Re: co-worker spy annoyance

From: Leythos (void_at_nowhere.com)
Date: 11/28/03


Date: Fri, 28 Nov 2003 03:52:45 GMT

In article <sggdsvktjfq2fd63cp62o2djtq0e4d9tc9@4ax.com>,
chris@nospam.com says...
> On 26 Nov 2003 21:02:58 -0800, jonahbasset@yahoo.com (Jonah) wrote:
>
> >I have strongly suspected for some time now that one of my co-workers
> >is somehow able to spy on what programs I am running on my machine and
> >currently interacting with. (Windows XP system) I cannot be absolutely
> >sure of this, but occasionally, she drops me a cryptic little 'hint'
> >implying she knows what I'm doing at the moment. I don't believe she
> >has installed any type of spyware program on my machine, but rather is
> >using her network admin privileges to do this somehow. She is NOT our
> >company admin although she has those privileges locally. I'm sure she
> >is probably able to read all my emails and see what sites I visit on
> >the internet as well, which of course I do not like, but am not
> >particularly concerned with.
> >
> >I have read that the Windows Management Instrumentation service can
> >allow a remote user to see what programs you are running, and I have
> >already disabled that. But her 'hints' have not stopped so I have to
> >assume that disabling that service did not have the desired effect.
> >Although I doubt I can prevent her from snooping through emails etc.,
> >I would like to know if there is at least a way to prevent this person
> >from spying directly on what I'm doing at the moment! Another service
> >I could disable perhaps? Any suggestions?
>
>
> Ok, for starters you might want to reenable the WMI as disabling that
> breaks a whole bunch of legitimate things.
> http://www.theeldergeek.com/windows_management_instrumentation.htm
>
> Second, ensure she doesn't have admin rights on your computer. With
> admin rights she can install and run just about anything. Even a
> simple tool like pslist will remote list the actively running
> programs. If she's installed spyware, complain to your network guys
> who I guarantee will get pissed off.
>
> Now for the suggestions that might annoy the network guys (I no it
> annoys me when users try them)....
>
> XP has a built-in firewall. Turning it on should prevent most
> spyware that uses non-standard ports. It will also prevent most
> network management of your computer.
>
> If you know her IP address you can add a bogus static route for her
> computer. This effectively renders your computer unable to reply to
> her. Checkout the 'route add' command. This could be done on her
> computer if you have admin rights.
>
> Install third-party firewall software. Configure it only to block
> traffic from her IP.

Since the computer was provided for this chap to WORK, and since the
company DIDN'T provide the additional software you are talking about, I
would suspect that they will come down hard on him for trying to HIDE
his activities.

If you are not doing anything wrong you have nothing to fear!

-- 
--
spamfree999@rrohio.com
(Remove 999 to reply to me)


Relevant Pages

  • recovering from hack/trojan
    ... own network and internet connections, ... soon after an install: Keep ... and deleting and/or disabling and/or uninstalling ... or the system file monitor restores them. ...
    (microsoft.public.security)
  • Re: co-worker spy annoyance
    ... >assume that disabling that service did not have the desired effect. ... ensure she doesn't have admin rights on your computer. ... complain to your network guys ... Install third-party firewall software. ...
    (comp.security.misc)
  • Re: Granting all users Admin Rights
    ... Giving users in an environment that big Admin rights is asking for trouble. ... Even worse any closet hacker wanabee would install Lophtcrack and pull up ... > I am a Network Admin for Cuesta College and we are dealing with the same ...
    (microsoft.public.win2000.security)
  • Re: IIS install on XP in SBS2003 Domain
    ... I can still access the network if I input my username and ... disable the old NICs. ... I prefer to power down, install new nic, power up and detect. ... Disabling the on-board nics in BIOS is optional, ...
    (microsoft.public.windows.server.sbs)
  • Re: Wireless LAN only with Administrator right?
    ... Users shouldn't need admin rights to use a wireless LAN....just to install ... > user and use the wireless network. ...
    (microsoft.public.win2000.networking)