can we know if someone monitoring my computer

[Bill2004]

Hi
Is there any way to tell if someone is monitoring my computer ?

Thanks

Bill

[Raptor]

Not unless you read up on Internet security.

How Stuff Works - Security Channel

How Stuff Works - Internet Channel

Software such as Firewalls can block incoming and outgoing connections.

[Corrosive]

One way to check if something is odd (unless you are really clued up on Net Security it won't be much help on it's own) is to use a certain MS-DOS function.

Click on Start > Run and type in "Netstat 5" (without the quotes)

This shows exactly what addresses are bing sent and recieved on your computer. Currently on this PC I'm getting:

TCP     [my IP address]     www.computerhope.com:80     TIME_WAIT

If there is someone lurking, you may get something similar, except instead of computerhope.com, you'll get a strange looking IP address (simply a load of apparently meaningless numbers, for example 1.160.10.240) and the words "CONNECTION_ESTABLISHED".

Be sure not to load up any webpages though, because this will have a similar effect as if a cracker was lurking!

[merlin_2]

sygate firewall logs it all? and you can take your pick from this lot>http://www.spychecker.com/software/antispy.html

[dl65]

Bill2004.....When you say monitoring ....do you mean from an external source or did you mean from an internal source....  I believed Both Corrosive , Raptor and Merlin have given you some leads.....but if its someone in your own household ....they could have installed a key logger to monitor your activities ......

Hope this helps you.

dl65

[Bill2004]

Thanks dl65, Corrosive , Raptor and Merlin !

All of comment are great help !

My situation is I have two partner for small businss- I call them "A" and "B". " A" is very good at computer. He built small network interally for three of us .  Recently,  I found "A" can log in "B" email account surprisely.
"A"  also know  all activity of my computer, even I unpluged the network and with safe mode statue.

I believe "A" installed something in my computer.

What I want to do:

Quietly found out how and when we got this bug.  
then, friendly Tell "A"  and let him stop doing this again.


many many thanks !!!!!!!!!!!!!


Bill2004

[Raptor]

I wouldn't quite trust a partner that's spying on me.. But to each his own.

[dl65]

Bill2004.....Well , if you have complete access to the network .....I would look at all the programs in the Windows program files......look for some odd program name .....theres one called antispy.....which does that.
do a google search for keyloggers......you will be amazed at how many there are . If you see an app which you dont recognize do a google search to find out what it is ......but dont do it on your work pc.......and somewhere else on your pc there will be a file with all the activities . It is generated by the spy program.(keylogger)
Something else you might do as well if you can is to delete all your history and temp internet files every day just before you go home.

Hope this helps you .

dl65

[Bill2004]

Thanks Corrosive !

I paste the part of message got from "netstat 5"

what  did this tell us ?

Many thanks

Bill2004


 Proto  Local Address          Foreign Address        State
 TCP    computername:1041      localhost:5226         ESTABLISHED
 TCP    computername:1073      localhost:2104         TIME_WAIT
 TCP    computername:1074      localhost:2104         TIME_WAIT
 TCP    computername:1076      localhost:2104         TIME_WAIT
 TCP    computername:1077      localhost:2104         TIME_WAIT
 TCP    computername:1078      localhost:2104         TIME_WAIT
 TCP    computername:1079      localhost:2104         TIME_WAIT
 TCP    computername:1080      localhost:2104         TIME_WAIT
 TCP    computername:1081      localhost:2104         TIME_WAIT
 TCP    computername:1082      localhost:2104         TIME_WAIT
 TCP    computername:1083      localhost:2104         TIME_WAIT
 TCP    computername:1084      localhost:2104         TIME_WAIT
 TCP    computername:1085      localhost:2104         TIME_WAIT
 TCP    computername:1086      localhost:2104         TIME_WAIT
 TCP    computername:5226      localhost:1041         ESTABLISHED
 TCP    computername:1040      www.aol.ca:http        CLOSE_WAIT
 TCP    computername:1064      www.ihspropertymarket.com:http  CLOSE_WAIT

[Raptor]

Nothing much.

What are you looking for?

[Bill2004]

Thanks dl65,
Like I said, I want qiuetly find out when, how long, what program is using,
Is there  any step I need follow ?
Look like I need print out the all activity of our computer dring last month to present . then , I need install a program to provent somebody doing again.

How can I do it ?

I am not good at computer, really need you help.

Bill2004

[Bill2004]

Thanks Raptor ,
Can we tell is there any one monitoring the computer ?
Thanks
Bill2004

[Raptor]

From that list, I cannot tell that there is someone 'monitoring' your computer.

Are you certain it's not spyware you're after..

TCP    computername:1064 www.ihspropertymarket.com:http  CLOSE_WAIT

I take it that was a browser Window you had open?

[Bill2004]

Thanks Raptor ,
How about this ?
I got it hour ago.
Active Connections

 Proto  Local Address          Foreign Address        State
 TCP    computername:1043      localhost:5226         ESTABLISHED
 TCP    computername:1383      localhost:5226         ESTABLISHED
 TCP    computername:1824      localhost:2104         TIME_WAIT
 TCP    computername:1825      localhost:2104         TIME_WAIT
 TCP    computername:1826      localhost:2104         TIME_WAIT
 TCP    computername:1827      localhost:2104         TIME_WAIT
 TCP    computername:1830      localhost:2104         TIME_WAIT
 TCP    computername:1831      localhost:2104         TIME_WAIT
 TCP    computername:1833      localhost:2104         TIME_WAIT
 TCP    computername:1834      localhost:2104         TIME_WAIT
 TCP    computername:1837      localhost:2104         TIME_WAIT
 TCP    computername:1838      localhost:2104         TIME_WAIT
 TCP    computername:1839      localhost:2104         TIME_WAIT
 TCP    computername:1840      localhost:2104         TIME_WAIT
 TCP    computername:1841      localhost:2104         TIME_WAIT
 TCP    computername:5226      localhost:1043         ESTABLISHED
 TCP    computername:5226      localhost:1383         ESTABLISHED
 TCP    computername:1042      www.aol.ca:http        CLOSE_WAIT
 TCP    computername:1404      www.aol.ca:http        CLOSE_WAIT
 TCP    computername:1432      www.ihspropertymarket.com:http  CLOSE_WAIT
 TCP    computername:1842      192.168.0.14:microsoft-ds  SYN_SENT
 TCP    computername:1843      192.168.0.14:netbios-ssn  SYN_SENT


The two last lines !!!!!!!!!!!!?

Thanks Again !


Bill2004

[merlin_2]

check and see if remote access is enabled?check to see if a program called radmin is listed on one of those pcs...and have you add any of this things happen >CD-ROM drive opens at random times
Wave (.wav) files play for no reason
Strange dialog boxes appear
Internet downloads are slow
Files appear or disappear