1.

Solve : Permanent memory ??

Answer»

I have found a couple of porn shortcuts on my desktop, and porn photos in several folders. I suspect that this is the work of one of my sons, but don't know which. Every time I check, the cookies have been cleared,  the Internet Explorer history has been deleted and the "save history for_ days" has been reset to "0".
 
I have been told that my computer saves a permanent record of all activity that cannot be easily deleted, and have seen references to such on TV cop SHOWS.
 
Is this true?
 
If so, how do I access this history to see where my boys have been surfing? Will it SHOW me the times of use and access to each web site? (I will be able to tell which is doing what by the times.)
 
Thanks in advance for any help and/or advice.Get one of the photos in File Manager and check the properties. THe date and time will be of the download. You will then have your suspect(s).A key logger may help you but do you really want to know everything they do?topgun1.....  You might wish to create separate user accounts for each of your sons ( with limited access rights) you of COURSE would be the only admin........
Then your desktop wouldnt be cluttered with their (oops I forgot to remove the desktop shortcut ICONS)......... However if its a serious issue .....AS Fed has suggested a keylogger.

dl65  As I was trying to say before a hijacker disabled my browser, a free keylogger is

[edit]dl65 reminded me of the possibility that that dite may have caused a hijack. Therefore, until suspicions are confirmed/disproved, the link is REMOVED.[/edit]Topgun.   In XP The file you are looking for is:

C:\Documents_and_Settings\username\Local_Settings\History\History.IE5\Index.dat

(the underscores _ represent blanks)

The file is Hidden, System and is protected any time full Windows is running. i.e. you cannot access it if full Win is running

Winspy (aka SuperWinspy) should print the file contents in Safe Mode tho' I have never tried it. I use CrapCleaner to flag the file for deletion as part of maintenance clean-up schedules.

Anyone who has never deleted this file may be surprised how large it has grown and how far back the details go.  On my system it had grown to over 8mb before I became aware of its existence.

Good luckGX1_Man: Thank you, I will check that.

FED: Yes, I do want to know. I assume a keylogger is something that records every touch of the keyboard. That sounds like what i want. Where do I get one?

dl65: It is a serious issue to me. I don't want to seem to be giving them tacit permission to do these things by simply putting the evidence out of my sight. I wish to GATHER the evidence as proof, and confront the one who violated the rules of our home.

Dusty: AHA !! Sounds like we are getting somewhere !! If you attempt to access this in normal mode, do you get a simple text file? I have seen something like that, but that isn't what I want. What is Winspy/SuperWinspy, and where do I find it? I used to know how to boot in safe mode, but seem to have forgotten. Will you please refresh my memory?

Thank you all very much for taking the time to try to help me.  

Quote

GX1_Man: Thank you, I will check that.

I used to know how to boot in safe mode, but seem to have forgotten. Will you please refresh my memory?



Press F9 while booting.I haven't used a key logger for some time, I think my kids are growing up.
Try this one from PAQ, I'm giving it a go now & it seems OK.
The only limitation (shareware) appears not to be able to copy the logged keystrokes but that shouldn't worry you.
Look around further down this page as well for other sneaky stuff.
http://www.softpedia.com/progDownload/Paq-Keylogger-family-key-logger-Download-8907.htmlhackerweasel, I'm fairly certain it's F8. Topgun...

.dat files are not text files, I think they are binary files which need a specific program to read/interpret them and display the results on-screen.  Super Winspy is a free download from here and should run in Safe mode.

There is  more than one way to start in Safe Mode, I prefer pressing  F8 when booting and select Safe Mode from the options, logging in as Administrator.  If you Google for something like "windows XP safe mode" you'll find another method promoted by Symantec which you might prefer.

Ah, there are multiple ways. Makes sense, I suppose... hackerweasel, Dilbert : It IS F8 for safemode.

Dusty : You're right. Starting in SafeMode showed me the same file as normal mode -- wierd computer language. Where can I find Super Winspy, and will it fit on a floppy so I can download it at work, or must it be downloaded directly to my computer at home?Super Winspy is available here.... or from the url I posted in reply #10.

It's just 860kb so should fit on a 1.4mb floppy diskette easily.  Don't let your boss catch you using his facilities for private purposes 8-)Thanks, Dusty. I had to look REAL close to see tha color change on your links, but I finally did.

The download won't go to floppy, but tries to go directly to the hard drive. BUT .....the computers here stop the download completely, so I'll do it at home when the boys are out. When I get it, will I have to run it in SafeMode?

Thanks again.


Discussion

No Comment Found