cancel
Showing results for 
Search instead for 
Did you mean: 
informatikallc
New Contributor

logmein rescue applet forensic logging?

hi,

 

i am examining a windows xp computer that ran logmein rescue applet several times,

but doesn't seem to have installed the full logmein software.

 

i can see an empty folder in "c:\documents and settings\administrator\local settings\logmein rescue applet",

and if i scan the drive sectors i can find some references to secure.logmeinrescue-enterprise.com and the IP address of logmein servers.

 

my questions are:

 

1. doesn't running the "logmein rescue applet" create a log file somewhere?

2. is there a way to know what the IP address of the controlling computer was?

 

i am trying to find information like how often it was run, and who was controlling the computer.

if anyone can help, i'd appreciate it.

thanks.