Google Answers Logo
View Question
 
Q: Hooking a window event ( No Answer,   2 Comments )
Question  
Subject: Hooking a window event
Category: Computers > Security
Asked by: funkyfinger-ga
List Price: $20.00
Posted: 12 Oct 2005 19:56 PDT
Expires: 11 Nov 2005 18:56 PST
Question ID: 579597
I am using windows xp professional. I am on a network. 
How can I determine when I am being shadowed? By shadowed I mean the
program described here:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/ts_cmd_shadow.mspx

I am a programmer so I am willing to find a very technical answer. I
am also willing to help you to discover this answer in anyway that I
can.

I have been trying to find an answer to this question for a long time
now. I am starting to wonder if a good approach would be to determine
when the screen resolution has been requested, since the screen
resolution must be compatible for this feature to work.

Request for Question Clarification by denco-ga on 12 Oct 2005 22:21 PDT
Howdy funkyfinger-ga,

Apologies if I am going to state some obvious things in this request.

Have you set up a test system wherein you have two networked computers
with one computer shadowing the other, so you can then observe through
diagnostics/monitoring if the shadowing is observable in some way on
the shadowed computer?

For instance, in the referenced article, it states: "Before monitoring
begins, the server warns the user that the session is about to be remotely
controlled, unless this warning is disabled."

Is it safe to assume you have checked to see if the warning function has
been disabled?  If so, perhaps one could determine if/when that "flag" has
been queried.

Looking Forward, denco-ga - Google Answers Researcher
Answer  
There is no answer at this time.

Comments  
Subject: Re: Hooking a window event
From: frde-ga on 13 Oct 2005 03:53 PDT
 
I suggest that you have a look at some of the monitoring utilities at:

  http://www.sysinternals.com

I don't know how the 'Shadow' works, but unless you are really working
on a remote machine ( Terminal Services ) then it is going to transmit
the data via TCP/IP or some network protocol ( I've only used TCP/IP
'shadowers' ).

In which case just moving your mouse is going to generate a heck of a
lot of network traffic.

If you combine a trip to sysinternals with Denco's suggestion, the
chances are that you'll spot some solid tell tales.
Subject: Re: Hooking a window event
From: funkyfinger-ga on 13 Oct 2005 17:34 PDT
 
I do not currently have a test system. I will set that up today or
tomorrow and get back to you.

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  


Google Home - Answers FAQ - Terms of Service - Privacy Policy