Results 1 to 11 of 11

Thread: VERY IMPORTANT!!! Need to know every move made on PC!!!

  1. #1
    Silver Member cmputrskillme's Avatar
    Join Date
    Sep 2002
    Location
    One High Maintenance Broad
    Posts
    299

    VERY IMPORTANT!!! Need to know every move made on PC!!!

    Good God, one of my customers (and my family members rent from these people! ) ended up with some VERY disturbing pictures, and I mean DISTURBING on her computer. Accusations flew and the computer was brought to me.

    I can tell dates and times on several of the pictures, however, there are more showing in the "recent documents" that originate from E:/mmm. Was this a thumbdrive or external drive? All say DESKTOP and E:/mmm.

    Sensitive situation here...... so, is there a way for me to tell who did what and when? Can I tell when a thumb drive was hooked up, dates and times? Is there some kind of log that I can tell what was done for the past month? This was formatted on November 3rd, 2006 so I need to know all that was done since that date.

    Thanks guys!

    Sharon

  2. #2
    Head Honcho Administrator Reverend's Avatar
    Join Date
    Apr 2002
    Location
    England
    Posts
    14,045
    You should be able to right click the "recents" entries and view the dates via properties.

    =========== Please Read The Forum Rules ===========

  3. #3
    Friendly Neighborhood Super Moderator phishhead's Avatar
    Join Date
    Apr 2002
    Location
    San Diego, Ca.
    Posts
    3,622
    then you can install a keylogger so you can see everything they do from now on.



  4. #4
    Precision Processor Super Moderator egghead's Avatar
    Join Date
    May 2002
    Location
    In Your Monitor
    Posts
    3,506
    clone the drive before yo mess with it so you won't erase or time stamp dates
    ------------------------------------------------------------



  5. #5
    Super Moderator Super Moderator Big Booger's Avatar
    Join Date
    Apr 2002
    Location
    JAPAN
    Posts
    10,660
    Quote Originally Posted by egghead View Post
    clone the drive before yo mess with it so you won't erase or time stamp dates

    Quote Originally Posted by phishhead View Post
    then you can install a keylogger so you can see everything they do from now on.

    Quote Originally Posted by Reverend View Post
    You should be able to right click the "recents" entries and view the dates via properties.

  6. #6
    Super Moderator Super Moderator Big Booger's Avatar
    Join Date
    Apr 2002
    Location
    JAPAN
    Posts
    10,660
    Also to contribute to this thread:

    Click start, control panel, go into Administrator tools, under event viewer, select system log.

    In that area, you should see a list of dates, times, etc... and the name of the device (or "removeable storage service") that connected to the machine.

    I give you my own event viewer as proof:

    Question: Is this disturbing enough to be illegal or is it just kinky sex?

  7. #7
    Security Intelligence TZ Veteran cash_site's Avatar
    Join Date
    Jul 2002
    Location
    Software Paradise
    Posts
    3,735
    also check the history or recent file lists in Internet Explorer Browser or picture viewing programs such as Office Picture Manager.

    --- 0wN3D by 3gG ---

  8. #8
    Silver Member cmputrskillme's Avatar
    Join Date
    Sep 2002
    Location
    One High Maintenance Broad
    Posts
    299
    Thanks guys for all of your help, I'm finding some stuff I needed for proof with a peice of software that recovers lost and deleted data. The system log was what I needed to check for the thumb drive hookup and external burner. Thanks VERY much!

    And yes, BB, this is disturbing enough to be illegal. Wreckless to do on someone elses computer. They claim this boy was asked to install a printer and install some spyware software, but used it for much more before returning it to her. He had it between me and her, so, I have to prove that I didn't put the disgusting pictures on there and that the boy, in fact, did with dates, times and devices.

    I don't know what she is going to do, I'm making sure my a$$ is covered, and to pray for the little victim in the two pictures I found.

    Sharon

  9. #9
    Super Moderator Super Moderator Big Booger's Avatar
    Join Date
    Apr 2002
    Location
    JAPAN
    Posts
    10,660
    Quote Originally Posted by cmputrskillme View Post
    Thanks guys for all of your help, I'm finding some stuff I needed for proof with a peice of software that recovers lost and deleted data. The system log was what I needed to check for the thumb drive hookup and external burner. Thanks VERY much!

    And yes, BB, this is disturbing enough to be illegal. Wreckless to do on someone elses computer. They claim this boy was asked to install a printer and install some spyware software, but used it for much more before returning it to her. He had it between me and her, so, I have to prove that I didn't put the disgusting pictures on there and that the boy, in fact, did with dates, times and devices.

    I don't know what she is going to do, I'm making sure my a$$ is covered, and to pray for the little victim in the two pictures I found.

    Sharon
    CYA saves the day! Why would he be looking at nasty images on another person's computer? What a fool, and sicko.

  10. #10
    Old and Cranky Super Moderator rik's Avatar
    Join Date
    Aug 2003
    Location
    Watching Your every move...
    Posts
    4,638
    and obviously not as good a technician as He may believe.

  11. #11
    She who must be obeyed Super Moderator piaqt's Avatar
    Join Date
    Apr 2002
    Location
    NYC
    Posts
    1,702
    Send the local police the pix. If it's illegal, it's prosecutable. And maybe they can help the victims.

    Last night, I shot an elephant in my pajamas. How he got in my pajamas, I'll never know.
    love, piaqt

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •