Lansweeper logo
Home Download Features Demo Buy now Help Support forum
 
    Most requested support articles:
  Lansweeper troubleshooting guide.
  The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)
  WMI Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
  How to configure the windows firewall using group policies.
  Support:  
 support@lansweeper.com  
Skype: Lansweeper  
  Mo-Fri 9h-17h CET  
Welcome Guest Search | Active Topics | Log In | Register

Untag as favorite
Internet history of an user (IE and Firefox)
BullGates
#1 Posted : Wednesday, September 02, 2009 2:59:38 PM

Rank: Premium user

Groups: Member, Premium Users
Posts: 205
Location: PT
Well, in the last weeks I've faced a lot of new vírus that were not detected by an antivirus, so I had to figure out how they have entered in the computer. I've installed this neat action to check logged in user internet history, and it also works for files accessed:
1. get this great nirsoft utility http://www.nirsoft.net/utils/iehv.html
2. add this action:
Code:
\\server\share$\Lansweeper\iehv.exe -folder "\\{computer}\c$\Documents and Settings\{username}\Local Settings\History"


That's it, you get the history and you can easilly know where that vírus come from, many of them are from google searches and they only install when clicking on the search result, if you click directly on the link it does nothing. I will not post examples since I could be helping to spread those vírus - they offer themselfs to the user as being an antivirus sofware,
mrdaytrade
#2 Posted : Wednesday, September 02, 2009 4:14:21 PM


Rank: Premium user

Groups: Premium Users
Posts: 89
Location: Albany, NY
This is a great custom action... thank you!
cvau89
#3 Posted : Friday, September 11, 2009 8:26:08 PM

Rank: Premium user

Groups: Premium Users
Posts: 6
Location: Kissimmee FL
Hey - Great custom action - does anyone understand how to do anything similar with the chrome browser?
Perkins
#4 Posted : Friday, October 09, 2009 11:07:00 PM

Rank: Premium user

Groups: Premium Users
Posts: 19
Location: US
Great Tool....thanks!
afionda
#5 Posted : Tuesday, November 03, 2009 10:52:32 PM

Rank: Premium user

Groups: Premium Users
Posts: 3
Location: San Diego
VERY NICE BULL !!!!
BullGates
#6 Posted : Tuesday, July 13, 2010 5:28:50 PM

Rank: Premium user

Groups: Member, Premium Users
Posts: 205
Location: PT
Although this is not so simple or usefull for many of you, I've made a simple interface so I can use Internet history of a Firefox user, using the tool from Nirsoft: http://www.nirsoft.net/u...zilla_history_view.html

Using AutoIt, I've made this simple script to get the firefox profile directory:
Code:
Global $FFprofilesDir
$FFprofilesDir = $CmdLine[1]
$FFprofilesIni = $FFprofilesDir & "\profiles.ini"
$ProfilePath=IniRead($FFprofilesIni,"Profile0","Path","")
$replace = StringReplace($ProfilePath, "/", "\")
Run("MozillaHistoryView.exe -file " & """" & $FFprofilesDir & "\" & $replace & "\places.sqlite" & """")


Note that I read the file "places.sqlite", but it can be history.dat depending on your firefox version I guess.

You will need to put this dll's on the same folder of the actions if you don't have firefox installed on the running computer:
http://www.sqlite.org/sqlitedll-3_6_23_1.zip
You should also put MozillaHistoryView.exe on the actions folder, as well as the compiled autoit script, I've named it FirefoxVHHelper.exe

The action should be something like:
Code:
{actionpath}FirefoxVHHelper.exe "\\{computer}\c$\Documents and Settings\{username}\Application Data\Mozilla\Firefox"


Thats it.

Edit: For those who need the compiled version of the script, I've attached now that file. It only reads "places.sqlite" file; the code is posted on the top of this message.
File Attachment(s):
FirefoxVHHelper.zip (280kb) downloaded 29 time(s).
isit
#7 Posted : Tuesday, March 27, 2012 6:50:54 PM
Rank: Freeware user

Groups: Member
Posts: 7
I am trying to use this action but, I am having trouble connecting to the user's computer. I have installed the utility (on the lansweeper server under actions) but, when I run the custom action, it only runs is on the server instead of the users pc. In your code, you have "-folder" when I remove this, it gives the server history, when I add it, it gives nothing. So what exactly does folder represent? What do we replace it with if anything?
isit
#8 Posted : Wednesday, March 28, 2012 6:01:45 PM
Rank: Freeware user

Groups: Member
Posts: 7
I got it working!
Jono
#9 Posted : Thursday, April 12, 2012 5:23:49 PM

Rank: Premium user

Groups: Member, Premium Users
Posts: 41
Location: Metro Detroit
Is there an easy way to edit these scripts to make them work with Windows XP clients and Windows 7 clients without having to distinguish between them first?

Currently, both of these will only work on Windows XP ("Documents and Settings" folder doesn't exist on W7).

Thanks,
Jono
TNTreasury
#10 Posted : Monday, April 30, 2012 10:15:47 PM

Rank: Premium user

Groups: Member, Premium Users
Posts: 18
Location: Nashville
i downloaded the files and save to my actions folder but when i select the action from the Lansweeper web page, I get Error: file not found.

.any thoughts?


the action i have is
iehv.exe -folder "\\{computer}\c$\Documents and Settings\{username}\Local Settings\History"
Lansweeper
#11 Posted : Tuesday, May 01, 2012 8:25:17 AM

Rank: Administration

Groups: Administration, Premium Users
Posts: 10,369
add {actionpath} variable to your action
Users browsing this topic
Guest
Untag as favorite
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.

Contact: E-mail Lansweeper - Skype : Lansweeper
Copyright 2004 - 2011 © Hemoco bvba