dacs.doc electric

 

SpyPC

By Richard I. DiFranco

 

Spy or Surveillance Software

I had heard of spyware before, but I thought help desks used it to look at and take over remote terminals. SpyPC is different. SpyPC is monitoring software. It is used for monitoring computer usage. It is not a firewall, although SpyPC can be used to block designated Web pages. SpyPC can be used in a visible mode or an invisible mode. You might consider using SpyPC if someone else is using your computer, or if you have shared computers on the shop floor. Monitoring might be useful in police work. Parents may want to install SpyPC to monitor what the kids are looking at on the Internet.

What does it do?

In essence, SpyPC produces log files but I did find it to be feature rich. Here are some brief descriptions of SpyPC’s major features:

Window Recording: The window title, the start date and time and how long the window was viewed are recorded. The log entries are grouped by user and time.

Application usage: Name of the program, the Path to where the executable is located and the cumulative time that the program was run since the beginning of record keeping.

Screen Shots: SpyPC can be set to take screen shots at intervals. One-minute intervals seemed to be a good test. The screen shots that I had SpyPC take on my PC were a little blurry but they were recognizable and appear to be quite useful.

Security Features

SpyPC, in addition to keeping log files, has several security features. These features and settings are meant to protect the PC from changes and to keep users out of certain programs. They are:
Lock Ctrl-Alt-Del: This eliminates use of Ctrl-Alt-Del and eliminates the task manager. The computer cannot be shut down.

Hide Desktop Icons: This eliminates all shortcuts from the desktop. The desktop is just a plain screen. The user is forced to use the Start menu to run any programs.
Remove wallpaper: I’m not sure why removing wallpaper would be a security issue but that is due to my own ignorance. Perhaps wallpaper hides things.

Preserve shortcuts from the desktop: Any new short cuts will be removed on exiting Windows. According to the Documentation, there is a reference list of required shortcuts. This list is accessible by “clicking ok on the Security Options screen” I was not able to find the list or the Ok button.

Lock Explorers right click menu: This locks the user out of several useful activities such as renaming, deleting, or copying. Certain other options are still available, such as opening, through other means.

No New software: This option effectively prevents installing new executables. This option would, of course have to be suspended for system administrator or SMS to install legitimate new programs.

Advanced Security Features

The advanced settings are said to be for Policy control. A partial list includes the following:

Disable Run dialog: This is the run window on the start menu

Disable MS-DOS: Prevents access to MSDOS and prevents DOS programs from being started from Windows

Disable Find: Disables the find option from the start menu

Protect task bar properties: Prevents access to the Taskbar Properties

Disable system changes: Removes part of the System Properties tabs in Control Panel.

Disable Control Panel: Complete removal of access to Control Panel.

Disable Registry editor: Stops the use of Regedit.exe

Internet Options

Although I have listed many features and options already, I do want to point out some Internet settings. Internet usage control is relevant today.

Lock forbidden web-sites: According to the documentation, you can build a list of web-sites that can be locked out. However, I was unable to get it to work.

Browser time out: This feature closed my browser and dropped my dialup connection on schedule after two minutes of inactivity.

Internet usage logging: Gives a flat count of how long the modem was connected or active in a twenty-four hour period. This is not detailed enough for billing purposes but good for tracking usage.

Modes of usage

SpyPC can be used in two modes Visible or Stealth mode. That is, SpyPC can be installed on a computer and logging can continue without the knowledge of the people using the machine. Later, the logs can be viewed or copied or printed in a visible mode. SpyPC can be installed on a computer that is connected to a network, but there doesn’t appear to be any special features for use on a network. It is intended for use on one PC.

Company

SpyPC is distributed by Xelerate who licenses the product from Redhand Security Ltd. Xelerate’s Web Site listed several other products:

  • PDFmaker, a less expensive version of Adobe writer
  • Steganos, a bigger security package
  • Instantexe, a visual programming system.

There is a newsletter that they say is only sent out via email six times a year.

There were facilities at the web site for support, product registration, questions, and an FAQ section. There also is a facility for ordering software.

Competing products:

I learned that SpyPC is not Spyware. Spyware has to do with embedding ads and banners in other software such as web pages. It sounds like a misnomer to me. SpyPC is really more of a Keylogger and I found several keyloggers on the Internet. Most of the brand names were unknown to me.

Privacy Warnings

The Documentation has several warnings about unauthorized surveillance. Installing SpyPC on your own PC seems ok; maybe a little paranoid, depending on the circumstances but ok. If you install SpyPC on someone else’s PC; you may need a golden parachute from the CIA. By extension, you don’t know if someone has installed SpyPC on the computer that you are using.

The major features work as advertised and there really are many features. I do feel that the documentation could be better. There were certain features that I wanted tog et working that just wouldn’t like blocking certain web sites. I would be interested in hearing of anyone who has an application for SpyPC and how they used it. My interest is strictly academic, and I will keep it in complete confidence.


Rich DiFranco has been a DACS member since the Brookfield library days. Programmed in FORTRAN, COBOL, and Paradox Now learning the new platforms as well as producing an occasional essay.

BackHomeNext

© Copyright Danbury Area Computer Society, Inc. 1998-2003 All Rights Reserved
Web Site Terms & Conditions of Use