Document

User Guide

Installation

Starting MING Keylogger for the First Time

Main Window

Message Archive

Messenger Statistics

Bandwidth Statistics

Top Messenger Users

Internet Traffic

Automatic E-Mailing

Automatic FTP

How to Achieve Maximum Security

Installation

Once the file has downloaded completely, please open the folder containing the file you downloaded.

Double-click the installation file you just downloaded to start installing MING Keylogger on your computer.

At the end of installation, you must install the WinPCap 4.0 package.

Starting MING Keylogger for the First Time

After you start MING Keylogger, just click the "Start" buttonor click menu item Control->Start to start capturing packets. Then a window will show as below:

After select a correct network interface, the user will be displayed in the left panel and the keylogger starts to work.

In order to achieve security, you can click menu item Control->Settings to Enable stealth Mode.

When the settings are shown the top option is "Run at Windows Start up". Select this item, MING Keylogger will run when Windows starts. At the same time, you should choose the "Stealth" mode option. MING Keylogger will not be visible and will only be accessible using the hot key. Other options will be introduced in How to Achieve Maximum Security.

In Stealth Mode, you must set a hotkey. The default hotkey is CTRL+ALT+0. You can use second hotkey to prevent unauthorized users from "guessing" MING Keylogger's hot key simply by trying all possible combinations.

You can use a password to access MING Keylogger. This includes viewing chat logs, changing settings, and so on.

Main Window

Main window is divided into two parts: the left is the list of users in the network; the right shows the information of the computer.

User List

The User List shows all the users on this computer. If the user is not available, the Icon will be displayed. Icon means that this user has received new messages. At the same time, an item (such as +participant's name) will be displayed under the user.

Keystrokes Tab

The Keystrokes Tab shows list of all keystroke conversations captured in the computer. Each conversation belongs to a special program. The conversation with bold font means that administrator has not read it. Double clicks on the conversation item can view the content of the conversation.

Conversations Tab

The Conversations Tab shows list of all active conversations captured in the computer. The conversation with bold font means that administrator has not read it. Double clicks on the conversation item can view the content of the conversation.

Mails Tab

The Mails Tab shows list of all emails sent and received in the computer. Click Icon in Computer List to show List of emails received. And click Icon to show List of emails sent. The mail with bold font means that administrator has not read it. Click on the mail item can view the content of the mail. Icon   let you view html content if the mail has html part. While click Icon to view attached files.

Web sites Tab

The Web sites Tab shows list of websites visited by the computer. Click on the website item can view the content of website.

Screen Shots Tab

The Screen Shots Tab shows list of screenshots captured in the computer. Click on the screenshot item can view the content of screenshot.

Bandwidth Tab

The Bandwidth Tab displays all traffic to/from any computer on your network. It shows Internet traffic, LAN traffic or both (Internet & LAN). You can see current speed, average speed (over a range of an hour) and max speed of the day. You can view the total download and upload amounts in the "traffic" List box. The Page "INTERNET" shows Internet traffic of all PCs on the LAN.

User Tab

The User Tab shows some information of the computer selected. Field "Start time" shows when the capture started. "Summary" area shows summary of all kinds of instant messengers, mails, websites and Files. Field "Time" shows the chat time.  Field "Total chat time" shows all the chat time of different messengers. Field "Mails" shows how many mails have been sent or received. "Messengers" area shows information of each messenger in the computer. 

Message Archive

All conversations are stored in a local database. You can analyze the data based on the participants, time or date, or you can scan the conversations for keywords. 

In the Message->Message Archive Window, you can browse conversations in the database of messages. 

Double-click one conversation item to view the content of the conversation.

Click "Output" button to output the conversation to a file.

In the Message->Search Window, you can search conversations by keyword. After input keyword string and click "Search" button, the conversations that contain the keyword will be displayed as below. 

You can click "Stop" button to cancel it. Select one conversation and click "Messages" button (or double-click) to view. 

Messenger Statistics

You can click menu item Tools->Statistics to view statistics of messages, and get statistics result of one computer or all computers in the network. "Summary" area shows summary of all kinds of instant messengers. "Messengers" area shows information of different messengers. Underside, there are a distribution figure of different messengers usage by messages or time. 

Bandwidth Statistics

The Bandwidth statistics window shows statistics about all defined filters. You can select one or more filter from the list and the statistics table will display the total download and upload amounts measured by the selected filters during the selected period. You can choose 'Internet & LAN', 'Internet', and 'LAN'. You can also choose hourly, daily, weekly, monthly and yearly statistics. 

Top Messenger Users

Here, you can view top messenger users by date, time,  messenger or messages.

Internet Traffic

Here, you can view top Internet users by date, time. Field "Percent" means that the percent of total internet traffic this user has used .

Automatic E-Mailing

The E-Mailing feature will automatically e-mail you the chat logs at a set time. The chat logs will be sent as plain-text attachments readable by any text editor such as Notepad. The e-mailed chat logs will have a .txt extension.

To enable and configure the e-mailing select the "Enable email delivery".

Description of Fields:

• Send to - E-Mail address to receive the chat logs.

• Send from - E-Mail address used to send the e-mail (may be the same as Send to)

• Username & Password - User account information (When use SMTP authentication login)

• SMTP host - This is the SMTP server used to send your e-mail. If you are unsure what to put here, contact your ISP.

• SMTP Port - This is the port used by the SMTP server. In most cases, this is 25.

• Mode - if "Send at midnights" is selected, MING Keylogger will e-mail you at about 12:00pm.

To test your e-mail settings click the Test Email Settings button. A test message will be sent using the e-mail settings.

Automatic FTP

The FTP feature will automatically uploaded chat logs to the FTP server at a set time. 

Description of Fields:

• User Name - The user name required to log in.

• Password - The password required to log in.

• FTP Host - The IP address or host name of the FTP server (do not include ftp://).

• Port - This is the port used by the FTP server. In most cases, this is 21.

• Directory - The directory on the FTP server to store the chat logs.

To test your FTP settings click the Test FTP Settings button and MING Keylogger will attempt to connect to the FTP server. You will be notified if the test connection was successful.

How to Achieve Maximum Security

If you activate stealth mode, please follow the guidelines below to make MING Keylogger as secure as possible. Not all recommendations are required. Please use the ones that fit your situation and needs the best.

• Test MING Keylogger before it is used by other users
  This is a very important recommendation. For best results, after installing and configuring MING Keylogger please become familiar with MING Keylogger by letting it log some test instant messages. By doing this, you will become to accustomed to MING Keylogger and its features. This will also help you to determine if any of the following recommendations would be helpful. 

• Hide Program folder
  When installing MING Keylogger, the default folder is C:\Windows\system32\MINGKL2. You can hide the program folder by select 'Hide Program folder' item in Settings Dialog. This will hide all the files of MING Keylogger.

• Delete desktop icon
  When installing MING Keylogger, it will create a desktop icon "MING Keylogger". You can remove the desktop icon by select 'Remove the program from the Start->Programs menu' item in Settings Dialog. 

• Hide entry from the windows startup list
  You can hide MSConfig (Startup entry) by select 'Hide entry from the windows startup list' item in Settings Dialog. 

• Hide program process from Task Manager
  When MING Keylogger is running, you may notice it in the Processes list of the Task Manager on Windows 2000 and Windows XP. You can hide MING Keylogger process from Task Manager by select 'Hide program process from Task Manager' item in Settings Dialog. 

• Remove from "Add or remove programs"
  When installing MING Keylogger, it will add an item in uninstall list (Add or remove programs). You can remove it by select 'Remove from "Add or remove programs"' item in Settings Dialog. 

• Remove the program from the Start->Programs menu
  When installing MING Keylogger, it will add an item in Start->Programs. You can remove it by select 'Remove the program from the Start->Programs menu' item in Settings Dialog. 

• Use two Hot Keys
  If you just use one Hot Key, it is possible that the user of the computer may discover MING Keylogger is running by accidentally pressing the hot key. You can avoid this by setting MING Keylogger to use two Hot Keys. The two hot keys must be pressed in ascending order to Show MING Keylogger. This will prevent any accidental discovery of MING Keylogger. 

• Automatically minimize to system tray
  If "Automatically minimize to system tray when run" item in Settings Dialog is  selected, this option will cause Chat Monitor to be minimized to the system tray when Chat Monitor is run. This option is recommended if you choose to use Normal Mode.