Please Verify If I've Done All I can to Be Sure my laptop is Secure

[MTCSurvivor]

I am concerned about whether there is any other device connected to my network. So I googled and followed directions and did the run CMD, netstat –ano and looked for “established” local connections and associated PIDs.

Whether on or off of the internet, these are the only three that show up.
mDNSResponder.exe PID 2016 User - SYSTEM
iTunesHelper.exe*32 PID 3856 User –SASB
Apple mobiledeviceservice.exe*32 PID 1932 User – System
There are actually two of these that show up.
127.0.0.1.27015 And 127.0.0.1.49156 but only one shows up when I check the PID in task manager.

I don’t use iTunes, but likely will sometime in the near future. So I don’t want to get rid of these as they’re associated with iTunes and other programs. BUT… then I saw that if I did want to delete them, and I use Windows 7, I should go to x86 program files instead as stated below.

“If you are using Vista or Windows 7 x64 edition, you’ll need to head into the Program Files (x86) folder instead. Now that you are there, type in the following command to see the options:”

Then I also read that if connections were in the system 32 folder, then there may be an issue of concern. What I’m needing to know is whether I should be concerned that these “established” connections are showing *32 or can I be relatively sure that there is nothing monitoring my laptop?

Fyi: I use WebrootSecureAnywhere and it hasn't sent me any notifications recently. However, some of the stealth programs can run without being detected. I am positive that there was one of these 'hidden' monitoring programs previously on my laptop. Then I bought a new harddrive and installed that along with a new OS - this Windows 7 Ultimate. I'm hoping that solved the problem but would like to be sure. I also have my router set to only allow specific machines via their MAC address.
Is there anything else I can do to be sure this laptop isn't being monitored with one of those stealth programs that can be purchased?
Thank You.

 

[Golden]

Is there anything else I can do to be sure this laptop isn't being monitored with one of those stealth programs that can be purchased?
Thank You.

Ensure you use a user logon and password for logging onto the laptop. You didn't mention firewall or anti-malware software.......do you have a plan for that?

Ensure Remote Connections are turned OFF..........mimic the settings shown here:

 

[MTCSurvivor]

Thank You

Yes I also have a password to logon to the laptop.
However, if it was being monitored, then that too is know through keystroke and screenshots.
I assume any of these stealth programs cannot get any information, however, if I am not connected to the internet, so I usually try to only change the password and work on protected files when offline.

 

[MTCSurvivor]

This Windows 7 Ultimate also comes with Bitlocker but it's too technical for my 'mid-rage' computer skills.
I know that this laptop did not come with some program needed to automatically run the Bitlocker, so the instructions had
points about 'permissions', etc. which I didn't understand.
I'd like to use the Bitlocker if there's an uncomplicated way to do so.
Thanks

 

[x BlueRobot]

http://www.sevenforums.com/tutorial...cryption-windows-7-drive-turn-off-no-tpm.html

 

[MTCSurvivor]

Thank You

I'll check that bitlocker info. Thank You

 

[Britton30]

To be positively secure, never allow the machine to connect to the Internet at any time.

 

[MTCSurvivor]

To: Britton30:
Thanks. I suppose then the only choice is either to completely isolate myself in this day and age of electronic communication, or continue wondering whether my "ex" is still able to view everything whilst still in the middle of a 3+yr ongoing divorce.

To all other responders:
I'm grateful for all the previous responses and if anyone else happens to know of any possible methods to identify whether there is one of those stealth programs on my laptop I would appreciate the response. I'm referring specifically to those programs that can be purchased and loaded onto my laptop just by my opening a seemingly innocent email appearing to come from one of my contacts. These programs claim to be able to take screenshots, record keystrokes, read emails, etc all running unnoticed in the background and do not showing up in the control panel/programs, task manager or registry.

If anyone has any other methods by which to ID this type program, please let me know. I cannot afford to send the hard drive to a forensics lab as they're asking $500 or more just to get started by making a copy of the drive, and then they charge by the hour to analyze the drive and may not even find the program.

If there is one of those type programs installed now, the bitlocker or any other security program is essentially useless as all the passwords, etc can be readily seen. Thus, my needing to ID and get rid of such a program before installing any further security.

Thank You

I cannot explain in this post how I know, but be assured that I am certain that there was, at least at one time and for at least a year, perhaps longer, definitely one of these type programs installed on my laptop and thereby allowed my "ex" to read and print every bit of communication between me and my attorney, family, etc.

 

[x BlueRobot]

Almost all rootkits are picked up now, especially one's used to target home computers.

TDSS is a good program to use:

• Anti-rootkit utility TDSSKiller

 

[MTCSurvivor]

Thank You Blue Robot

I think I've used that in the past, but I'll check it out again.
Thank You for the advice on this.

 

[x BlueRobot]

Welcome, it will produce a log file in your root directory (C:\) or the volume you installed Windows on.

 

[Britton30]

I haven't read all this thread.
For someone to have had complete access to your PC I think it would require some physical or wireless connection. If on wireless change the password and don't broadcast your SSID. Use WPA encryption, not WPS connection any time. Have you ISP come to check your incoming cable for a tap on the line.

 

[MTCSurvivor]

Thank You Blue Robot!
Britton30: Yes I do change the password and don't broadcast my SSID, and I use WPA-2 encryption. I've also had ISP check for cable and phone taps.
In response to your comment that:
"For someone to have had complete access to your PC I think it would require some physical or wireless connection."
These type programs can be loaded onto my laptop either by accessing my pc, going to the company website and entering a direct code they give to you (this is how such a program was put on my machine back in 2009) or by sending the code through attachment, embedded code or whatever in an email (If there is such a program on here now, it may have been done this way). After the program is on my computer, the other party can access my pc from any device they have just by going to the company website and logging in with their user information. No direct connection to my machine is needed, it only requires that the program be downloaded to my machine by either of the above means.
Thanks for your advice!

 

[Britton30]

Thank You Blue Robot!
Britton30: Yes I do change the password and don't broadcast my SSID, and I use WPA-2 encryption. I've also had ISP check for cable and phone taps.
In response to your comment that:
"For someone to have had complete access to your PC I think it would require some physical or wireless connection."
These type programs can be loaded onto my laptop either by accessing my pc, going to the company website and entering a direct code they give to you (this is how such a program was put on my machine back in 2009) or by sending the code through attachment, embedded code or whatever in an email (If there is such a program on here now, it may have been done this way). After the program is on my computer, the other party can access my pc from any device they have just by going to the company website and logging in with their user information. No direct connection to my machine is needed, it only requires that the program be downloaded to my machine by either of the above means.
Thanks for your advice!

Oops, I don't understand most of that. I would get a new drive, reinstall Windows and hammer the old drive to death.

 

[MTCSurvivor]

Britton 30:
I didn't understand most of it either until I was caught up in it and had no other choice but to research these programs.
I am, in fact, on my 3rd hard drive and just wanting to be sure this one is secure.
Thanks for your input.