Mal Woods's community posts

Good Morning Polina,

Thank you for the response.  I have emailed support the full log for your examination.

I have taken over the computer support at this site recently and it appears the previous IT guy has installed Remote Utilities and connected through and deleted the customer's profile.

Any evidence you can provide would be appreciated.

Thanks

Mal

Good Evening,

I found Remote Utilities installed on a customer's computer when they asked me to look for missing files.  Can someone tell me if the following entries indicate someone accessed the computer ?

       15.04.2020---11:00:02:562 36 127.0.0.1 Access granted.
15.04.2020---11:27:47:957 58 127.0.0.1 Terminal connection. Started.
15.04.2020---11:29:00:941 38 127.0.0.1 Remote screen connection. Started.
15.04.2020---11:29:24:846 39 127.0.0.1 Remote screen connection. Closed.
15.04.2020---11:36:21:042 59 127.0.0.1 Terminal connection. Closed.
15.04.2020---11:39:40:522 45 127.0.0.1 Shutdown connection. Mode: 1

Is the date displayed local time or GMT ?  Is there any way of working out where the connection was made from ?

Any help would be appreciated

Thanks

Mal