BleepingComputer.com: How can I tell if files have been copied from my computer

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

How can I tell if files have been copied from my computer

#1 User is offline   possumbarnes 

  • Forum Regular
  • PipPipPip
  • Find Topics
  • Group: Members
  • Posts: 312
  • Joined: 06-June 08
  • Gender:Male
  • Location:Tennessee, USA

Posted 10 August 2009 - 05:28 PM

This is something that you see in the movies all the time, but I've never come across the need to actually use software that can do this.

I have a client that suspects a former employee of copying their customer database and using it for a rival company. Their system is running Win XP Pro, fully updated, with McAfee Internet Security, also fully updated, on all 3 computers in the office. When her questions first started, my first step was to verify that there were no new exceptions for the McAfee firewall. I found nothing out of the ordinary there. All computers are spyware free with clean scans from Malwarebytes' Anti-Malware, Superantispyware, and Spybot S&D.

What I need is a program or something that I can use to pull up a list of everything that has been copied or downloaded from a computer in the last 6 months or so. Usually, when you copy and paste something, the clipboard is cleared afterward, or at least it is cleared on a reboot. Is there some log somewhere in Windows that keeps a record of everything copied on the computer for a certain period of time?

Any help would be appreciated.

This post has been edited by possumbarnes: 10 August 2009 - 05:29 PM

What's more irrational--a guy who believes in a God he cannot see or a guy who is offended by a God he doesn't believe in?

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users