(Link to AcmlmWiki) Offline: thank ||bass
Register | Login
Views: 13,040,846
Main | Memberlist | Active users | Calendar | Chat | Online users
Ranks | FAQ | ACS | Stats | Color Chart | Search | Photo album
06-01-24 07:19 PM
0 users currently in Hardware / Software.
Acmlm's Board - I3 Archive - Hardware / Software - NT domain monitoring New poll | |
Pages: 1 2Add to favorites | Next newer thread | Next older thread
User Post
Boom.dk









Since: 11-18-05
From: Denmark

Last post: 6331 days
Last view: 6312 days
Skype
Posted on 12-04-06 03:40 AM Link | Quote
I don't think it's a process, but if it is, I don't know which it is. There are so many that I don't know what is because of all the weird drivers needed for laptops nowadays.
HyperHacker

Star Mario
Finally being paid to code in VB! If only I still enjoyed that. <_<
Wii #7182 6487 4198 1828


 





Since: 11-18-05
From: Canada, w00t!
My computer's specs, if anyone gives a damn.
STOP TRUNCATING THIS >8^(

Last post: 6313 days
Last view: 6313 days
Posted on 12-05-06 03:29 AM Link | Quote
You can't really do permanent damage by killing processes one at a time. Though it sounds like there's no reason at all they should be watching you if they have backups and give you admin access anyway, so the best course of action might be to just have a chat with them about how you feel violated. They'll probably spew the usual "it's our property" crap but at least you tried.
Boom.dk









Since: 11-18-05
From: Denmark

Last post: 6331 days
Last view: 6312 days
Skype
Posted on 12-05-06 05:43 AM Link | Quote
Well... I was kinda challenged to tell the truth. My admin said that I could disable it if I could figure it out on my own. I don't know a lot about NT domains and thus I am asking for help.
FreeDOS +

Giant Red Koopa
Legion: freedos = fritos








Since: 11-17-05
From: Seattle

Last post: 6312 days
Last view: 6312 days
Posted on 12-05-06 08:32 PM Link | Quote
Could've said that from the start. But I think there's not much more to say about the matter. Unless you happen to have your own copy of WinNT, MS Office, and whatever else they want, and install it from scratch.

Any bright admin would just re-image the disk after a user's finished using the thing.
Zidane

Koopa








Since: 07-14-06
From: Melbourne, FL

Last post: 6318 days
Last view: 6319 days
Posted on 12-06-06 02:01 AM Link | Quote
There are many different tools used to monitor NT domain. If you download and run this and paste the logfile, we may be able to see what your administrator is using.
Boom.dk









Since: 11-18-05
From: Denmark

Last post: 6331 days
Last view: 6312 days
Skype
Posted on 12-06-06 03:54 AM Link | Quote
Just a regular scan like this?

Attachments

hijackthis.log.txt (11733b) - views: 20
Zidane

Koopa








Since: 07-14-06
From: Melbourne, FL

Last post: 6318 days
Last view: 6319 days
Posted on 12-06-06 05:01 PM Link | Quote
Loads of processes when it comes to laptops, especially school-bought ones. Your school is using ThinkVantage to monitor the network.

O4 - HKLM\..\Run: [cssauth] "C:\Programmer\Lenovo\Client Security Solution\cssauth.exe" silent
O9 - Extra button: (no name) - {0045D4BC-5189-4b67-969C-83BB1906C421} - C:\Programmer\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O9 - Extra 'Tools' menuitem: ThinkVantage Password Manager... - {0045D4BC-5189-4b67-969C-83BB1906C421} - C:\Programmer\Lenovo\Client Security Solution\tvtpwm_ie_com.dll

You'll have to edit the registry to stop them from monitoring the registry. XD If you have full administrator priveledges, though, check and see if you can uninstall the monitoring tools, lol. If not, there are some programs that will allow you to edit what programs are run at startup.

Edit: Nevermind...

Originally posted by Lenovo
To further enhance security, select ThinkPadŽ and ThinkCentreŽ systems also include an embedded chip called the Trusted Platform Module (TPM). ThinkVantage Client Security Solution works in conjunction with this chip to manage encryption keys and processes.


You're pretty much screwed unless you can burn off the chip or find some great cracker to make some software to work around it all.


(edited by Zidane on 12-06-06 04:02 PM)
(edited by Zidane on 12-06-06 04:07 PM)
Boom.dk









Since: 11-18-05
From: Denmark

Last post: 6331 days
Last view: 6312 days
Skype
Posted on 12-07-06 05:05 AM Link | Quote
Except that those are driver/software updates from Lenovo that I installed myself. The chip is currently not in use, as I have disabled it in the BIOS.
Zidane

Koopa








Since: 07-14-06
From: Melbourne, FL

Last post: 6318 days
Last view: 6319 days
Posted on 12-07-06 06:28 PM Link | Quote
Originally posted by Boom.dk
Except that those are driver/software updates from Lenovo that I installed myself. The chip is currently not in use, as I have disabled it in the BIOS.


And you know for sure that whatever you do is being transmitted over the network?
Boom.dk









Since: 11-18-05
From: Denmark

Last post: 6331 days
Last view: 6312 days
Skype
Posted on 12-08-06 03:23 AM Link | Quote
My admin told me... so I'm fairly certain. Well, not everything, but he said that when I for example modify the registery, a message pops up down at his server.
Zidane

Koopa








Since: 07-14-06
From: Melbourne, FL

Last post: 6318 days
Last view: 6319 days
Posted on 12-08-06 12:32 PM Link | Quote
Have you tested it? There's always a chance that he's bluffing... I looked over the log, and didn't see anything that would really be used to monitor your computer. There may be something there, but hiding itself from even the program used to scan your PC. Regardless, if any information about your computer is being sent over the network, there is some process, though maybe hidden, doing it.

I don't think anyone here can really help you. I would've just got with a quicker fix, such as formatting the drive and installing my own copy of Windows or installing Linux. Well, I really would've just pretended to be someone else. It's more trouble than it's worth. Shame on the administrator for being an idiot and challenging students to break the school's system for protecting their computers.
Boom.dk









Since: 11-18-05
From: Denmark

Last post: 6331 days
Last view: 6312 days
Skype
Posted on 12-09-06 01:26 PM Link | Quote
Technically I could reinstall Windows, but the problem is that there's a lot of software on it.
Pages: 1 2Add to favorites | Next newer thread | Next older thread
Acmlm's Board - I3 Archive - Hardware / Software - NT domain monitoring |


ABII

Acmlmboard 1.92.999, 9/17/2006
©2000-2006 Acmlm, Emuz, Blades, Xkeeper

Page rendered in 0.015 seconds; used 407.09 kB (max 508.47 kB)