Is there a way to detect if my PC is "spied" upon with remote access?
-
Is this on Windows? When you say spy, do you mean using remote desktop/equivalent, a piece of software installed on your machine (like real vnc) or covertly? Are you trying to detect this programmatically?– fredleyAug 24, 2010 at 15:08
-
Voting to migrate to SuperUser.com– JW.Aug 24, 2010 at 15:09
-
this seems more like a question for superuser– zeocrashAug 24, 2010 at 15:18
Add a comment
|
4 Answers
If you are running VNC server, the icon in the taskbar changes from white to black when someone connects to the machine remotely.
This depends on what is being used to "spy" on you. An administrator can shadow your session with remote desktop, though you would be able to see that they are logged in on the Users tab. With some VNC clients there will be an indication, typically by a tray icon of some sort, but those can be hidden. Remote control solutions like LogMeIn and TeamViewer also usually have an indicator, but again, those can be bypassed. If you suspect someone may be remotely viewing your session, you can run a packet sniffer like WireShark and see if there are any packets on ports used by VNC or RDP (Remote Desktop runs on port 3389; the port for VNC will depend on how it's configured), or going to any site like logmein.com or teamviewer.com that might indicate someone using one of those sources.
use TCP/IP view software to see what kind of ports your PC opened. Try to install firewall software. on the firewall settings setup firewall ask whatever software try to communicate TCP/IP, UDP port. default inspect 3389 port communications does not always help. You can setup any port for RDP in windows registry:)
unless you are not running Terminal Services Server, if someone remote desktop to your machine, you will be prompted for confirmation, and if he gain access, you will be logged off.
you can find who's connected to your machine if you go to Users tab on the Task Manager