Showing posts with label Remote Spying. Show all posts
Showing posts with label Remote Spying. Show all posts
How To Check Whether You are Victim of RATS or not ?
In this post i am going to show you how to find out when you are infected with a RAT or Keylogger, without using any complex tools. Now i believe most of you might know that you need to have an internet connection to make a RAT or a Keylogger work, which would mean, if you are not connected to internet, you don't have to worry about being infected with RAT or Keylogger. Ok, so for those who have internet connection and think they are being infected with a Trojan, here is a little guide that can solve your problem.
1. Now every program has their own process which can be seen on task manager. So the first thing to do is to find out which process the Trojan is being attached to. If you see some unknown process search that on google. A good hacker will always makes sure he hides its process with a Windows based Process, for eg. svchost.exe or something like that.
2. If you cant find, then the next thing you can do is use cmd (to open cmd prompt, Click on Start--->Accessories-->Command prompt).
3. Once Command Prompt is opened, use this command: netstat -an |find /i "listening"
Note: The NETSTAT command will show you whatever ports are open or in use, but it is NOT a port scanning tool!
Now we wonder What this Command does? This command will show all the opening ports. Now check for any unknown port.
4. You can skip step 3 if you want, and can do this instead.
Open command prompt and type netstat -b

Now this command will show you the active connections with the process with their PID (Process Identifier) and also the packets.
Look out for SYN Packets and the Foreign address its been connecting with , check the process its been associated with, check the ports also. If you find that its connecting to some unknown ports, then you can say you have been backdoored.
5. Go to your task manager. On the top of it, click on View---> select Column---> Tick on PID (Process Identifier).
Match the suspicious Process with the Processes In task manager, check PID also.

Now most of the RATs resides on Start up. How to delete them from start up?
a) Go to regedit ---> HKLM\Software\Microsoft\Windows\Current version\Run
On the Right hand side, check for the process name which you find on step 4. if its not their. Check at
HKCU\Software\Microsoft\Windows\Current Version\Run
OR
Open Cmd prompt & type start msconfig. Go to Startup tab, you can check the startup process there.

I hope This Tutorial was easy and comprehensive.
1. Now every program has their own process which can be seen on task manager. So the first thing to do is to find out which process the Trojan is being attached to. If you see some unknown process search that on google. A good hacker will always makes sure he hides its process with a Windows based Process, for eg. svchost.exe or something like that.
2. If you cant find, then the next thing you can do is use cmd (to open cmd prompt, Click on Start--->Accessories-->Command prompt).
3. Once Command Prompt is opened, use this command: netstat -an |find /i "listening"
Note: The NETSTAT command will show you whatever ports are open or in use, but it is NOT a port scanning tool!
Now we wonder What this Command does? This command will show all the opening ports. Now check for any unknown port.
4. You can skip step 3 if you want, and can do this instead.
Open command prompt and type netstat -b

Now this command will show you the active connections with the process with their PID (Process Identifier) and also the packets.
Look out for SYN Packets and the Foreign address its been connecting with , check the process its been associated with, check the ports also. If you find that its connecting to some unknown ports, then you can say you have been backdoored.
5. Go to your task manager. On the top of it, click on View---> select Column---> Tick on PID (Process Identifier).
Match the suspicious Process with the Processes In task manager, check PID also.

Now most of the RATs resides on Start up. How to delete them from start up?
a) Go to regedit ---> HKLM\Software\Microsoft\Windows\Current version\Run
On the Right hand side, check for the process name which you find on step 4. if its not their. Check at
HKCU\Software\Microsoft\Windows\Current Version\Run
OR
Open Cmd prompt & type start msconfig. Go to Startup tab, you can check the startup process there.

I hope This Tutorial was easy and comprehensive.
10:50 AM by Shubham Mittal · 0
Remote PC Spying With Spytech SpyAgent
Need to track your computer users and monitor activities at all times? Ever need to keep tabs on your child or spouse while they use your computer? Are your employees abusing work hours? Spytech SpyAgent is an award winning, powerful computer spy software that allows you to monitor everything users do on your computer - in total stealth.
Why Spytech SpyAgent?
Spytech SpyAgent Professional is a powerful monitoring solution with tons of features and configuration options and support for dual monitor screen logging. SpyAgent Professional records keystrokes, windows opened, applications ran, passwords used, internet connections, websites visited, emails sent and received and even captures desktop screenshots that can be viewed as a slideshow to replay desktop activity. The program keeps detailed activity logs and can be configured to automatically email a log file to a specified address every X minutes. An easy to use and fully featured utility.
SpyAgent runs in total stealth (if chosen) and has a the most robust feature-set available on the market - all accessible from an easy to use interface.
SpyAgent has built in log delivery for REMOTE monitoring from afar - as long as you have access to your email.
SpyAgent has a very large list of features. Below is a list of SpyAgent's extensive features:

Spytech SpyAgent comes equipped with an enriched set of robust features rarely seen in its competition. The application is a reliable and surprisingly affordable tool for both home and business users.
Why Spytech SpyAgent?
Spytech SpyAgent Professional is a powerful monitoring solution with tons of features and configuration options and support for dual monitor screen logging. SpyAgent Professional records keystrokes, windows opened, applications ran, passwords used, internet connections, websites visited, emails sent and received and even captures desktop screenshots that can be viewed as a slideshow to replay desktop activity. The program keeps detailed activity logs and can be configured to automatically email a log file to a specified address every X minutes. An easy to use and fully featured utility.SpyAgent runs in total stealth (if chosen) and has a the most robust feature-set available on the market - all accessible from an easy to use interface.
SpyAgent has built in log delivery for REMOTE monitoring from afar - as long as you have access to your email.
SpyAgent has a very large list of features. Below is a list of SpyAgent's extensive features:

Spytech SpyAgent comes equipped with an enriched set of robust features rarely seen in its competition. The application is a reliable and surprisingly affordable tool for both home and business users.
10:45 AM by Shubham Mittal · 0
How to Monitor a Computer from Anywhere - Remote Spy Software
Computer monitoring software (also known as spy software or surveillance software) is software which monitors and records activities of a computer system. This activity usually includes keystrokes, chats, emails and other Internet and local activity. Today there are many reasons why you may want to monitor computer activity. Here are just a few:
SniperSpy is the industry leading Remote PC Spy software combined with the Remote Install and Remote Viewing feature. I’ve tested it last couple of days and must say that if you need to know every small detail of what is going on your PC – this tool is just what you need.
SniperSpy is remotely-deployable spy software. This type of computer program records the activities of children or employees whom use your remote PC. The software can be installed using the Internet by sending an email attachment which contains a module.
When the module is ran by your child or employee, the software silently installs onto your remote PC. It records an array of Internet activities which you'll be able to view in real time. It also allows you to view the full screen and perform control commands.
When you want to view the screen or browse the logged results, simply login to the Secure Online Control Panel and enter your username and password. This panel allows you to view the screen, perform commands, search the logs or uninstall the software.
How the Program Works

SniperSpy Top Features:
Click Here to Download SniperSpy
Download SniperSpy for Mac
- Employee monitoring- are they doing work or surfing the net?
- Child monitoring - are they viewing adult or pornographic material? Are they chatting with strangers?
- Law enforcement - trying to catch a criminal or a terrorist?
SniperSpy is the industry leading Remote PC Spy software combined with the Remote Install and Remote Viewing feature. I’ve tested it last couple of days and must say that if you need to know every small detail of what is going on your PC – this tool is just what you need.SniperSpy is remotely-deployable spy software. This type of computer program records the activities of children or employees whom use your remote PC. The software can be installed using the Internet by sending an email attachment which contains a module.
When the module is ran by your child or employee, the software silently installs onto your remote PC. It records an array of Internet activities which you'll be able to view in real time. It also allows you to view the full screen and perform control commands.
When you want to view the screen or browse the logged results, simply login to the Secure Online Control Panel and enter your username and password. This panel allows you to view the screen, perform commands, search the logs or uninstall the software.
How the Program Works

SniperSpy Top Features:
- SniperSpy is remotely-deployable spy software
- Invisibility Stealth Mode Option. Works in complete stealth mode. Undetectable!
- Logs All Keystrokes
- Records any Password (Email, Login, Instant Messenger etc.)
- Remote Monitor Entire IM Conversations so that you can spy on IM activities too
- Captures a full-size jpg picture of the active window however often you wish
- Real Time Screen Viewer
- Remotely reboot or shutdown the PC or choose to logoff the current Windows user
- Completely Bypasses any Firewall
Click Here to Download SniperSpy
Download SniperSpy for Mac
10:41 AM by Shubham Mittal · 1
Subscribe to:
Posts (Atom)