Member Avatar for sweetie432

My laptop was stolen out of my apartment a few weeks ago. It had Logmein, which is remote access software, installed. I've been monitoring my Logmein account regularly, and see the laptop comes online periodically. I want to track down where it is and who has it. If I switched to "Remote Control" mode, so I had a view of the desktop, and could control the mouse & keyboard, I'd be able to find out this information by go to whatismyip.com / watching until he checks his email so I could get his email address. I could also then install a keylogger. HOWEVER, unfortunately this is not an option -- when you switch to "Remote Control" mode with Logmein, a notification pops up -- this would tip him off, and probably lead him to delete Logmein, which is my only hope. If I installed any programs it would also be risky I think.

I CAN, however, use the command prompt AND modify the registry without him being notified. What can I do with these capabilities to track down the computer?
I know I can do tracert google.com to get the IP address. What else??

thank you thank you thank you thank you

  • 3 Contributors
  • 2 Replies
  • 282 Views
  • 15 Hours Discussion Span
  • Latest Post Latest Post by zelkea

Dani AI

Generated

A few practical, low‑risk steps to collect useful evidence without switching LogMeIn into an interactive mode or installing covert software. Do not attempt to install keyloggers or hide remote control—those actions can be illegal and will likely destroy the only logs you have. Follow ’s suggestion to gather facts and hand them to law enforcement rather than trying to confront anyone directly; file a formal report and preserve everything you capture. (complaint.ic3.gov)

When the machine is online you can pull stable, forensically useful items from a command prompt and save them to files you can later download from your LogMeIn account. Example commands (run from an elevated prompt; redirect output to a file in a public folder so you can retrieve it later):

whoami
systeminfo
wmic bios get serialnumber
wmic csproduct get name, identifyingnumber
ipconfig /all > C:\Users\Public\ipconfig.txt
netstat -ano > C:\Users\Public\netstat.txt
msinfo32 /report C:\Users\Public\msinfo.txt
tasklist /v > C:\Users\Public\tasklist.txt

wmic and msinfo32 are reliable ways to capture hardware identifiers and a full system report you can give to police or support; keep the original files intact. ()

Download any LogMeIn account activity / session reports (they include host/last‑known IP and timestamps) and include those with your police report — LogMeIn’s reporting is often the quickest way to get accurate connection timestamps and IPs. Expect an ISP to require a law‑enforcement request or subpoena before they’ll hand over subscriber records; pass the evidence to police so they can request the data properly. (support.logmein.com)

As noted, local browser history and Windows artifacts can help but are easy to clear; treat them as secondary. Preserve everything (don’t modify files after you save them), note exact timestamps, and let investigators request identity information from the ISP or LogMeIn. File an IC3/local police report and give them the exported LogMeIn report, serial number, and the text files you saved. (complaint.ic3.gov)

Recommended Answers

All 2 Replies

Member Avatar for Salem

Do a tracert to find out what ISP they're connecting to.
Tell the ISP what you know
Tell the police what you know.

Member Avatar for zelkea

I did some searching and came across someone who claims to have hacked logmein's application (cached google link below) and removed the notification. I have no idea how much he/she is selling it for, if you end up contacting them I would be interested in hearing the results i.e. how well it works and how much it costs.

If you are interested in the sites they have visted check this reg key: Current user\software\microsoft\internet explorer\typedURLS

If I think of anything else I'll let you know, good luck.


AJZ

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.