(Link to AcmlmWiki) Offline: thank ||bass
Register | Login
Views: 13,040,846
Main | Memberlist | Active users | Calendar | Chat | Online users
Ranks | FAQ | ACS | Stats | Color Chart | Search | Photo album
06-20-24 05:08 PM
0 users currently in Hardware / Software.
Acmlm's Board - I3 Archive - Hardware / Software - NT domain monitoring
  
User name:
Password:
Reply:
 
Options: - -
Quik-Attach:
Preview for more options

Max size 1.00 MB, types: png, gif, jpg, txt, zip, rar, tar, gz, 7z, ace, mp3, ogg, mid, ips, bz2, lzh, psd

UserPost
Boom.dk
Posts: 342/356
Technically I could reinstall Windows, but the problem is that there's a lot of software on it.
Zidane
Posts: 81/105
Have you tested it? There's always a chance that he's bluffing... I looked over the log, and didn't see anything that would really be used to monitor your computer. There may be something there, but hiding itself from even the program used to scan your PC. Regardless, if any information about your computer is being sent over the network, there is some process, though maybe hidden, doing it.

I don't think anyone here can really help you. I would've just got with a quicker fix, such as formatting the drive and installing my own copy of Windows or installing Linux. Well, I really would've just pretended to be someone else. It's more trouble than it's worth. Shame on the administrator for being an idiot and challenging students to break the school's system for protecting their computers.
Boom.dk
Posts: 341/356
My admin told me... so I'm fairly certain. Well, not everything, but he said that when I for example modify the registery, a message pops up down at his server.
Zidane
Posts: 80/105
Originally posted by Boom.dk
Except that those are driver/software updates from Lenovo that I installed myself. The chip is currently not in use, as I have disabled it in the BIOS.


And you know for sure that whatever you do is being transmitted over the network?
Boom.dk
Posts: 339/356
Except that those are driver/software updates from Lenovo that I installed myself. The chip is currently not in use, as I have disabled it in the BIOS.
Zidane
Posts: 79/105
Loads of processes when it comes to laptops, especially school-bought ones. Your school is using ThinkVantage to monitor the network.

O4 - HKLM\..\Run: [cssauth] "C:\Programmer\Lenovo\Client Security Solution\cssauth.exe" silent
O9 - Extra button: (no name) - {0045D4BC-5189-4b67-969C-83BB1906C421} - C:\Programmer\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O9 - Extra 'Tools' menuitem: ThinkVantage Password Manager... - {0045D4BC-5189-4b67-969C-83BB1906C421} - C:\Programmer\Lenovo\Client Security Solution\tvtpwm_ie_com.dll

You'll have to edit the registry to stop them from monitoring the registry. XD If you have full administrator priveledges, though, check and see if you can uninstall the monitoring tools, lol. If not, there are some programs that will allow you to edit what programs are run at startup.

Edit: Nevermind...

Originally posted by Lenovo
To further enhance security, select ThinkPad® and ThinkCentre® systems also include an embedded chip called the Trusted Platform Module (TPM). ThinkVantage Client Security Solution works in conjunction with this chip to manage encryption keys and processes.


You're pretty much screwed unless you can burn off the chip or find some great cracker to make some software to work around it all.
Boom.dk
Posts: 338/356
Just a regular scan like this?
Zidane
Posts: 78/105
There are many different tools used to monitor NT domain. If you download and run this and paste the logfile, we may be able to see what your administrator is using.
FreeDOS +
Posts: 1110/1312
Could've said that from the start. But I think there's not much more to say about the matter. Unless you happen to have your own copy of WinNT, MS Office, and whatever else they want, and install it from scratch.

Any bright admin would just re-image the disk after a user's finished using the thing.
Boom.dk
Posts: 334/356
Well... I was kinda challenged to tell the truth. My admin said that I could disable it if I could figure it out on my own. I don't know a lot about NT domains and thus I am asking for help.
HyperHacker
Posts: 4337/5072
You can't really do permanent damage by killing processes one at a time. Though it sounds like there's no reason at all they should be watching you if they have backups and give you admin access anyway, so the best course of action might be to just have a chat with them about how you feel violated. They'll probably spew the usual "it's our property" crap but at least you tried.
Boom.dk
Posts: 333/356
I don't think it's a process, but if it is, I don't know which it is. There are so many that I don't know what is because of all the weird drivers needed for laptops nowadays.
Sukasa
Posts: 1926/2068
well, if it's a valied process and you're an administrator, have you tried ctrl+alt+del;ing and killing off the monitoring process?
Boom.dk
Posts: 332/356
It's not like I'm not allowed. I just don't like the idea that people can see what's going on on MY computer. A computer is personal. That's all.
Zidane
Posts: 76/105
For what reason? Does it really matter what he sees if he thinks you're someone else? If you're that ethical, why do you want to do things that you're not allowed to do?
Boom.dk
Posts: 331/356
But I still want to stop it.
HyperHacker
Posts: 4293/5072
Well the problem with monitoring systems is when they stop working, people generally go see why.
Boom.dk
Posts: 330/356
I don't want to use another account. I really just want to prevent my computer from being monitored.
Zidane
Posts: 75/105
Originally posted by Boom.dk
Yes, however, I can't connect to the wireless network with a spoofed MAC address, believe me, I tried.


You can't connect if the spoofed MAC address doesn't match up to the correct login information and computer name. The school probably limits its Wi-fi to certain computers, which is normally done by limiting certain MAC addresses..

You can't just come up with any address. What I'm talking about is using the MAC address of a computer that belongs to the person whose account you'd use. There would be some slight connection problems if you were to both be connected to the network, but it should still work. You couldn't play any online games for much longer than a minute (depending on what the other person was doing), but browsing the web should work fine.
Boom.dk
Posts: 329/356
Yes, however, I can't connect to the wireless network with a spoofed MAC address, believe me, I tried.
This is a long thread. Click here to view it.
Acmlm's Board - I3 Archive - Hardware / Software - NT domain monitoring


ABII

Acmlmboard 1.92.999, 9/17/2006
©2000-2006 Acmlm, Emuz, Blades, Xkeeper

Page rendered in 0.004 seconds; used 360.66 kB (max 418.06 kB)