UGN Security
Posted By: hcecaps being spied on? - 01/25/04 01:49 PM
hello fellows,

I have a very strong feeling and some evidence that I'm being spied on at my work place. It is not a work place in a traditional sense in that we share an office and some tools, but I'm still self employed working on a contract.

I have four other people sharing a computer with me, and we all have our personal logins, of course. But one of these guys has installed some kind of software with which he connects to his home pc and can view its screen on this remote screen (not sure if it's the standard windows remote control thingy, or some third party software).

When I saw this, some things clicked. This guy has known stuff about my clients that he isn't really supposed to know. I know I haven't told him. So I suspect that he might be doing that remote thing from his home puter to this one.

Is there a way for me to know if this is happening, or if it has already happened? Here are the processes that are running on the puter:

acdsee5
winamp3
fotocanvas2
rundll32
corelpp
mirc
realsched
emule
iexplorer
vcdtray
clonecdtray
mirc
em_exec
explorer
taskmgr
wzqkpick
realsched
winlogon
dsentry
mirc
itouch
qttask
msmsgs
vcdtray
winword
daemon
em_exec
servuadmin
msnmsgr
webcam
clonecdtray
wzqkpick
daemon
ccapp
dsentry
hpztsb04
csrss
ctfmon
svchost
nisum
ccevtmgr
spoolsv
vcdsecs
lsass
services
vcdplay
vcdtray
smss
servut~1
launcher
nvsvc32
dumeter
navapsvc
ccpxysvc
system

many of these are two or three times on the process list running on several users.

Are any of these hinting on any spyware activity? Could I take some not-too-obvious measures to perhaps 'counter spy' on his activities? Like if there is a way to see if my logon has been used with some remote software, or something like that. I don't care about his stuff, but I want to know if he knows about my stuff.

Thanks for any and all info you can give me, it's very much appreciated.


hcecaps
Posted By: Ghost Re: being spied on? - 01/25/04 02:33 PM
i suggest that you download either Spybot search and Destroy or Ad Aware

those are two of the best spyware removers out there. those will save you the time of going through all of the processes. Also try to disable remote desktop sharing on that computer. To do that click my computer, go to remote, and uncheck the remote desktop sharing check box. That is how to disable it for windows xp.
Posted By: pergesu Re: being spied on? - 01/25/04 07:38 PM
I say you ask him straight up if he's spying on you. If he says yes, kick his [censored]. If he says no, he's lying, so kick his [censored].
© UGN Security Forum