Thanks Marc, I'm sure everyone here appreciates your insight, I for one am glad you have the time to help bring the big picture in focus for us. Painstakingly sent to you from my Blackberry.
----- Original Message ----- From: Marc Maiffret <[EMAIL PROTECTED]> To: NT System Admin Issues <ntsysadmin@lyris.sunbelt-software.com> Sent: Fri Mar 21 21:22:04 2008 Subject: RE: Anyone have experience with Computrace? Correct, the only product I know of that survives a reimage is Computrace, but that is only with specific laptop/desktop models where they have partnered with companies to embed their software within hardware. Which if someone has one of these laptops and they want to donate it to me I will let everyone know how easy it is to piggyback this technology for planning Trojans that persist beyond reimaging :-) Your hope in the case of other solutions, or Computrace on a system without the supported BIOS, is that the thief at least tries to boot the computer once, while connected to a network with Internet access, before reimaging it... which I couldn't imagine they would do most of the time? -Marc -----Original Message----- From: John Cook [mailto:[EMAIL PROTECTED] Sent: Friday, March 21, 2008 11:17 AM To: NT System Admin Issues Subject: RE: Anyone have experience with Computrace? But this get's wiped out if someone reimages the disc (it's not running on its own little partition) correct? John W. Cook System Administrator Partnership For Strong Families 315 SE 2nd Ave Gainesville, Fl 32601 Office (352) 393-2741 x320 Cell (352) 215-6944 Fax (352) 393-2746 MCSE, MCTS, MCP+I,CompTIA A+, N+ -----Original Message----- From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Friday, March 21, 2008 10:16 AM To: NT System Admin Issues Subject: RE: Anyone have experience with Computrace? Here's sample email generated by LocatePC: ************************************ LocatePC is only one of the great software products available at Iconico.com. Here's another: Quick Runner - Optimize your PC to run at lightning speed http://www.iconico.com/connect/refer.aspx?aid=sashazur&action=QuickRunner ************************************ Message sent: 03/21/08 04:04:37 (universal time: 03/21/08 08:04:37) Computer's host name: NX570X Logged in Windows account name: rwright Computer's web IP address reported by ip.locatepc.com: 65.32.238.80 To learn more about this IP address, use the IP tests at www.dnsstuff.com. Computer's local IP address(es): Adapter 1: 192.168.1.202 Computer's MAC address(es): Adapter 1 (TeamViewer VPN Adapter): 00-FE-15-14-69-1C Adapter 2 (Marvell Yukon 88E8038 PCI-E Fast Ethernet Controller): 00-E1-B3-C3-DC-A4 Adapter 3 (Intel(R) PRO/Wireless 3945ABG Network Connection): 00-19-E1-33-B1-2B Trace route from computer to www.microsoft.com: Hop Name/IP Addr 1 192.168.1.1 2 10.103.224.1 3 gig11-0-0-2308.tampfledc-rtr2.tampabay.rr.com [65.32.25.86] 4 ge1-2-0.tampfledc-rtr4.tampflrdc.rr.com [65.32.13.33] 5 te-3-1.car2.Tampa1.Level3.net [4.79.146.1] 6 ae-7-7.ebr1.Dallas1.Level3.net [4.69.133.42] Identifying information (owner name/address, computer brand/model/serial number): Gateway NX570X Serial # 00386754765 Owner Info: Roger Wright 2082 Ashbury Drive Clearwater, FL 33764 727.536.5732 ------------------------------------ IF YOU RECEIVED THIS MESSAGE AFTER YOUR COMPUTER WAS STOLEN: Show this message to law enforcement authorities. They may be able to use it to identify the ISP, and the ISP can probably find out which account was using the computer when the email was sent. This may lead to the identification of the perpetrator(s) and the recovery of your computer. ------------------------------------ This message was automatically created and sent by LocatePC v1.4.9 LocatePC web site: http://www.iconico.com/locatepc ******************************************** The email messages can be frequent but you can adjust this in the LocatePC settings. The application "hides" itself as a service using a different name so it's not obvious that it's running. Roger Wright Network Administrator 727.572.7076 x388 ____ A short cut is the longest distance between two points. From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Friday, March 21, 2008 9:57 AM To: NT System Admin Issues Subject: RE: Anyone have experience with Computrace? You might want to consider this free option: http://www.iconico.com/locatePC/ Roger Wright Network Administrator 727.572.7076 x388 ____ Always look out for #1 and be careful not to step in #2. From: John Cook [mailto:[EMAIL PROTECTED] Sent: Thursday, March 20, 2008 4:14 PM To: NT System Admin Issues Subject: Anyone have experience with Computrace? Any info appreciated, TIA John Cook Systems Administrator Partnership For Strong Families ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
