How will i exactly know the original PC that downloaded a file (i.e. porn images), if i saw it on another PC?

Question

my students and i were working on the computer room of our school. suddenly a student called my attention because they found pornographic pictures (naked wowen exposing you know what) in a folder on the desktop of his PC. Later, we found out that it was copied by a student from a shared folder on a computer that is a member of the network domain. When we confronted the person, he denied it. I already cut the pictures to prevent other students from seeing it. (since it was a school computer laboratory) I saved a copy for evidence.

Now, the accused person is saying that it is planted. We want to persecute him for his sin. He had placed us (teachers) in a sensitive and dangerous situation, as well as our school.



Since he is denying he downloaded the file, im asking if there is a way to trace and know the computer that downloaded a file based from the downloaded file.? please help us....we need your help....

Answer 1

As another poster said, there are ways to discover this information, even if the student has deleted the internet history and other evidence. Unfortunately, most school districts do not have anyone on staff trained to perform such investigations, nor do they have the software necessary.

Check with your district and your state or local department of education to see if thereis a trained computer forensic examiner available. If so, the can check the hard drive of the suspect computer to see if it was used to download the porn. If it is a Windows workstation, it should also be possible to determine who was logged in when the porn was downloaded.

You should unplug the suspect workstation and have a tech remove the hard drive so no evidence is overwritten.

I have recovered evidence in many cases like this, even recovering items deleted up to 4 years previously. But we are one of the few school districts to have a trained forensics examiner on staff.

Answer 2

There are way to do it and for the most part a school is not going to be afford it. Next as a teacher you should have touched it and contacted the school IT personnel because they could have look at it directly and tell you more about it and where it came from. All you can do is delete it and be watching it see if it happens again.

Answer 3

chek the history on that computer, but it wont give you a time an date, if u are trying to hide the fact that you are downloading porn on student comps, you need a new job in the physc ward, as a patient. the school can get their tec to search and he will find out as all traces are kept on the computers CPU this will show the date and time and user..!

Answer 4

you saved a copy for evidence? I have saved millions of pornographic images (also all for evidence, of course.) Put a better security system in place , observe the students more closely, and move on. Don't waste valuable time on such a benign issue.

Answer 5

try to check the system log in your network server. That log should record all activities in the pass few days.

There is also a system log in each pc. If you are lucky, you should be able to find the time slot for sharing that file and with whom it was sharing.

Finally, you should call police who would have tools to recover the whole story.

Answer 6

There is no way to know from the picture specifically...but have you checked his computer for more porn or checked his cookies folder for tracking cookies from porn sites or temp folder for other downloaded images.

He is probably trying to cover his tracks now that he is being accused though.

Answer 7

Move on... you should not persecute this person furthur if you have no proof.

There are thousands of people in the prison system for crimes they did not commit, if you are really concerned with sin....

Answer 8

god does not like that