finding records in my computer

[Lauria]

I was wondering if there is anyway possible that I can find records in my
computer that will show that I log in and out of my computer? I'm looking
for the one that will show that the time and date that I sign on or off from
my computer. Or maybe show IP # and etc. Where can I go in my computer
system to find the information. I have a Window Vista and Window Mail. I
hope someone can help me. Thanks, Lauria

 

[kevpan815]

Yes. Try Event Viewer, Just FYI.

 

[Rick Rogers]

Hi Lauria,

Click start and type eventvwr.msc, then hit <enter>. Look under Windows
Logs/Security for logon events.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

 

[Lauria]

Great!! Now, can you please tell me how to print the date that you want only??
Lauria

 

[Lauria]

while I'm looking at my view event, how can I tell if someone has been into
my computer or hacked my computer? I need some help understanding this. I'm
so totally news at this.
Thanks,
Lauria

 

[Lauria]

what does this mean "Windows detected your registry file is still in use by
other applications or services. The file will be unloaded now. The
applications or services that hold your registry file may not function
properly afterwards."?
Thanks,
Lauria

 

[Lauria]

I was wondering by look at my View Event, is there any way that I can tell if
someone had hacked my computer?
Thanks,
Lauria

 

[the]

while I'm looking at my view event, how can I tell if someone has been into
my computer or hacked my computer? I need some help understanding this. I'm
so totally news at this.

You have to go look for yourself with the proper tools. Currport runs on
Vista Active Ports does not run on Vista.

<http://www.windowsecurity.com/artic...d_Rootkit_Tools_in_a_Windows_Environment.html>
http://technet.microsoft.com/en-us/sysinternals/default.aspx

All NT based versions of the Windows O/S such as Win NT, 2K, XP and
Vista have audit logging that is disabled by default, and if you enable
auditing, you will be able to see these events with the Event Viewer on
Vista.

http://www.petri.co.il/windows_auditing.htm

http://www.pctipsbox.com/turn-on-auditing-to-monitor-account-attacks/
http://www.microsoft.com/downloads/...0ED-8B10-B3B716F6B51B&displaylang=en#Overview

 

[Lauria]

Yes. In my View Event files, it showed that I log off and on along with the
time and date. My internet provider told me that my internet and webmail had
open for 6 days which I know it isn't true. I don't ever leave my computer
on at night. I just need to see and prove that my former employer had gotten
in my personal computer home. It's a long story.
Lauria

 

[Lauria]

Sorry, I'm confuse about this. Is there anyone can help me with these step
by step? I just need to know if my former boss did or didn't get into my
personal computer or somehow got my userid/password
Thanks,
Lauria

 

[Ringmaster]

Sorry, I'm confuse about this. Is there anyone can help me with these step
by step? I just need to know if my former boss did or didn't get into my
personal computer or somehow got my userid/password
Thanks,
Lauria

Short answer: There is no way of knowing.

Your problem is you haven't yet shown the ability to state your
questions coherently enough for anyone to give you any useful,
practical advice. You seem to be making broad charges beyond the
average person's abilities. So no, I doubt your former employer
"hacked", broke into or in anyway accessed your computer which seems
to be what you're asking.

So I'll have to make some broad assumptions. I'll first assume you
don't mean your former employer physically broke into your home and
accessed your computer that way. That leaves doing it remotely. If
that is what you are trying to ask, then that can only happen during
the times your computer is on and connected to the Internet and only
assuming further some means such a Trojan has successfully been
uploaded to your computer to make accessing your files at least
possible or you foolishly have set you computer up to allow for remote
access.

You can look at Event Logs and see when the system was started up or
some user logged in. While there is software that will log all or most
keystrokes making it possible to log of files and/or applications
accessed even web sites visited and things like that since you are
talking about your FORMER employer, way past the time of using any
such monitoring software to "catch them in the act" since such
software needs to be installed and in use during the time you suspect
somebody is tampering.

My advice, backup all your personal files, move them to a DVD or
external drive then reformat your hard drives and reinstall Windows
and start over from scratch. You'll rest easier if this situation bugs
you as much as it seems to. By trying to prove your former employer
hacked your system is more a fool's errand and not worth your time and
mostly the stuff of poorly written B movies. So I suggest you get over
it. The odds it happens are very remote, you probably have a better
change of getting struck by lightening then getting "hacked" by a
former employer or anyone for that matter. While it happens the odds
against it happening to any one person is remote.

 

[Lauria]

Yes. so does my family. They have their own password to get into their
computer that we shared.

 

[Lauria]

No, he has a software called Keystroke Reorder. I used to able to check my
email through webmail at work during my lunch hour. Some how or another, he
had my webmail open for 6 days and had been watching or reading my email from
home. No, my family doesn't talk to my boss and the boss has nothing to do
with my family. I worked for the company for 9 years.
Lauria

 

[Lauria]

Yes, I used webmail during my lunch hour. We had permission to do that. It
has stated in the rules and regulations.
Lauria

 

[Lauria]

That is the funny part. A friend of mine told me that she found out that
they have been watching me and her by using the Keystroke reorder
Lauria

Yes, I used webmail during my lunch hour. We had permission to do that. It
has stated in the rules and regulations.
Lauria

No, he has a software called Keystroke Reorder. I used to able to check my
email through webmail at work during my lunch hour. Some how or another, he
had my webmail open for 6 days and had been watching or reading my email from
home. No, my family doesn't talk to my boss and the boss has nothing to do
with my family. I worked for the company for 9 years.
Lauria [snip]
You said that it was your home computer that had been hacked.

You use your boss' computer at work to go online for your emails ?

So what's your home computer got to do with it ?

If you entered your username/password into his computer and he is
running a keylogger then he knows your username/password.

Who told you there was a keylogger program running ?

 

[Lauria]

Some how or another they got a copy of one of my webmail that was suppose to
be confidential.
Lauria

 

[Ringmaster]

No, he has a software called Keystroke Reorder.

I assume you mean Keystroke Recorder.
http://www.smartkeystrokerecorder.com/

I don't see any feature listed where your boss installing this
software on HIS computer so he could monitor email on YOUR computer.
You sound paranoid. That obviously would be illegal and if true you
could file a big fat law suit and take your boss to the cleaners. The
product is designed to PROTECT the computer it is installed on, not
snoop on another computer. So do NOT accuse him of doing that or he
might turn around and sue you!

These days a LOT of companies snoop on their employees but while at
work on company computers. That is legal. What you're suggesting
sounds far fetched. While some of what you suggest is technically
possible I simply can't accept any company would do it or for that
matter know HOW to do it.

 

[Lauria]

I turned my computer off every night. What gets me, he knows alot of
informations that are between me and my friends that we don't talk about at
work. We emailed to each other after work. I contacted my internet provider
and they told me that it looks like my internet and webmail had be opened for
6 days which I know it isn't true. I have records in my computer that I have
sign off and on. I'm just trying to find a way or who can I ask about
helping me out. I got denied unemployment benefit because of the his lies.

 

[Nonny]

You don't need computer help you need legal advice.
Maybe somebody else knows about the legality of keyloggers at the workplace.

It's probably legal, since the company owns the computer and is paying
for the Internet connection and the maintenance of the network.
Anything an employee does on the computer at work is legally available
to the company.

Accessing an employee's private web-based email box is another thing.

 

[John D. Sheridan]

They wouldn't have necessarily have had to use a key-recorder to do that.
Every webpage you visit is downloaded to a location on your hard drive, and
with a little knowledge anyone can read those pages, and that includes web
email. Yahoo is the easiest, GMail the hardest.

OK, take a deep breath.

If your boss used a key-recorder on your work computer to get your email
password, it would not show up on your home computer. It just doesn't work
that way. Your home computer can only show you when it is logged in to. It
will not show if you boss logged in to your web email from another computer.
I doubt your home computer would even show when you logged in to your web
email, it would only when you log in to Windows. Your web email service
might be able to tell you what computers have used your email, and only then
would you be able to tell if someone else was getting in to it. In any
event, he wouldn't have hacked your home computer, so there's nothing there
to find. Even if you find that someone else was accessing your web email,
you have to prove it was him. Where I work, I would only be able to prove
that one of the 10,000 people that work there did it.

In any event, if you think it was him, you may want to contact an attorney.

I hope you have changed your email password since all of this began. I
advise people to never do anything on their work computer that they would be
afraid to show their boss, and that includes personal email.

John