User’s Guide

KeyGrabber USB
KeyGrabber Nano

--- ------------------------------------------------------------------------------------------------ Copyright Electroware © 2018

1
Quick start
This section contains concise information on basic keylogger handling. If you need detailed
instructions, please refer to sections Recording keystrokes and Viewing recorded data.

To record keystrokes, plug the device in-between the keyboard and USB port.

To view recorded data, plug the device in-between the keyboard and USB port, and press
the 3-key combination simultaneously (by default K, B, S)

The keylogger will pop up as a removable drive, containing the file LOG.TXT. This file will
contain all recorded keystroke data.

Recording keystrokes
Installation of the KeyLogger USB is quick and easy. Simply plug it in between the USB
keyboard and the USB port. No software or drivers are required. The USB hardware
keylogger will start recording all data typed on the keyboard to the internal flash disk. Once
recording starts, new data will be appended to the end of the log file. The device is completely
transparent for computer operation.

--- ------------------------------------------------------------------------------------------------ Copyright Electroware © 2018

2
 Disconnect the USB keyboard from the
USB port at the computer or hub. This can
be done even with the computer up and
running.

Connect the hardware USB keylogger

between the USB keyboard and the USB port.
Keystroke logging will start automatically.

Note: If an external USB hub is being used, connect the keylogger between the hub and the
USB keyboard.

Viewing recorded data

Once keystroke data has been recorded, it may be retrieved on any computer with a USB
port. This is done by switching to Flash Drive mode. The KeyLogger USB and keyboard
should be connected in the same way, as during normal recording.

Each device has a built-in 3-key

combination (by default K, B, S).
Press these 3 keys simultaneously
to trigger Flash Drive mode.

After a few seconds, the hardware

keylogger will automatically get
detected as a mass storage device.
The operating system will use the
standard built-in mass storage driver
(MS Windows 7 in the following
examples).

--- ------------------------------------------------------------------------------------------------ Copyright Electroware © 2018

3
 Depending on the drive letters
available, the device will be visible as a
new drive, for example F:. Use the
systems file manager to browse this
disk (for example Explorer). The
keyboard will be disconnected and
unavailable, so the mouse must be
used to browse the disk.

The removable disk will contain the file LOG.TXT with a text log of all captured data.
Keystroke data is formatted in the same as it would appear on the screen, with special keys in
brackets ([Ent], [Esc], [Del] etc.). This file can be viewed and searched with any text editor,
such as Notepad or MS Word.

During Flash Drive mode, the USB keyboard is inaccessible, and usually the mouse is the
only operating device. Therefore it is a good idea to copy the file to the hard drive, and restore
standard operation. Erasing and editing the file LOG.TXT is obsolete, because the flash disk
has a huge memory worth of years of intensive typing.

Switching back to standard mode can be achieved by a safe software removal of the flash
disk. Use the systems standard disk removal procedure. For MS Windows, left-click on the
Safe Removal icon in the system tray and select the appropriate drive. Some systems will
require to unplug the reconnect the keylogger.

Note: During the first switch to Flash Drive mode, the operating system can ask for drivers. In
such case choose automatic driver installation (usually default option).

Note: While in Flash Drive mode, the USB keyboard is disabled. Use the mouse to operate
the system. If mouse operation is dependent on the keyboard (i.e. wireless desktop or USB
keyboard with mouse attached to it), connect the keyboard/mouse combo to a different USB
port after switching to Flash Drive mode.

--- ------------------------------------------------------------------------------------------------ Copyright Electroware © 2018

4
Configuration options
The KeyLogger USB may be configured through the file CONFIG.TXT, placed in the Flash
Drive root folder. Use any text editor to prepare such a configuration file, containing the
following text:

Password=KBS
LogSpecialKeys=Medium
DisableLogging=No

Copy this file to the root folder in Flash

Drive mode. The new configuration will
be loaded on next power-up.

The following list presents the most

common configuration options. All
variable and value strings are case
insensitive.

Password sets the 3-key combination

for triggering Flash Drive mode. Any
three-letter key combination is allowed
(sequence is irrelevant). The password
setting is national-layout independent.
Default value is KBS.

LogSpecialKeys sets the logging level for special keys, such as Enter, Escape, F1...F12 etc.
Special keys are logged in brackets, i.e. [Ent]. Allowed values are None (only text is logged),
Medium (text with basic function keys are logged), and Full (text with all special keys are
logged). Default value is Medium.

DisableLogging allows to disable keystroke logging, however does not affect mode
switching. Allowed values are Yes (logging disabled) and No (logging enabled). Default value
is No.

DisableLayout allows disabling the currently loaded layout, without having to delete the
layout file. Allowed values are Yes (layout disabled) and No (layout enabled, if present).
Default is No.

Encryption enables flash disk encrypting. Encryption will ensure full confidentiality of the
stored data, even if the device is physically tampered with. Allowed values are Yes
(encryption enabled) and No (encryption disabled). Default is No.

Important: toggling the encryption setting will format the entire flash disk. All data will be lost,
including the configuration and layout files!

An example configuration file contents is shown below:

Password=SVL
LogSpecialKeys=Full

--- ------------------------------------------------------------------------------------------------ Copyright Electroware © 2018

5
Encryption=Yes

A full list of available parameters with descriptions is available below.

Basic parameter list

Parameter Values Example Description

3-character password Three-character key combination for
Password Password=SVL
(default KBS) activating Flash Drive mode.
None
LogSpecialKeys Medium (default) LogSpecialKeys=Full Special key logging level.
Full
Yes
DisableLogging DisableLogging=Yes Keystroke logging disable flag.
No (default)
Yes
National layout disable flag (see section
DisableLayout No (default) DisableLayout=Yes
National keyboard layouts).
Menu

Advanced parameter list (use only when you know what you’re doing!)

Parameter Values Example Description

Flash drive encryption setting (caution:
Yes
Encryption Encryption=No changing this value will re-format the
No (default)
flash drive).
Yes SupportReportProtocol
SupportReportProtocol Report protocol support flag.
No (default) =No
Yes (default)
CheckShortFrame CheckShortFrame=Yes Short frame check flag.
No
Yes (default)
CheckModifierByte CheckModifierByte=No Modifier byte check flag.
No
Filter value
FrameFilter (range 0…255, FrameFilter=226 Frame filter value.
default 98)
Auto (default)
KeyboardSpeed Full KeyboardSpeed=Auto USB keyboard speed setting.
Low
Yes
CheckOverflow CheckOverflow=Yes Overflow check flag.
No (default)

--- ------------------------------------------------------------------------------------------------ Copyright Electroware © 2018

6
National keyboard layouts
It is possible to enable a national layout for language-adapted keyboards, such as French,
German etc. This will allow national characters to get logged properly (including those with Alt
Gr), such as ö, æ, ß, ó etc. The following example demonstrates the advantages of applying
the German national layout.

Text logged without layout Text logged with layout

Kezlogger )PS-2 / USB= Keylogger (PS/2 & USB)

To enable a national layout, the

appropriate layout file named
LAYOUT.USB must be placed on the
flash disks root folder. The file must
be copied in Flash Drive mode.
Layout files may be obtained from the
device’s internal memory where are
stored as a zip archive.

To enable the layout, safely remove

the flash disk. On power-up, the
layout file will be loaded automatically.

Specifications
Power supply – 4.5 V – 5.5 V DC (drawn from the USB port)
Power consumption – 65 mA (0.33 W)
Keyboard support – USB HID-compatible keyboard (Low-speed, Full-speed)
Maximum burst log speed - 500 byte/s (approx.)
Maximum continuous log speed - 100 byte/s (approx.)
Memory capacity – 16MB to 2GB
Data retention - 100 years
Maximum log read speed – 150 kB/s
Dimensions inc. connectors (L x W x H) - 53 mm x 20 mm x 12 mm (2.1" x 0.8" x 0.5")

All products come with 1 year warranty against manufacturer defects. Defect products
must be shipped by the customer. All warranty repairs and delivery to the customer will
be paid by the distributor.

--- ------------------------------------------------------------------------------------------------ Copyright Electroware © 2018

7
List of special keys
[Esc] - Escape [Prn] - Print Screen
[F1] - F1 [End] - End
[F2] - F2 [Scr] - Scroll Lock
[F3] - F3 [Up] - Up
[F4] - F4 [Dwn] - Down
[F5] - F5 [Lft] - Left
[F6] - F6 [Rgh] - Right
[F7] - F7 [Num] - Num Lock
[F8] - F8 [-N] - - (num)
[F9] - F9 [+N] - + (num)
[F10] - F10 [.N] - . / Delete (num)
[F11] - F11 [/N] - / (num)
[F12] - F12 [*N] - * (num)
[Ctl] - Control [0N] - 0 / Insert (num)
[Alt] - Alt [1N] - 1 / End (num)
[Ins] - Insert [2N] - 2 / Down (num)
[Hom] - Home [3N] - 3 / Page Down (num)
[PUp] - Page Up [4N] - 4 / Left(num)
[PDn] - Page Down [5N] - 5 (num)
[Del] - Delete [6N] - 6 / Right (num)
[Win] - Win [7N] - 7 / Home (num)
[Aps] - Apps [8N] - 8 / Up (num)
[Cap] - Caps Lock [9N] - 9 / Page Up (num)
[Ent] - Enter [Pwr] - Power
[Bck] - Backspace [Slp] - Sleep
[Tab] - Tab [Wke] - Wake

Legal disclaimer
Manufacturer or distributor does not take responsibility for any damage, harm or legal actions
caused by misuse of its products. The user should follow the guidelines contained in this
document, otherwise no liability will be assumed. It is the user's responsibility to obey all
effective laws in his/her country, which may prohibit usage of keylogging products. Please
also consider, that not knowing the law does not allow to not obeying it. A good example is the
U.S. Department of Justice Letter on Keystroke Monitoring and Login Banners, according to
which a clear notice should be displayed, warning that user keystrokes may be logged.
Please check with your legal representative for logging requirements in your country.

You should not use this device to intercept data you are
not authorized to possess. Most countries recognize
this as a crime. Please consult a legal representative
for logging requirements in your country.

ELECTROWARE
Sw. Elzbiety 10
43-100 Tychy
POLAND
WWW.ELECTROWARE.PL
electroware@electroware.pl
tel +48576881595

Copyright © 2018. All rights reserved. Made in EU (Poland) RoHS

--- ------------------------------------------------------------------------------------------------ Copyright Electroware © 2018

8