Key loggers and spyware - Chicagoland Sportbikes
Chicagoland Sportbikes
 
Geek Squad to the rescue! fucken computer crashing on you again? another porn site infected your computer? tierd of your wife seeing your anal fisting videos and want to lock her out of the external HD? get the answers you need from our local computer experts.

 
LinkBack Thread Tools Display Modes
post #1 of 24 (permalink) Old 03-24-2012, 10:03 AM Thread Starter
Registered User
 
Join Date: Jun 2008
Location: Naperville IL
Posts: 217
Location: Naperville IL
Sportbike: Kawa 650R
Years Riding: Never long enough to learn something new
How you found us: another forum
           
Key loggers and spyware

What is the easiest way to check a pc for a key logger or spyware. A friend knows the computer at work is different, and just wants to know if they are tracking anything or everything they do.
Looked at the apps that are running in task manager, (found nothing strange there) but some install at the root so its difficult to find them.
Is there a app that can be run or a website that can help check this.

Thanks
Kirby is offline  
Sponsored Links
Advertisement
 
post #2 of 24 (permalink) Old 03-24-2012, 11:41 AM
Bug
Ridiculously Good Looking
 
Bug's Avatar
 
Join Date: Apr 2005
Location: Gold Coast
Posts: 32,746
Location: Gold Coast
Sportbike: Sportbike?
Years Riding: No F'in Idea
How you found us: 4 & 6
           
Quote:
Originally Posted by Kirby View Post
What is the easiest way to check a pc for a key logger or spyware. A friend knows the computer at work is different, and just wants to know if they are tracking anything or everything they do.
Looked at the apps that are running in task manager, (found nothing strange there) but some install at the root so its difficult to find them.
Is there a app that can be run or a website that can help check this.

Thanks
If it is the "works" computer that they are paying him to use as well as paying for the Internet access, I would not go fucking around with it but would do my job and save my "web time" for when I was off the clock

"Life is not a journey to the grave with the intention of arriving safely in a pretty and well preserved body, but rather to skid in broadside, thoroughly used up, totally worn out, and loudly proclaiming WOW, what a RIDE !!"
Bug is offline  
post #3 of 24 (permalink) Old 03-24-2012, 12:47 PM
Cuddlie as a koala
 
YZFRob's Avatar
 
Join Date: Apr 2002
Location: Where GM used to make Tahoes
Posts: 7,509
Location: Where GM used to make Tahoes
Sportbike: Which bike?
Years Riding: Too long.
How you found us: Ken offered me money to join.
           
Quote:
Originally Posted by Bug View Post
If it is the "works" computer that they are paying him to use as well as paying for the Internet access, I would not go fucking around with it but would do my job and save my "web time" for when I was off the clock
^this. Also with many places you can get fired for trying to circumvent tracking and filters they have in place.

I'm not crazy, my mother had me tested.
YZFRob is offline  
Sponsored Links
Advertisement
 
post #4 of 24 (permalink) Old 03-24-2012, 01:00 PM
Bug
Ridiculously Good Looking
 
Bug's Avatar
 
Join Date: Apr 2005
Location: Gold Coast
Posts: 32,746
Location: Gold Coast
Sportbike: Sportbike?
Years Riding: No F'in Idea
How you found us: 4 & 6
           
Quote:
Originally Posted by YZFRob View Post
^this. Also with many places you can get fired for trying to circumvent tracking and filters they have in place.
BINGO - He may have signed a Policy stating that if he does such,he can be fired on the spot - Also, they can track what he is looking for which will then lead to an HR slash IT conversation of "why"

Not trying to be a prude but I help companies write these policies for just such a reason - Tell him to use his phone for this during work if he absolutely has to use the web for personal use

"Life is not a journey to the grave with the intention of arriving safely in a pretty and well preserved body, but rather to skid in broadside, thoroughly used up, totally worn out, and loudly proclaiming WOW, what a RIDE !!"
Bug is offline  
post #5 of 24 (permalink) Old 03-24-2012, 01:06 PM
U-P-G-R-A-Y-E-D-D
 
FiReBReTHa's Avatar
 
Join Date: Apr 2006
Location: Aurora, IL
Posts: 11,172
Location: Aurora, IL
Sportbike: 04 GSXR6
Years Riding: 2
How you found us: I thought it was a line for muffins
           
Send a message via AIM to FiReBReTHa
Quote:
Originally Posted by Bug View Post
BINGO - He may have signed a Policy stating that if he does such,he can be fired on the spot - Also, they can track what he is looking for which will then lead to an HR slash IT conversation of "why"

Not trying to be a prude but I help companies write these policies for just such a reason - Tell him to use his phone for this during work if he absolutely has to use the web for personal use


/this

Keep the donkey punch porn to non work hours or get a wireless tablet.

www.firespeedtactical.com
Trial By Fire.
Like our page!
http://www.facebook.com/firespeedtactical

Quote:
"I'm spooning a barrett 50 cal. I could kill a building."
-Archer
FiReBReTHa is offline  
post #6 of 24 (permalink) Old 03-24-2012, 02:20 PM
Registered User
 
Join Date: May 2008
Location: Illinois
Posts: 8,696
Location: Illinois
Sportbike: ninja
Years Riding: since I was a kid
How you found us: K.I.T.T.
           
not a network engineer. but I've seen where they have network hubs or on the server side that will record everything you do.
taledarkside is offline  
post #7 of 24 (permalink) Old 03-24-2012, 02:35 PM
Administrator
 
HDTony's Avatar
 
Join Date: Apr 2002
Location: Plainfield IL
Posts: 45,956
Location: Plainfield IL
Sportbike: A couple of pasta rockets
Years Riding: Since 1989
How you found us: In the beginning there was CLSB and Tony saw that it was good.
           
Send a message via AIM to HDTony
well now that we know all the reasons for not checking, anyone have an actual answer to the question? LOL




HDTony.... Damn glad to meet you!

Government's view of the economy could be summed up in a few short phrases: If it moves, tax it. If it keeps moving, regulate it. And if it stops moving, subsidize it.

- Ronald Reagan

AirTek Heating & Air inc.
HDTony is offline  
post #8 of 24 (permalink) Old 03-24-2012, 02:48 PM
Greg
 
gsd656's Avatar
 
Join Date: Nov 2007
Location: Morton Grove, Illinois
Posts: 3,677
Location: Morton Grove, Illinois
Sportbike: 2008 HD VRSCAW, 1985 Honda XR350R (Sold), 2001 SV650s (Sold), 2002 Sea-Doo GTX Di
Years Riding: I thought I was getting the hang of it...back to the basics.
How you found us: mentioned on svrider.com
           
Send a message via Yahoo to gsd656
Quote:
Originally Posted by HDTony View Post
well now that we know all the reasons for not checking, anyone have an actual answer to the question? LOL
This. lmao

Greg

gsd656 is offline  
post #9 of 24 (permalink) Old 03-24-2012, 04:35 PM
Bug
Ridiculously Good Looking
 
Bug's Avatar
 
Join Date: Apr 2005
Location: Gold Coast
Posts: 32,746
Location: Gold Coast
Sportbike: Sportbike?
Years Riding: No F'in Idea
How you found us: 4 & 6
           
Quote:
Originally Posted by HDTony View Post
well now that we know all the reasons for not checking, anyone have an actual answer to the question? LOL
Doubtful you will be able to get to the Route of the Machine w/out Admin Rights if it is set up properly and if it does not show up in the "programs" field, hard to really tell....

"Life is not a journey to the grave with the intention of arriving safely in a pretty and well preserved body, but rather to skid in broadside, thoroughly used up, totally worn out, and loudly proclaiming WOW, what a RIDE !!"
Bug is offline  
post #10 of 24 (permalink) Old 03-24-2012, 10:44 PM Thread Starter
Registered User
 
Join Date: Jun 2008
Location: Naperville IL
Posts: 217
Location: Naperville IL
Sportbike: Kawa 650R
Years Riding: Never long enough to learn something new
How you found us: another forum
           
User has admin rights, also its not the fact of doing wrong or surfing xyz, but there is a long story to go along with this and they have full rights to know if this is being done. Just like stated above that a lot of companies track this and are also required to tell you they may or may not be doing this. Most will also make you sign paper work also.
Lets take the company side out of it and look at it like a home computer that a spouse is tracking the other with a program how can one detect the software.
I don't care about the right or wrong of the situation, but just want a solution to test the computer.
Kirby is offline  
post #11 of 24 (permalink) Old 03-25-2012, 01:12 AM
Cuddlie as a koala
 
YZFRob's Avatar
 
Join Date: Apr 2002
Location: Where GM used to make Tahoes
Posts: 7,509
Location: Where GM used to make Tahoes
Sportbike: Which bike?
Years Riding: Too long.
How you found us: Ken offered me money to join.
           
Quote:
Originally Posted by Kirby View Post
Lets take the company side out of it and look at it like a home computer that a spouse is tracking the other with a program how can one detect the software.
Then why not say that right off the bat?

I'm not crazy, my mother had me tested.
YZFRob is offline  
post #12 of 24 (permalink) Old 03-25-2012, 08:36 AM
Not too Slow Not too Fast
 
RSVMillenian's Avatar
 
Join Date: Mar 2004
Location: Bensenville, IL
Posts: 1,634
Location: Bensenville, IL
Sportbike: 2003 Aprilia Falco
Years Riding: Too many
How you found us: ApriliaForum.com
           
Send a message via Yahoo to RSVMillenian
Quote:
Originally Posted by Kirby View Post
......Just like stated above that a lot of companies track this and are also required to tell you they may or may not be doing this. Most will also make you sign paper work also.
Companies are NOT required to tell you anything. There are no such labor laws in Illinois nor US. They are also not required to let you know that they are doing it or have you sign a letter or policy or something.

Dejan
CCS very very Amateur #144
RSVMillenian is offline  
post #13 of 24 (permalink) Old 03-25-2012, 08:54 AM
Registered User
 
BandM's Avatar
 
Join Date: Mar 2005
Location: Cary
Posts: 307
Location: Cary
Sportbike: X-1, XR-1000
Years Riding: Yes
How you found us: Badweb
           
http://answers.microsoft.com/en-us/w...5-17e5de194b50

Start here, and like Bug says, when asked why you will have your answer.
BandM is offline  
post #14 of 24 (permalink) Old 03-25-2012, 09:03 AM
The Halo hides my Horns
 
Lonely Raven's Avatar
 
Join Date: Jun 2007
Location: Bolingbrook, IL
Posts: 12,690
Location: Bolingbrook, IL
Sportbike: SV650
Years Riding: 1 year
How you found us: Google
           
MalwareBytes (As mentioned above in the link) is good, some of their other recommendations are a bit outdated.

I also use Avast, which has a freeware version.

aut cum scuto aut in scuto

http://www.firespeedtactical.com

My ZenFolio Gallery: www.LonelyRaven.ZenFolio.com
Lonely Raven is offline  
post #15 of 24 (permalink) Old 03-26-2012, 08:04 AM
Registered User
 
beac83's Avatar
 
Join Date: Jun 2008
Location: Morgan Park, IL
Posts: 3,749
Location: Morgan Park, IL
Sportbike: A couple
Years Riding: too long to have any sense
How you found us: NESBA
           
Anyone using a work-supplied computer, phone, or other electronics should ASSUME that their actions on those devices are being monitored.

Monitoring with or without notice is legal throughout the US. While many other countries, including Canada, require notice to the employee, the US does not.

To do anything less is to risk the paycheck.


That said, good luck with the spyware removal.

Craig
________________
beac83 is offline  
post #16 of 24 (permalink) Old 03-26-2012, 08:34 AM
-= OuterSpace =-
 
OldSkoolMC's Avatar
 
Join Date: Sep 2002
Location: Homer Glen, MaDaFaKa!
Posts: 3,513
Location: Homer Glen, MaDaFaKa!
Sportbike: Yamaha YZ450
Years Riding: too many to keep track
How you found us: Shizzle
           
Usually the monitoring is being done on the backend. Key logging applications can bomb and not work as well as server IP based monitoring which is done much easier.


04 Yamaha YZ450F - Off-Road it, mang
06 Kawasaki BruteForce 750i
09 Yamaha Raptor 700r

- Mike - OldSkool - MC -
OldSkoolMC is offline  
post #17 of 24 (permalink) Old 03-26-2012, 08:46 AM
Rex Banner
 
Flying_Hellfish's Avatar
 
Join Date: Aug 2002
Location: Aurora
Posts: 2,561
Location: Aurora
Sportbike: 99 SV650, z50r
Years Riding: A few years
How you found us: A tranny told me
           
Quote:
Originally Posted by OldSkoolMC View Post
Usually the monitoring is being done on the backend. Key logging applications can bomb and not work as well as server IP based monitoring which is done much easier.

^^ Most filtering/monitoring is done at the edge. We don't install a damn thing on people's computers here but I know the second they start trying to bypass the filtering or start hitting adult sites because I get notified by email.

Lord, beer me strength

Gamertag: FlyingHellf1sh
Flying_Hellfish is offline  
post #18 of 24 (permalink) Old 03-26-2012, 09:46 AM
Registered User
 
logtar's Avatar
 
Join Date: Mar 2003
Location: Glenview
Posts: 5,054
Location: Glenview
Sportbike: CURRENTLY LOOKING
Years Riding: since I was 8
How you found us: The NET is MINE
           
Also don't forget that there are hardware keyloggers as well http://www.keyghost.com/

If they want to track you, they can. It is a lot easier to do it through the network traffic now.

Most of the good software is very hard to detect unless you know what it is and have the "key" to discover it.

Logtar - John

My Blog - @Logtar - Google+
logtar is offline  
post #19 of 24 (permalink) Old 03-26-2012, 10:03 AM
Human lawn dart
 
rdrash's Avatar
 
Join Date: Sep 2002
Location: Palatine
Posts: 5,746
Location: Palatine
Sportbike: 03 ninja 6r 05 ttr-230 04 klx300r
Years Riding: 12
How you found us: I know all
           
Send a message via AIM to rdrash
If the network guys are doing there job right you'll never know if they are monitoring web traffic unless you go to a site that is blocked. If they are doing it right there is nothing you can do about it, and no software exists to bypass a good wccp, firewall, and proxy policy.

I'm not short. I'm aerodynamically efficient.

Anti Helmet Laws Pro Darwinism
MotoGP 200 mph no roll cage
NESBA # 599
rdrash is offline  
post #20 of 24 (permalink) Old 03-26-2012, 10:33 AM
Resident Slow guy
 
Ohfugit's Avatar
 
Join Date: Jun 2003
Location: Chicago
Posts: 6,771
Location: Chicago
Sportbike: 250x_Dirtbike Triumph_Tripled_955i 90_H-D_Bagger CR80_Mini_Motard
Years Riding: Street_LOOOOOOONG_Time Track Backmarker
How you found us: Google
           
Send a message via AIM to Ohfugit
Quote:
Originally Posted by rdrash View Post
If the network guys are doing there job right you'll never know if they are monitoring web traffic unless you go to a site that is blocked. If they are doing it right there is nothing you can do about it, and no software exists to bypass a good wccp, firewall, and proxy policy.
Tethering off your phone or other device?

Ohfugit is offline  
post #21 of 24 (permalink) Old 03-26-2012, 11:17 AM
Rex Banner
 
Flying_Hellfish's Avatar
 
Join Date: Aug 2002
Location: Aurora
Posts: 2,561
Location: Aurora
Sportbike: 99 SV650, z50r
Years Riding: A few years
How you found us: A tranny told me
           
Quote:
Originally Posted by Ohfugit View Post
Tethering off your phone or other device?
that depends, some proxy appliances also have a software component which will force the proxy regardless of connection. This is what we are looking into for our laptop population. We have imbedded EVDO cell cards that people are running over their monthly allowance and claiming it is all "work related"

Lord, beer me strength

Gamertag: FlyingHellf1sh
Flying_Hellfish is offline  
post #22 of 24 (permalink) Old 03-26-2012, 11:30 AM
Human lawn dart
 
rdrash's Avatar
 
Join Date: Sep 2002
Location: Palatine
Posts: 5,746
Location: Palatine
Sportbike: 03 ninja 6r 05 ttr-230 04 klx300r
Years Riding: 12
How you found us: I know all
           
Send a message via AIM to rdrash
Quote:
Originally Posted by Ohfugit View Post
Tethering off your phone or other device?
Depends if it's on a laptop or desktop. Then again a good GPO would have that disabled, and modifying the registry every time you log into the network really wouldn't be worth the effort.

I'm not short. I'm aerodynamically efficient.

Anti Helmet Laws Pro Darwinism
MotoGP 200 mph no roll cage
NESBA # 599
rdrash is offline  
post #23 of 24 (permalink) Old 03-26-2012, 11:39 AM
Rex Banner
 
Flying_Hellfish's Avatar
 
Join Date: Aug 2002
Location: Aurora
Posts: 2,561
Location: Aurora
Sportbike: 99 SV650, z50r
Years Riding: A few years
How you found us: A tranny told me
           
Quote:
Originally Posted by rdrash View Post
Depends if it's on a laptop or desktop. Then again a good GPO would have that disabled, and modifying the registry every time you log into the network really wouldn't be worth the effort.
If you push with clients vs GPO it will refresh more often than just at reboot as well as touch browsers outside of IE

Lord, beer me strength

Gamertag: FlyingHellf1sh
Flying_Hellfish is offline  
post #24 of 24 (permalink) Old 04-15-2012, 02:42 PM
Registered User
 
behappy's Avatar
 
Join Date: Apr 2012
Location: wheaton
Posts: 41
Location: wheaton
Sportbike: None
Years Riding: 3 days
How you found us: google
 
Can anyone say setup remote loggin on a home network and ssh or rpc into it????
behappy is offline  
Reply

Quick Reply
Message:
Options

Register Now



In order to be able to post messages on the Chicagoland Sportbikes forums, you must first register.
Please enter your desired user name, your email address and other required details in the form below.

User Name:
Password
Please enter a password for your user account. Note that passwords are case-sensitive.

Password:


Confirm Password:
Email Address
Please enter a valid email address for yourself.

Email Address:
OR

Log-in










Thread Tools
Show Printable Version Show Printable Version
Email this Page Email this Page
Display Modes
Linear Mode Linear Mode



Posting Rules  
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Trackbacks are On
Pingbacks are On
Refbacks are On

 
For the best viewing experience please update your browser to Google Chrome