Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to detect if my PC is "spied" upon with remote access?

share|improve this question

migrated from Aug 24 '10 at 16:04

This question came from our site for professional and enthusiast programmers.

Is this on Windows? When you say spy, do you mean using remote desktop/equivalent, a piece of software installed on your machine (like real vnc) or covertly? Are you trying to detect this programmatically? – fredley Aug 24 '10 at 15:08
Voting to migrate to – JW. Aug 24 '10 at 15:09
this seems more like a question for superuser – zeocrash Aug 24 '10 at 15:18

If you are running VNC server, the icon in the taskbar changes from white to black when someone connects to the machine remotely.

share|improve this answer

This depends on what is being used to "spy" on you. An administrator can shadow your session with remote desktop, though you would be able to see that they are logged in on the Users tab. With some VNC clients there will be an indication, typically by a tray icon of some sort, but those can be hidden. Remote control solutions like LogMeIn and TeamViewer also usually have an indicator, but again, those can be bypassed. If you suspect someone may be remotely viewing your session, you can run a packet sniffer like WireShark and see if there are any packets on ports used by VNC or RDP (Remote Desktop runs on port 3389; the port for VNC will depend on how it's configured), or going to any site like or that might indicate someone using one of those sources.

share|improve this answer

use TCP/IP view software to see what kind of ports your PC opened. Try to install firewall software. on the firewall settings setup firewall ask whatever software try to communicate TCP/IP, UDP port. default inspect 3389 port communications does not always help. You can setup any port for RDP in windows registry:)

share|improve this answer

unless you are not running Terminal Services Server, if someone remote desktop to your machine, you will be prompted for confirmation, and if he gain access, you will be logged off.

you can find who's connected to your machine if you go to Users tab on the Task Manager

share|improve this answer

You must log in to answer this question.