl believed that a instance of the keylogger was killed, fixed other bug, windows was shutwdown when was clicked "Stop the keylogger"
version 4.1,Was added a function to group titles for *.log files(in a pop up menu), you will save time watching these logs,after of grouping title double click on a title for watching,hit Esc to exit, the font of WSL now uses the default font of Windows
version 4B 4.04, FTP delivery was improved, if your Internet connection is slow: 128, 256Kbps,the FTP client still will send the*.log file if there were changes, now AVD isn't detected by Norton Antivirus,Spy Sweeper,Spyware Doctor,Windows Defender,probable others, files Were changed, was removed the rookit for compatibility
with Windows Vista.Was included a service (AVD_Antivirus with filename: avd_w2kw.exe ) who checks for running instances of AVD, if one of them is killed Windows will be shutdown.
To prevent this windows shutdown write your password a dialog will appear and click "Cancel" then current shutdown will be cancelled. If you close other user session(if you are admin) where The Software is running
your windows will be shutdown to cancell this action also write your password when the dialog appears click Cancel.
version 3.8 Compatible with Vista, search function was improved
version 3.7.3 Was added delivery by LAN but because there were some error with passwords requires a UMC path with full permits also was fixed a bug with the included rootkit.
version 3.7 Now WSL saves keystrokes of this type: Alt+ Number,was fixed a bug with the main Tlistview, main exe was renamed because sometimes there were a conflict with a reserved word.
Version 3.6.3 Was removed the link to remove the software of your Panel Control, execute unins001.exe of the path where was installed WSL
Version 3.6.1 delivery of log files was fixed for ftp/web
Version 3.6 Bugs fixed with remote deployment now the installation of the RootKit is optional.
Version 3.5 Low level hook won't used for mouse capture, sometimes it slowed down the mouse,was fixed a bug with the main listview and the number of files displayed,also was added the option of deleting *.dat files with a click for an specific date
Version 3.4 Fixed bugs with SMTP authentication and 16 characters for the origin email, now is included http delivery, more options for content filter and others.
Version 3.2 Now WSL uses low level hooks, email delivery will be posible only if you have an SMTP account, request to your ISP if you don't have one. Minor improvements were made, "key name" is available for more characters including VK_HELP(47), you can export your setting and import them if you install an update of WSL.
Version 3 Now WSL and it's exes are invisible from the process list, remote deploymente with email delivery is posible,WSL should not be used under Windows 98 with the "packager",no more ".ope" (executed and opened files),this was disabled the .ope for compatibility, were fixed a buf with remote uninstall after a number of days.
Version 2.4.4,Interval of time (WinSession Logger Start Up-> Auto Power Off)for power options were fixed when WSL was installed witout WinPcap, it was always one minute.
Tip:
If you go to edit->Search text inside every file,
keep the "search dialog" in a visible place.
If you reopen Search.. a new search will be started.
Steps for sending a keylogger with invisible installer included in other exe
-----------------------------------------------------------------------------
Introduction
============
The keylogger will run in the computer with commercial or trial license, if you change your hardware, or your hard disk contact cromosoft.com for
getting a new license.
One license can be installed two times, when you creates a trojan version of the keylogger you need a valid license, or the software will
be installed as trial version, trial version stops after 60 minutes, you can't click restart because GUI interface isn't available.
if you installed the software in your laptop you still have one installation using the same license. For additional licenses contact cromosoft.com
Optional Control messages
========================
in version 4.8 was introduced online validation to avoid abusive use of the keylogger and optional messages during remote deployment.
Using these messages you know if the keylogger was installed.
Message 1: if no internet connection is available this message will be shown, the software will run as trial version.
Message 2: The license was validated ok
If message 2 is not shown the license is invalid, in case you don't get message1
Message 1 (during normal installation is not shown)
::
Message 2 (during normal installation is visible)
if email delivery is activated from your configuration file the first email will contains:
"Remote Install OK Licence Valid"+ your previous message from your configuration (vdsconfig.ini)
Steps
============================================
Execute AVD Antivirus
Kill the keylogger from memory, if the keylogger is loaded and stoped or loaded and running write your password 123456, wslpro, or your own password,
an dialog will be shown:
terminate the keylogger?, select yes.
Critical: If one file is in use, packaging will fail, if the host file is in use also an error will be generated.
click Packer
Select one host exe, fill a valid license and follow instructions, wait a few of seconds( 10, 20, etc.).
Copy the new exe at other computer, or try with other Windows installation, remove the Internet connection,
install and try it during 60 minutes; if everything is working as expected install once again but in the final computer with Internet connection.
The keylogger will be installed and the license will be applied.
Important: Once created the trojan version of the keylogger copy to the hard disk of the remote computer where Windows is installed and execute,
NEVER, execute from an USB, LAN,etc. or the software licence will be applied to other Hard disk (your uSB).
Delete this file and the manual in pdf format for your own security after of reading.
