Warning

 

Close
Confirm Action

Are you sure you wish to do this?

Cancel Confirm
AR15.COM
12/30/2004 12:36:30 PM EDT
My sister-in-law is splitting up with her husband.  I have a feeling that he's got some monitoring or spyware stuff installed on their home computer.

I've already told her to stop using it for email and IM and that she should expect anything she types, emails or files she sends, WILL wind up in court.

How do I find it if it's there? She's running Windows 2000, and nothing jumps out at me in the Task Manager.

Thanks in advance.
12/30/2004 12:39:51 PM EDT
[#1]
The best thing to do is take the drive out and make it a secondary drive in another machine, then go through the file system and registry and look for anything out of the ordinary.
12/30/2004 12:51:38 PM EDT
[#2]
I'll give it a shot.  Thanks!

Anyone else?
12/30/2004 1:00:48 PM EDT
[#3]
you could boot in 'safe mode'.  no dlls or exes are loaded.  you would be sure of a virgin operating system.  check the run and runonce entries in the registry.  anything running would have to be launched from a simple startup group, a run entry in the registry or a service.

dave.
12/30/2004 1:08:32 PM EDT
[#4]
Bazooka Adware and Spyware Scanner 1.12
12/30/2004 1:13:47 PM EDT
[#5]
The computer geeks would know better than I, but what you are worried about is a "key logger", which records everything she actually types.  Usually, a key logger is a small black box type thing that is actually attached externally to the computer.  If you look around the computer set up and see something like that, which doesn't belong there, remove.  You can find key loggers for sale on the net, commercially.  They are usually directed towards parents who want to know what their kids are up to on the net.

Your other worry would be a somewhat advanced trojan, but I haven't heard of one that will transmit everything that you mention.  My biggest concern would be a key logger.

ETA:  If subject has access to the computer, he can look in the caches and so on to see what sites she has been to, etc.  Get Window Washer and tell her to use it after every session.  Also, if she insists on leaving things on the comp, have her get PGP (freeware) and encrypt every thing.

If it can get to the point where subject can take the hard drive and take it to a shop for recovery of deleted files, have her install a wiping program, such as BCWipe, and set it to MIL STD (7 wipes), and use it after every session.

Needless to say, she is better off not using the comp for anything that could compromise the case.
12/30/2004 1:18:25 PM EDT
[#6]
SPYCOP

www.spycop.com/
12/30/2004 1:21:26 PM EDT
[#7]
mjm1 is right that there are hardware keyloggers, but there are also dozens of software keyloggers available for purchase. They run in a hidden mode that prevents casual detection.
12/30/2004 1:38:26 PM EDT
[#8]
A fresh install of the OS should take about 45 minutes.
12/30/2004 2:27:12 PM EDT
[#9]
He could be running
Sub 7 or Assasin Pro

They're like trojan horses, they have features to do remote screen shot capture, listen to the microphone/ watch on the webcam. Complete control over the drive,  a lot of other control and Key Logging. I'd run a virus scan also and see if you find anything.
12/30/2004 2:48:20 PM EDT
[#10]
a couple antitrojan software i trust,  ewido
a squared a squared
and of course adaware
link
and spybot search and destroy  link
12/30/2004 2:52:16 PM EDT
[#11]
The key logger I have pops up when you type qaz wsx edc
12/30/2004 7:33:23 PM EDT
[#12]
Tag
12/30/2004 7:41:05 PM EDT
[#13]
Keyloggers work. Just a free downloadable program, no black box.

That's how I caught my ex.

Your sister in law have anything to hide? Keep it off the computer.

Anyway, my particular keylogger would show up on some scans as spyware and they recommended removal. I was the admin, so no problem there.

Have your sister go to pcpitstop.com and run a diagnostic. It might show up in the scan.

ETA my keylogger was never picked up by Adaware or Spybot.
12/30/2004 7:55:38 PM EDT
[#14]
Most are easy to find if you look at running processes , and
doing a web search on ones you can't identify .

HOWEVER , there are hardware key loggers that can be hidden
inside the keyboard itself by anyone that can use a Philips screwdriver .

They are undetectable , except by visual inspection .
12/30/2004 8:00:11 PM EDT
[#15]
I do this for a living.  Don't do anything on a pc that you don't want recovered by your opposition.