Introduction: Easy Software Keylogger Using Shadow Keylogger

Picture of Easy Software Keylogger Using Shadow Keylogger

If you have been on the internet and not living under a rock the last decade you should know what a keylogger is. It is a small application that runs in the background of a computer invisibly and records all keystrokes made on a computer. Some are as advanced enough to capture screenshots, IM logs, video, audio, webcam, etc. but these usually cost alot of money upwards of $100! In this instructable i will explain how to put a freeware keylogger on a flash drive and easily record the keystrokes of the victims computer.

NOTE: I am not responsible for what you do with this information. This is intended for learning purposes and use on YOUR OWN computer.

Step 1: You Will Need...

Picture of You Will Need...

This instructable is simple and very straight forward, and assuming you already have a flash drive, free as well.

What you will need...

1.) A flash drive. I would recommend at least a one gigabyte.

2.) Shadow Keylogger (freeware) available for download from  here

3.) A victim's computer

Step 2: This Is Optional...

Picture of This Is Optional...

This instructable goes great when used on a encrypted drive.

- Keeps you doings secret
- Allows a safe place to store logs

- Makes a longer setup time
- More noticeable

If you want to use a encrypted drive, follow my other instructable before continuing with this one.

Step 3: Download and Load Up...

After downloading the Shadow Keylogger Freeware the setup is very straight forward.

Simply place the shadow keylogger.exe into a folder in the flash drive labeled something non-conspicuous like "SystemFiles" and rename the keylogger as "system".

Step 4: Make a Autorun File...

Now we will create a autorun.inf file which when put in the root folder of your flash drive will tell the computer to automatically start the keylogger application.

copy the following...

action=Open Keylogger

NOTE: If you named the folder or exe something different then systemfiles and system then change the script to accommodate your situation.

Save this file as autorun.inf and put it in the root directory of your flash drive

Step 5: Advanced Options...

If you thought that was all to this instructable you were wrong. Within the Keylogger software there is an advanced button this include the directory in which the log is saved. this is usefull and should be changed to your flash drive. There is also a option to capture screenshots but be careful about the screenshots as they can fill up a flash drive quickly if running for an extended period of time.

Step 6: Try It Out...

Next try it by unplugging your flash drive and plugging it back in. if the autorun file works correctly a box prompting for a password should appear. Now just type in your password and click finish. Next type in your password again and click record.

If it does not auto start on detection you can start it manually by simply clicking on the exe file in the flash drive.

Once running the keylogger will appear in the task bar as a whatever it is set as for a disguise. to access the log simply click on this icon and type in your password and you may view the log as well as save the record.

Please note that once the flashdrive is removed the keylogger will not remain active as it does not install into the system. Some anti-viruses may also have a problem with this so it is recommended that either you shut off the anti-virus manually or add an exception. I will not go into detail on how to do this as every anti-virus is different and i do not have time to cover them all.


Jose MariB1 (author)2017-08-17

send me one please
really hard to find nowadays

werose (author)2016-02-18

Nice topic

Yawata (author)2016-01-28

can't download shadow keylogger !

Can you give an another link please ?

MuhammadH5 made it! (author)2015-04-13

i've issues with the "autorun.inf" i've created this file and pasted in the root folder, but still not working :/

DanielC55 (author)MuhammadH52015-08-08

autorun disabled in win 7

jf78 (author)MuhammadH52015-04-13

My first suggestion would be to check your capitals on the path in the autorun. I see the folder is capitalized while the autorun isnt. Aside from that, the computer could be set not to run the default .ini

MuhammadH5 (author)jf782015-04-15

Okay thanks alot :)
Can you please upload or send me a "config file" commanded to save keystrokes+text in 30sec and high quality, actually i tried to create one but i didn't workout, and we donnot use config.xml file then we've to open it manually and put in password everytime we plug out usb, so please create a config.xml and send it to me, cz i donot know much about its commands, please edit it and make it work for auto save strokes thanks send it here :))

jasonkaven (author)2014-12-29

Hardware keylogger? It is easy to be found! I think keylogger software like Micro Keylogger is better than hardware keylogger, works invisibly.

trentfo (author)jasonkaven2015-02-23

How do you make a key logger using that program?

jasonkaven (author)trentfo 2015-03-16

It provides a free trial one, you can download it and unpack it to learn how to make a keylogger. I think it is a very good keylogger.

DhongM (author)2015-01-22

whare can i find the log?

jasonkaven (author)2014-12-29

Hardware keylogger? It is easy to be found! I think keylogger software like Micro Keylogger is better than hardware keylogger, works invisibly.

TamanbirS (author)2014-12-26

i am using windos 8 and it opens the folder itself, i want that the shadow keylogger runs itself even without clicking the sk.exe.. is there any way to run without clicking???

guifoxtel (author)2014-11-25

vary useful, thanks

RaheelH1 (author)2014-09-30


how are you?hope u will be fine

i hav doubt on my fiuancee that she is cheating me thats why i will send a kylogger link through facebook n she will download so i need a keylogger software and plz in keylogger set my email adress where i can receive all information

MuhammadA2 (author)2014-08-30


how to see what it captured plz hurry

Ijoeri (author)2014-06-15

But how does it work when you put the flash drive in someones computer?

Don't you need to install the keylogger on his computer too?

Sorry for poor english

argath26 (author)2014-02-17

how i can disable the big box after i end the keylogger session

TSJWang (author)2014-01-11

Just to throw it out there in the community

If you want to hide your autorun.inf and your sk.exe, you can easily run this command in the command prompt:

attrib thing.ext +s +h

It hides files. On my computer you cannot even find these files when you activate "Hidden Files" in "view".

Ewa945 (author)2013-11-23

Well, I'm using Spyrix keylogger and I'm happy with is it works for the purpose.

Busch98 (author)2013-11-20

Thanks for great tutorial for using keylogger on computer.

I have been using Spyrix for last one year, the installation process is really very easy.

peterbulan (author)2013-11-06

how to put the key logger in my create website reply pls

jf78 (author)peterbulan2013-11-07

I will not give you any information on embedding a keylogger in a website. There is no reason to do so other than malicious activity. Besides this is a very basic setup, in order for it to not be instantly detected by antivirus', it would need to be encrypted in such a way that the antivirus does not read it as a virus.

leonelcd (author)2013-04-08

Hi guys,

If you could help with my problem, I really appreciated it!

My name is Leonel and I am a master finance student at USP, in Brazil. Everyday I must go to the university just for use thomson one database. I tried use Shadow Keylogger software and its great, but I have problem with the password. What appears is:

Program Manager (5/4/2013 18:49:21):

Thomson One - Windows Internet Explorer (5/4/2013 18:51:13):[Left Arrow][delete]r

(user ** is correct!)

bkabto[delete][delete][delete][delete][Right Arrow][Right Arrow].refbkabto[Left Arrow][delete]

(password isn't refbkabto - that's my problem!)

Other day appears eebbkabto. In other words, kabto always appears. This is what turns on a lamp in my head! Is clear to me that the password is, somehow, encrypted. But how? The weblink is:

If yes, what type of encrypted is used? I have a source of the page, after loging (attached). I don't know how it works, but it look like a Javascript. Is the correct? In this case, what can I do?

Please, help me!!!

Very thanks!

Leonel Carlos

tigr87 (author)2012-02-05

o and when i get the download from cnet i get the file (sk) it looks like a pile of i just put the shadow keylogger folder into the systemfiles folder of the flash drive?

jf78 (author)tigr872012-02-05

You need to unpack it from the archive

tigr87 (author)jf782012-02-05

i got it working. but its goind to be a pain to put on someones computer

jf78 (author)tigr872012-02-05

That's not my problem. As stated this isn't meant for use on anyone's computer but your own.

tigr87 (author)jf782012-02-05

I didnt say it was " your problem". .......i was makeing a statement.and what are you talking about the third thing on the list is"a victims computer"

jf78 (author)tigr872012-02-06

A victims computer can insinuate any computer this is used on. Ie, your own.

tigr87 (author)2012-02-05

got it.but it doesnt its always asks for the password 3 times

jf78 (author)2012-02-05

That's because a keylogger is a virus... Even if its you using it AntiVirus will pick it up like it would anyother keylogger.

tigr87 (author)jf782012-02-05

k thanks.will it do that when i put it in someone else's computer.......not that i would ever do that haha

jf78 (author)tigr872012-02-05

More than likely. Every AntiVirus detects them differently. The only way that a AntiVirus wouldn't detect it is if you were to crypt and bind it with a FUD program

tigr87 (author)2012-02-04

avg says this is a virus

lostinadream (author)2011-10-09

I don't get the password part. How is the password set up in the first place?

MANinYOURhouse (author)2011-07-17

how do I turn it off?

jf78 (author)MANinYOURhouse2011-07-18

After pressing your secret key combo to access the keylogger screen there should be an option similar to close or stop. If not simply restart the computer, as it does not attach to the registry it will not boot with the computer and all will be fine. sorry i can not be of more help nbut i do not currently have the keylogger on a flashdrive.

Taha Shaheen (author)2010-12-14

It didn't work

ap0logna (author)2010-08-26

can someone give me info, i think my laptop has keylogger installed, what must i do?

jf78 (author)ap0logna2010-08-28

The easiest thing to do is run antivirus scans and make sure your antivirus definitions are up-to-date. If those come out clean then check your process list using the task manager (ctrl+alt+del) and look for any suspicious processes. This is not a sure fire way of finding one but it helps. If you see a process you are unfamiliar with just google the process name and usually you will find numerous pages explaining what the process is and if it is harmful and if so how to disable or remove it.

35Timmy (author)2010-07-25

i like it & i love it

NicOmbra (author)2010-07-10


xturnlgod (author)2010-06-30

software keylogger, not hardware. hardware key loggers are physical USB and PS2 dongles that log keys into an internal memory storage (windows, linux, mac: no matter. it works on the signals sent from the keyboard). then, you can recover the stored keystrokes from the dongle with a trigger password. No antivirus can see or detect these. nice job on the tutorial though :)

jf78 (author)xturnlgod2010-06-30

I understand what you are saying but i tried to combine a powerful software logger in a portable easy to activate hardware setting and i thought it fit best in the hardware category.

Cracknel (author)jf782010-06-30

yeah, sorry to say this but your instructable is about a software keylogger :)

jf78 (author)Cracknel2010-06-30

Okay okay calm down people I will change the name I just thought hardware was closer than software

smalltinyperson (author)2010-06-30


Archive555 (author)2010-06-30

Aside from the fact that almost any computer these days has anti-virus that, if "Shadow Keylogger" is not directly in their databases, will pick up on the keyloggers heuristics and delete/quarantine the drive immediately, this could probably be useful.

jf78 (author)Archive5552010-06-30

That's why I specifically said to shut off the antivirus temporarly or add an exception. If your actually using it on your own computer like I intended with This instructable then you should have no problem disabling it. Any problems you have putting it on someone roses computer is your own problem, and if I may add, illegal.

About This Instructable




More by jf78:Rotary Encoder: 3D PrintedCreate a super fast wifi hotspotSecuring your pc: 007 style!
Add instructable to: