guffaw! he didnt notice that vnc was installed?

Post #3,321 by boxley 7/31/01 9:36:03 PM Reply	guffaw! he didnt notice that vnc was installed? always when you boot or log in look for processes via taskman or ps-ef to see if only what you expect is running. I hope that they decide that this is a wire tap. I am also heartened that they did run the evidence past a judge to get permission. than, bill Our bureaucracy and our laws have turned the world into a clean, safe work camp. We are raising a nation of slaves. Chuck Palahniuk
Post #3,333 by orion 7/31/01 10:17:34 PM Reply	It may have been installed in the keyboard and recorded each keystroke. Which means it also got the mistakes he made and everything else he typed. Also I think there is a way you can hide the program in Windows to not appear in the Task Manager, at least that is what those Taskbar docked applications do, just remove the Taskbar icon and it is impossible to detect. You know, those icons on the right side part of the taskbar where the clock is. Sometimes the virus people rename their virus code to something like "rundli" or something that looks like rundll so you think it is a system process. "I can see if I want anything done right around here, I'll have to do it myself!" Moe Howard
Post #3,627 by jb4 8/2/01 1:47:25 PM Reply	You can also run it as a DLL DLLs do not appear in Task Manager. You could write a DLL and attach it to something you expect to be there (such as Explorer.exe) Or better, rewrite (or append to) an existing DLL such that the keylogger stuff is triggered by additional code added to an otherwise benign DLL entry point, one that is likely to be run as a "normal" part of the "infected" program. Isn't Micros~1 stuff fun? jb4 (Resistance is not futile...)

Welcome to IWETHEY!