Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Question

Help understanding Kaseya files on my computer

Apr 8, 2017 3:04PM PDT

I was am trying to figure out some of the files on my computer under Kaseya and what they mean. I did have other post here but with a little more info I thought I would try again.

I am a contractor for a company and use my personal computer at home. I am not on their network and I don't have access to the intranet because I am not on the network.
They offered to add me to their tech support contract which I thought was nice and appreciated it.
I have the icon on my computer and believed that unless I request help they wouldn't access anything and I had privacy.
A situation came up a while ago where it appeared my computer was being accessed remotely-my laptop, not the other computer with the icon and that part of the tech support.
It prompted me to research and I did find vnc software, Kaseya and it shows on my processes that are running.
I was able to access the folders and see all kinds of logs, It appears my computer is being monitored, tracking everything however I am so untech savvy I can't be sure. I asked the company's manager and she said no, they only access my computer if I need help and call the tech company. I called them with another issue and then asked about this. I was told I needed to submit a ticket, which I did and copied the company manager. She very quickly got back to me stating they aren't on my computer, not accessing it unless I put a request in. I suggested that maybe it was a generic type of process, everyone on the system gets updates, status checks, etc. but she said no.

Accessing these files again, they are still being added as recently as today. I don't know what I am looking at though and before I get more demanding or accuse them I want to make sure I am right

I have recent files under agentmonitoring (I think that's the file name) and the logs say "dirmon" and next to it, start monitoring/stop monitoring, among other things.

Another file I saw where it said attempting to connect, socket 556 I believe but than my ip address, which isn't my real one. Not sure how that happened though. I looked up my network connection and the is the ip address.

I don't want to see dumb, dense because it says monitoring so I would assume that's it, however it's very possible it's innocent and the manager was just wrong about logging on for updates or some benign purpose.
on the other hand they have no legal right to do this and I believe a responsibility to let me know if they were and be honest when I asked them.

I feel like the saying, if it looks like a something, acts like it, it probably is however I am giving every bit of the benefit of the doubt I can
please help.. it's been going on for a while and I am in the process of ending or renewing a contract. I was being more than fair in the contract and allowing them a lot more than I legally have to but if this is monitoring and they have this information stored, I am in a totally different position and mindset.
thanks for any help

Discussion is locked

- Collapse -
Answer
Sorry but no.
Apr 8, 2017 3:20PM PDT

Why no is a little deep but here goes. To understand the files we need the monitoring software to pick through this. https://en.wikipedia.org/wiki/Kaseya_Network_Monitor gives us a little dated info but let's move to the next part.

If you work for someone, let them provide the machine. Otherwise....

- Collapse -
I was thinking of you since you answsered the last post
Apr 8, 2017 6:44PM PDT

You replied to the original post but I had more info so started a new one, using the name, Kaseya.

I cant imagine some the codes and files and even saying monitoring on/off, etc doesn't indicate something. Since the company said they aren't accessing my computer without a request do you think it's reasonable to at least say they are in there doing what ever it is?
As I said I am a contractor and don't work "for" the company and use my own computer as well as not working in the office
I was hoping that someone who works with the product or there would have a little insight.

Any files on my computer indicating log on/times, connecting to an ip address that's mine must at least confirm they are in my system correct?

- Collapse -
The only folk that can provide insight to the Kaseya files
Apr 9, 2017 8:48AM PDT

Would be Kaseya and those that run that app/system.

I see you understand this so we can either discuss possible incursions, how to mitigate or wait for some Kaseya user/admin to show up.

I am familiar with a lot or remote control, monitoring systems but mostly at high levels. To dig in, I have to have the app and maybe the passwords to get in.

- Collapse -
so tired of reseaching this lkol
Apr 9, 2017 2:24PM PDT

Interestingly I emailed the tech company and copied the manager and emailed a separate email to two managers (at my company) questioning if my laptop is also affect, sharing the wifi or if I set up a network at home,.
Didn't hear back but my laptop is working better, faster and my desk top now had the Kaseya logo/icon on the start menu, which wasn't there and in addition my start menu had other things today that were not there before.

I will see what the tech company says and see an attorney

- Collapse -
Going legal?
Apr 9, 2017 2:36PM PDT

You agreed to work for them so you would agree to some terms about installing their software. Frankly after seeing a dozen of these sort of posts I don't think you have a leg to stand on.

To see a lawyer here is hundreds of bucks and they are not in your corner but in your pockets.
Hope you understand this.

- Collapse -
thanks
Apr 10, 2017 7:38AM PDT

I don't think you understand because you keep mentioning I work for them. I am a contractor, receive no salary/benefits or anything else an employee receives. I am paid for specific work I do if I do it. I don't have terms for this tech support. I thought they were being nice, letting have it and only wanted to know if there was more to it since my computer was remote accessed one night, or it appeared that way.

It is not legal to install monitoring software and monitor someone's personal computer with out letting them know. Company equipment is different. I use their email and I know that is monitored or could be as well as any other program of theirs I use

- Collapse -
Here, when money changes hands
Apr 10, 2017 9:44AM PDT

There is a contract. Now that contract may not be known to you now but you will discover it as you enter your discovery phase of the legal work. Also, be ready to surrender the infected laptop to the attorney so they have the evidence. You wiping it out would remove your evidence.

Just a thing I found folk to do and remove their legal chances of a win.

Since this is going down the legal path do not ask questions on boards. Ask your lawyer.

- Collapse -
I deleted it
Apr 13, 2017 6:54AM PDT

Since we didn't sign a new contract and there are issues with the first one he terminated me and my access to any of his company files, phone, etc.. but left this one and I was tired of seeing their logs so I removed it.

I have copies of the files, screen shots and hoping I can just walk away and get what's fair and not deal with a legal battle

- Collapse -
No signature.
Apr 13, 2017 8:04AM PDT

Does not mean no contract. Your lawyer will explain this.

- Collapse -
Kaseya
Apr 10, 2017 1:16AM PDT

If you think there is some snooping going on ask to be taken off this contract.

Then uninstall/delete everything that has to do with the product.

Test to see if there has been any change.

- Collapse -
it isn't visiably affect my computer
Apr 10, 2017 7:41AM PDT

Except for the 1st time I was remote accessed I don't see any type of effect or change in my computer. I really wanted to know if this was being monitored as part of the support and if yes I may or may not have had a problem with it but wanted to know

- Collapse -
I did remove it
Apr 13, 2017 6:56AM PDT

It's funny that the tech company could answer questions/help on the phone but when I mentioned this they said put in writing. The company would reply via email but when discussing this in any detail, called.

can't tell if there are any residual effects on my computer however they somehow removed my laptop from my network because it's no longer there and I wasn't able to get my laptop to print on the printer linked to the p.c.

- Collapse -
after reading this and the other thread
Apr 10, 2017 1:39AM PDT

then going to their website and reading it, there is a good chance they are just running utilities in the background that you think is monitoring. Their website says they are proactive so to me it means they are running utilities to make sure your computer is not having any type of issues that can affect you and the network you are connected to.

It is always better to be proactive and not reactive. For example, proactive is the same as going to the doctor for a physical. reactive means you don't go to the doctor until there is a problem. They have a list of major corporations that uses their services. If they are spying, I believe one of those corporations IT departments would have noticed by now.

Depending on your laptop resources, those proactive scans could affect performance. I personally think you are just being paranoid for absolutely no reason. If you are so worry and to keep from stressing out for nothing, as previously stated, just remove the software if it is not required per your contract.

- Collapse -
i really just wanted to know
Apr 10, 2017 8:29AM PDT

That is actually what I thought, more like system checks, making sure there were no problems on every computer and the logs were doing just that, a system running the automated scans, etc.
I don't think the company or Kaseya doing anything wrong

I asked the company person, where I contract and she said no, there is nothing they access or check or update in my system unless I put a ticket in for a problem. My lack of knowledge and understanding is the problem so I went to the tech company to ask them and they said I needed to put a ticket in.

I very well could be innocent but I just wanted to know what the files meant or understand the service better

- Collapse -
I thought the same
Apr 13, 2017 6:59AM PDT

I thought it was probably scans or something to keep the system updated, check for viruses and was probably innocent. I was a little annoyed I wasn't told but figured it was not any malicious spying. I asked and was told however they don't do that, no accessing for anything, including preventative type scans, monitoring files for corruption or anything else.