IE history question

[phoznik]

So I think my roommate has been using my computer while I'm at class, not a big deal right? Well, I'm pretty sure he's using it for porn. My history has a few entries from when I was gone, the thing I'm not sure about is where exactly these pages or files are. This is what it says "http://127.0.0.1:1254/.download/1045075950/(sexual explicits removed).mpg"

I know 127.0.0.1 is my computer, but I don't have a clue if this was on my computer or not. I do a search and it isn't found anywhere. I have a graph of my network usage over time, and it clearly shows about 30Mb downloaded while I was gone. (and I don't have anything set to download without my permission)

I don't know if port 1254 has anything to do with it, but I'd like to find out what this is.

 

[BennyD]

sounds like somes launched the file in windows, then deleted the article in recent documents

that port might have been used by a virus or something, bbut most likely porn

install a keylogger or something

 

[phoznik]

Thanks, I've got a logger installed now.

This should be interesting...

 

[Nocturnal]

Please keep us updated

 

[waitman]

Originally posted by: Nocturnal
Please keep us updated

yes do. I had a similar situation a couple weeks ago, did the same thing thing. Now the problem has gone away

 

[EeyoreX]

Of course you could also have just started by asking your room mate not to use your computer for porn if that bothers you. You could also deny him access to the computer by setting up a password, or again, simly asking him not to use it. I suppose, though, you could skip all these steps and start by spying. Which you did. Just trying to offer some alternative solutions. Perhaps I am just naive that I would think to start by communication before keylogging.

\Dan

 

[phoznik]

So I'm pretty sure he is using my comp for porn. I found a few entries in the log that match the search history in kazaa lite. I also found out that he removed kazaa from his computer.

I guess it doesn't bother me much that he's using my computer, but the fact that he has a computer that can do the same thing does bother me.

I probably could have confronted him right off the bat, but I wanted to make sure I had my facts right. He won't be back before I leave for the weekend, so I'll bring it up then. I'll let ya guys know how it turns out.

Hey waitman, did you bring it up or was it a one time thing?