Showing results for 
Search instead for 
Did you mean: 
New Contributor

logmein rescue applet forensic logging?



i am examining a windows xp computer that ran logmein rescue applet several times,

but doesn't seem to have installed the full logmein software.


i can see an empty folder in "c:\documents and settings\administrator\local settings\logmein rescue applet",

and if i scan the drive sectors i can find some references to and the IP address of logmein servers.


my questions are:


1. doesn't running the "logmein rescue applet" create a log file somewhere?

2. is there a way to know what the IP address of the controlling computer was?


i am trying to find information like how often it was run, and who was controlling the computer.

if anyone can help, i'd appreciate it.