Hi all,
I'm both concerned and pissed off that my creepy roommate has invaded my privacy, has stolen expensive multimedia & valuable personal info, and may have continued access to my computers. I have a laptop running Win7 Home, and a desktop with Win7 Professional. Both have a Windows password.
Is it possible to look up event logs which show if any computers on a wireless network in the same house have
1) accessed my shared or unshared folders,
2) installed any keyloggers onto my computer,
or 3) enabled remote desktop connection on my computer?
I was attempting to back-up files from my laptop to my desktop two weeks ago, so I created a Shared Folder and put files in there. Unfortunately, instead of going over the ethernet cable, I believe that the transfer occurred over wireless instead (and I'd enabled "Home" network and discovery), and it took several hours just to copy about 100GB!
After the copying was done, while I was moving the folders from the Shared Folder to a private folder on my desktop computer, there was an error message for one of the folders, saying it was open in another window... this was strange, since it definitely hadn't been opened within weeks by me. But it resolved immediately (like they got alerted). And of all the folders, it's one which my stalker roommate would def be interested in.
Also, I recently noticed that there are Remote Desktop Connection icons (called "Default") on both my laptop and desktop. They were created 49 seconds apart, the NEXT morning. They reside in the same parent folder as where the shared folder resides (Documents folder on the laptop and a Partition drive on the desktop). It is possible that I created it by accident while trying to network the my PCs, but I'm also wondering if this rdc got created as offspring from a trojan/DLL file which was placed in the Shared folder by my creepy roommate...? He originally set up and was "admin" over our router. Would he have been alerted to the fact that I shared a folder? What about accessing other NONshared folders if my computer was visible? And do router admins have the capability to track network computer activity?
How can I trace what events occurred that day, such as connections and file grabs by a 3rd computer, worm installation, and/or remote desktop connections? Is it in the Computer Management window => Event Viewer? I can post screenshots if needed.
Thanks for any insights. I've changed my windows & gmail passwords so far, but before overhauling the drives/Windows, I'd like to investigate this.
I'm both concerned and pissed off that my creepy roommate has invaded my privacy, has stolen expensive multimedia & valuable personal info, and may have continued access to my computers. I have a laptop running Win7 Home, and a desktop with Win7 Professional. Both have a Windows password.
Is it possible to look up event logs which show if any computers on a wireless network in the same house have
1) accessed my shared or unshared folders,
2) installed any keyloggers onto my computer,
or 3) enabled remote desktop connection on my computer?
I was attempting to back-up files from my laptop to my desktop two weeks ago, so I created a Shared Folder and put files in there. Unfortunately, instead of going over the ethernet cable, I believe that the transfer occurred over wireless instead (and I'd enabled "Home" network and discovery), and it took several hours just to copy about 100GB!
After the copying was done, while I was moving the folders from the Shared Folder to a private folder on my desktop computer, there was an error message for one of the folders, saying it was open in another window... this was strange, since it definitely hadn't been opened within weeks by me. But it resolved immediately (like they got alerted). And of all the folders, it's one which my stalker roommate would def be interested in.
Also, I recently noticed that there are Remote Desktop Connection icons (called "Default") on both my laptop and desktop. They were created 49 seconds apart, the NEXT morning. They reside in the same parent folder as where the shared folder resides (Documents folder on the laptop and a Partition drive on the desktop). It is possible that I created it by accident while trying to network the my PCs, but I'm also wondering if this rdc got created as offspring from a trojan/DLL file which was placed in the Shared folder by my creepy roommate...? He originally set up and was "admin" over our router. Would he have been alerted to the fact that I shared a folder? What about accessing other NONshared folders if my computer was visible? And do router admins have the capability to track network computer activity?
How can I trace what events occurred that day, such as connections and file grabs by a 3rd computer, worm installation, and/or remote desktop connections? Is it in the Computer Management window => Event Viewer? I can post screenshots if needed.
Thanks for any insights. I've changed my windows & gmail passwords so far, but before overhauling the drives/Windows, I'd like to investigate this.
