Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Is there a way to detect if my PC is "spied" upon with remote access?

share|improve this question

migrated from stackoverflow.com Aug 24 '10 at 16:04

This question came from our site for professional and enthusiast programmers.

    
Is this on Windows? When you say spy, do you mean using remote desktop/equivalent, a piece of software installed on your machine (like real vnc) or covertly? Are you trying to detect this programmatically? –  fredley Aug 24 '10 at 15:08
    
Voting to migrate to SuperUser.com –  JW. Aug 24 '10 at 15:09
    
this seems more like a question for superuser –  zeocrash Aug 24 '10 at 15:18
add comment

4 Answers 4

This depends on what is being used to "spy" on you. An administrator can shadow your session with remote desktop, though you would be able to see that they are logged in on the Users tab. With some VNC clients there will be an indication, typically by a tray icon of some sort, but those can be hidden. Remote control solutions like LogMeIn and TeamViewer also usually have an indicator, but again, those can be bypassed. If you suspect someone may be remotely viewing your session, you can run a packet sniffer like WireShark and see if there are any packets on ports used by VNC or RDP (Remote Desktop runs on port 3389; the port for VNC will depend on how it's configured), or going to any site like logmein.com or teamviewer.com that might indicate someone using one of those sources.

share|improve this answer
add comment

use TCP/IP view software to see what kind of ports your PC opened. Try to install firewall software. on the firewall settings setup firewall ask whatever software try to communicate TCP/IP, UDP port. default inspect 3389 port communications does not always help. You can setup any port for RDP in windows registry:)

share|improve this answer
add comment

If you are running VNC server, the icon in the taskbar changes from white to black when someone connects to the machine remotely.

share|improve this answer
add comment

unless you are not running Terminal Services Server, if someone remote desktop to your machine, you will be prompted for confirmation, and if he gain access, you will be logged off.

you can find who's connected to your machine if you go to Users tab on the Task Manager

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.