How to determine if Spector Pro Spyware is running on my computer?

[Steve B.]

On Sun, 18 May 2008 00:57:41 -0700, Donna <donnaohl26@yahoo.com>
wrote:

>I found a receipt in my husband's credit card bill for something I think
>might be something called Spectre Pro Spyware wireless keylogger.
>
>I presume the software must "phone home" somehow the keylogging activity.
>
>Is there any way, perhaps by looking at network activity, that I can tell
>if my husband bought it for use on my winxp computer?

I would visit there website
http://www.spectorsoft.com/products/...quirements.asp
and call the support department to find out what the key sequence is
to bring up the application. If it works then you know it is there.

Also you could install and run
Windows Defender (from Microsoft website)
Ad-Aware
SpyBot Search and Destroy.

One of the three should find it if it is there.


You could also get your own copy and put on your husbands computer so
you can monitor his e-mail to see if he is monitoring yours.

Steve B.

[Donna]

On Sun, 18 May 2008 09:52:54 -0400, Steve B. wrote:

> http://www.spectorsoft.com/products/...quirements.asp
> and call the support department to find out what the key sequence is
> to bring up the application. If it works then you know it is there.

When I pressed CTRL-ALT-SHIFT-S, nothing happened (that is the default
method of bringing up the program) but according to what I read, the
Spector program can be configured to bring it up using any other key
combination.

I also checked the registry key
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\
ShellServiceObjectDelayLoad and C:\windows\system32 as described at
http://www.farmfreshmeat.com/2007/04...keylogger.html

It doesn't seem to be here. That's good. I'll go to the Spector web site to
see what I can find out about disabling the program anyway, just to be
sure.

[Donna]

On Sun, 18 May 2008 09:52:54 -0400, Steve B. wrote:

> You could also get your own copy

In the spirit of the best defence is a good offense, I went to the Spector
web site to find out something very interesting.

They disable the keylogging software remotely if they find you using it on
another machine. Hmmm... how do they know if you've used it on another
machine.

Taking advantage of that 'feature', all we'd have to do is make our
machines "look" like another machine and the software would disable itself.

Pretty simple. Now, the question is, how does Spector "know" what machine
it's running on? And, how would we spoof that item?

Does anyone know what to do to "spoof" another computer?









Note: Here is their license information saysing what I summarize above:
http://www.spectorsoft.com/support/S...ndows/faq.html
The Spector Pro software license agreement allows a user to install on an
additional computer, if the new installation is being done to a computer
that is replacing the original computer which Spector Pro was installed.
The original computer must be taken out of service.

This policy allows customers who are upgrading to newer computers the
ability to continue to use their Spector Pro license with their new
computer. This transfer of the license from an old computer to a new
computer can only be done once. Any installations of a Spector Pro serial
number on more than two computers or on 2 or more computers simultaneously,
will result in the Spector Pro serial number being disabled and the
software being deactivated.

[VanguardLH]

"Donna" wrote in <news:AAaYj.9093$nl7.7023@flpi146.ffdc.sbc.com>:

> In the spirit of the best defence is a good offense, I went to the Spector
> web site to find out something very interesting.
>
> They disable the keylogging software remotely if they find you using it on
> another machine. Hmmm... how do they know if you've used it on another
> machine.
>
> Taking advantage of that 'feature', all we'd have to do is make our
> machines "look" like another machine and the software would disable itself.
>
> Pretty simple. Now, the question is, how does Spector "know" what machine
> it's running on? And, how would we spoof that item?
>
> Does anyone know what to do to "spoof" another computer?

Oh, so the "problem" wasn't what you claimed it to be in your first
post.

[Donna]

On Mon, 19 May 2008 08:55:18 -0500, VanguardLH wrote:
> Oh, so the "problem" wasn't what you claimed it to be in your first
> post.

Why so suspicious.

Actually, in hindsight, I wish I knew how programs figure out exactly who
is running them. This Spector program, which I apparently don't have on my
system based on the help here, apparently wires back home who is using it.

How does it do that? (Is this a right group to ask that question?)

It's a privacy spying computer security internet issue.

I'm assuming it keys off the MAC ID, which can easily be changed.

In general, how does a program (such as Spector) know EXACTLY who is using
it and on what computer? Is it the MAC ID or something else that it keys
off of?

D

[Donna]

On Wed, 21 May 2008 08:50:12 -0700, Donna wrote:

> In general, how does a program (such as Spector) know EXACTLY who is using
> it and on what computer? Is it the MAC ID or something else that it keys
> off of?

And better yet, could we all foil such keyloggers simply by changing
whatever it is that it uses to key off of?