Question

Laptop stolen; Logmein installed; I see it come online occasionally -- what can I do to track it down??

Asked by: Ajw43022

My laptop was stolen out of my apartment a few weeks ago.  It had Logmein, which is remote access software, installed.  I've been monitoring my Logmein account regularly, and have seen the laptop come online 3 times now.  I feel like I should be able to take advantage of this and track down the stolen laptop, but I just can't seem to figure out what to do.

1. Logmein provides the IP address of the computers that are logged on.  But I was recently informed that "the LogMeIn IP address is only routable on the LogMeIn vpn (established by the LMI clients) not in public IP space."  Meaning, I guess, that this would not be useful in establishing his actual location?

2. I could use LogMeIn to Remote Control the computer and either watch him and hope he checks his email so I have an email address; I could additionally install any number of helpful programs: computrace lojack, locatepc, etc.  But it seems that whenever the computer is online, he is actively using it, and so would notice if I started remote controlling things.  

I CAN use the File Manager and manipulate files on the computer without him knowing, though, so that would be my preferred route.    

a. I know he uses Firefox, so I copied over his Firefox profile files today (C:\Users\(yourname)\Appdata\Roaming\Mozilla\Firefox\Profiles), hoping I could grab his PWs.  But the files were blank -- I guess he doesn't have Firefox set up to store passwords.  

b. Maybe I could access other potentially idenftifying files within Documents and Settings, but I am unable to access this directory (I get a message that I don't have the rights whenever I do).  
**Is there any way around this? **

**Are there other potentailly identifying files on the computer that I can copy over the look through?**
**Could I insert some code into a file that runs on start-up (like boot.ini?) that would send his IP back to me, or maybe send other identifying information back to me.  Maybe even keylogging information, but that's a stretch I realize...

I would really really really appreciate any help anyone could provide.  

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2009-08-25 at 01:24:33ID24679040
Tags

stolen laptop

,

logmein

,

ip address

Topics

Remote Access Software

,

Digital Forensics

,

Virtual Private Networking (VPN)

Participating Experts
9
Points
250
Comments
15

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. LogMeIn vs.  PPTP Tunnel
    Is LogMeIn as secure as a regular Windows PPTP VPN tunnel? W
  2. Stretch the ThrashBox
    Trying to fit the login-box element inside the round corner box, but having trouble understanding how to have the side-box stretch according to the length of the login-box. The only way to get it to stretch enough to fit the login-box, is if I add the following in the boxbod...
  3. Logmein
    Hi I am evaluating Logmein as a remote access solution for my corporate environment at the moment. A network consultant (trying to sell me another product) said that I should stay well away from it as its unsecured "Man in the middle". Security is very important t...
  4. Mozilla Firefox deployment
    I need to deploy Mozilla firefox 3.5 in 500 XP Machines. let me know if u hav scripts or batch file for the same.

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: gsnshankarPosted on 2009-08-25 at 02:34:50ID: 25175769

These two links are similar to your case..

http://it.toolbox.com/blogs/securitymonkey/banana-cupboard-story-stolen-pc-recovered-by-logmeincom-26740

http://community.logmein.com/logmein/board/message?board.id=12&message.id=4924

Anyway this would be a knowledge base for me too. Let me wait for some experts to answer.. Am monitoring the question.

I pray God you should track and get back your laptop...

 

by: gsnshankarPosted on 2009-08-25 at 02:41:15ID: 25175804

 

by: TysVDBPosted on 2009-08-25 at 02:49:30ID: 25175843

If I were you I'd contact the police and explain your situation to them. If they are not willing to help you straight away you can try to find out more information about the thief on your own. But I believe that LogMeIn would give information such as the wan ip of the client to the Police if they requested it. The police could then request the ISP to give out more details of the account used etc.

If you continue trying to track him down yourself chances are big that he will notice it and shut down your LogMeIn client. I'll see if I can find any other ways to find out more about your thief :-)

 

by: pankusareenPosted on 2009-08-25 at 03:46:02ID: 25176107

As u told that the person is using firefox and u want to know his ip address to track him.
I think it is possible but it need a little trick as if u able to set the home page of firefox to
http://www.whatismyip.com/

So how to set ur firefox home page to  http://www.whatismyip.com/ so when he open firefox the default page that open is http://www.whatismyip.com/ and u will able to see its wan ip.

All u need to just replace the file prefs.js in firefox profile that is in my case (XP)
C:\Documents and Settings\abc\Application Data\Mozilla\Firefox\Profiles\udd3vpml.default

copy this file from ur stolen laptop to ur pc (prefs.js) and open it with wordpad and copy this line at the end and save it and again copy this modified file back to ur stolen pc
user_pref("browser.startup.homepage", "http://www.whatismyip.com/");
so when the person open the firefox the default home will open that is
http://www.whatismyip.com/ na du will able to see his wan ip

Hope this helpfull

 

by: Ajw43022Posted on 2009-08-25 at 04:23:21ID: 25176305

gsnshanker -- thanks for the links

tsvVDB -- Yes, I already filed a police report and have left a message with the detective on the case at each new login, with each new IP address.  He's never called back and I've never actually been able to speak with him directly.  I don't think he cares!  Which is fairly understandable, with this being in DC and all.  But, as a result, I decided I needed to take this more into my own hands and find out as much as I could myself.

Pankusareen -- That's a neat trick.  Though wouldn't I have to be actively viewing the stolen laptop when he starts up Firefox to see the IP?  That might be difficult -- when I "remote control" a computer like this, a notification pops up on the computer to the effect of "your computer is being controlled"!  This would tip him off, and so I'd like to avoid having to resort to this, of course.  I'd like to just do everything within the file manager, if possible, and just manipulate files "behind the scenes", so to speak.  

 

by: pankusareenPosted on 2009-08-25 at 05:04:03ID: 25176559

As u mentioned
I CAN use the File Manager and manipulate files on the computer without him knowing, though, so that would be my preferred route.    

a. I know he uses Firefox, so I copied over his Firefox profile files today (C:\Users\(yourname)\Appdata\Roaming\Mozilla\Firefox\Profiles), hoping I could grab his PWs.  But the files were blank -- I guess he doesn't have Firefox set up to store passwords.  


The trick i mentioned is almost same. u need to just manipulate a single file through file manager.
But if u have a camera that can detect motion u can set it towards it and it will record every moment on the stolen pc.

Let hope that u get ur laptop back.

Note:But i am also happy that today i learn some think new.

 

by: andrewallenPosted on 2009-08-26 at 16:36:28ID: 25193356

You actually have a lot of options - just out of interest, is it a mac, or a laptop with a built in camera? Did you have antivirus software / firewall / anti malware / other security software installed?

A couple of things you want to configure first, to ensure you don't raise attention.

Connect to your laptop via logmein, so you get the home screen, but don't go as far as the remote control option.

Go to preferences, the remote control settings, and ensure all visible and audible notifications are unchecked, and that all options to ask the users permissions are also unchecked, except 'Do not require authorisation if user is not present' which should be checked.

Also ensure, 'automatiically disable wallpaper' is unchecked, and all security options are unchecked.

Click 'Apply'.

Next, you already have the IP address of the laptop at its current location - go back to the LogMeIn home screen (https://secure.logmein.com/computers.asp), and next to your laptop, click 'Edit'.

The IP address will be listed.

Now from here you have lots of choices... the simplest maybe to purchase a LogMeIn IT Reach license (which you can assign on the subscription tab, from the edit screen above) - this will in effect upgrade the functionality of what you can do on the remote machine without having to remote control the console...

To get an idea, watch this, https://secure.logmein.com/welcome/quickclips/ITReach/, and jump to 'unattended access'.

Let me know what you think... with full control on the system you can capture anything on the system, and anything entered into the system... if the laptop is using WiFi, it may be possible to locate the device based on WiFi access points in the physical location :)

 

by: coredatarecoveryPosted on 2009-08-26 at 20:16:02ID: 25194298

you can change the options on the logmein to blank the screen before you remote into the laptop, and then remote in and install a client like lojack.

alternatively, you can upgrade your account from free to pro, and then push the lojack software (after you blank the screen) to the laptop in question.

While the screen is blank you should be able to run some forensics and get their email address, and that is more likely to yield a name.

 

by: PhateonPosted on 2009-09-01 at 01:43:47ID: 25229537

Okay. I need some more precise information about your laptop - make, OS, hardware. I surely can help you.

 

by: Ajw43022Posted on 2009-09-18 at 13:44:10ID: 25369831

I'm very sorry it took me so long to respond.

@AndrewWallen
I like your advice.  You said "if the laptop is using WiFi, it may be possible to locate the device based on WiFi access points in the physical location".  How would I do this??

@Phateon
Acer 3200
Vista
Intel(R) Pentium(R) Dual  CPU  T3200  @ 2.00GHz

Any other info you need?  Thanks a lot for your help.

 

by: pankusareenPosted on 2009-09-18 at 19:41:58ID: 25371308

As WiFi receiver in laptop have a limited range. And if the person changes the mac address of ur wifi receiver it it became impossible trace.

 

 

by: pand0ra_usaPosted on 2009-09-25 at 16:54:25ID: 25428180

Ok, you have access to the file system. Create a file IPaddress.bat or something. Upload the wget.exe (you will have to go download this from a site) file to your laptop (same directory as the .bat file). Paste the following code in it. This will give you the public IP address of the laptop.

If you want a remote connection to a command prompt let me know. That can be done using Netcat. You can also think about installing a keystroke logger and that will capture all of his keystrokes (including username and passwords to everything).


wget -qO  http://www.whatismyip.org >> ipaddress.txt

                                              
1:

Select allOpen in new window

 

by: Ajw43022Posted on 2009-09-25 at 17:06:55ID: 25428220

Thanks pand0ra_usa.  That's very useful.

Can you tell me more about establishing a remote connection to the command prompt using NetCat?

Also, do you recommend any Keyloggers?  Are there any that wouldn't be detected by AVG?  Or is there a way I could uninstall AVG first through the command line?

thanks for your help.

 

by: NelsonTorresPosted on 2009-10-22 at 22:04:46ID: 25641471

if you get poisonivy from poisonivy-rat.com and installthe viewer on your computer then transfer and run the exe from the stolen laptop youll be able to activate the webcam, record sound, and many other options

 

by: DaveHaertelPosted on 2011-08-18 at 05:02:59ID: 36389099

I had this same thing happen to me.  I did indeed get my laptop back.  The steps I took, was to file the police report and stay in touch with the detective doing the investigation.  I sent him a daily report for a week with all the external ip addresses, some may require more just to make sure the thief isn't using it at coffee shops or something.  The officer then had enough to get the warrant and went in and recovered the laptop.

One thing of note, sometimes officers in burglary are less than willing to help as was the case with mine, they are MUCH more willing to cooperate after a call to your local political representative who is usually looking for a new constituent that is loyal to them. One call in to my rep. And I got much more cooperation from the detective.  Bear in mind also that could result in you being pulled over a bit more depending on the officers demeanor after being called out on the carpet, bu mine was cool with it, he was just overwhelmed with cases and wasn't really trying to avoid mine it was just buried.

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...