RE: How to obtain a yahoo username off a computer

["Jay Woody" <jay_woody () tnb com>]

Here was the one I used to catch my wife's IM logs.  The divorce went
very smooth from there.  :)

http://www.winwhatwhere.com/

JayW

> > > "Christian Freas" <Christian.Freas () fairbankscapital com> 06/12/03
02:39PM >>>
You might want to take a look at
http://www.spectorsoft.com/ 

They make a couple of products, one a key stroke logger, and one a
more
directed snooper that will forward copies of all email sent or read,
including those (according to their claims) from Yahoo, AOL etc. Both
products look pretty comprehensive and are pretty inexpensive as well


-----Original Message-----
From: Potter, Tim [mailto:Tim.Potter () clarkconsulting com] 
Sent: Thursday, June 12, 2003 1:50 PM
To: security-basics () securityfocus com 
Subject: RE: How to obtain a yahoo username off a computer


Okay - things have changed quite bit.  What is a good
keystroke-logger?
Thanks!

-----Original Message-----
From: Jon Baer [mailto:security () jonbaer net] 
Sent: Wednesday, June 11, 2003 9:06 PM
To: security-basics () securityfocus com 
Subject: Re: How to obtain a yahoo username off a computer


You could do it with a sniffer but if that's if you want to sit around
for 24x7 and wait for it to happen in which case Id download Snort
(www.snort.org) and write a sig to trap the user, something like:

alert tcp $MY_NET any -> $YAHOO_SERVERS any (msg:"CHAT YAHOO my guy";
flow:to_server,established; content:"username";
classtype:policy-violation;)

I checked chat.rules off snort but they don't have any Yahoo rules
yet,
but not hard to write :-\

- Jon

> particular Yahoo user ID from within our company.  We are about 90%
> certain of the person's identity.  This user has been deleting his 
> cookies and temp Internet files.  We want to search his computer to
see
> if Yahoo ID xxxx is somewhere on his computer.   We know the Yahoo
user
> ID - we just need to confirm that this person is using it.  We don't
> want to contact Yahoo because we don't want to go down the legal road

> needed to get them to release the info.  Any ideas?


------------------------------------------------------------------------
---
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
analysts! The Gartner Group just put Neoteris in the top of its Magic
Quadrant, while InStat has confirmed Neoteris as the leader in
marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access
in about an hour, with no client, server changes, or ongoing
maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm 
------------------------------------------------------------------------
----



------------------------------------------------------------------------
---
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access
in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm 
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.

Find out why, and see how you can get plug-n-play secure remote access
in
about an hour, with no client, server changes, or ongoing maintenance.

Visit us at: http://www.neoteris.com/promos/sf-6-9.htm 
----------------------------------------------------------------------------




---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------