CPN Remote Access Check 1.4.0
Computer Pro Network LLC | https://www.computerpronetwork.com/ | 817-658-0707
Rules reviewed: October 13, 2026

Windows 10/11, 64-bit. Requires Windows PowerShell 5.1 and .NET Framework 4.8.
This release is digitally signed by Computer Pro Network LLC. If Windows or your
organization blocks it, contact CPN for a technician assessment. Do not disable
security controls to run it.

Open the EXE and approve the Windows administrator prompt (User Account Control)
so all checks can run. Then consent to read-only checks and choose Run checks. If you select
"Show my results and program names in a popup on CPN's webpage", the helper opens
your default browser after checking. The page displays an on-page results popup.
You can close, reopen, or clear that popup. You can turn off the webpage option
and keep the result in the Windows app. If you cannot approve the administrator
prompt, the helper does not start. Business customers should check with their
IT team.

The helper shows matched program or entry names, their source, and their status.
Only "Listed as installed" rows come from installed-program records. Process,
service, startup, task, and Windows-setting rows are additional indicators.
Legitimate remote-support software can appear; its presence does not prove
malicious access. Unknown, hidden, renamed, removed, or other-user software may
be missed. The tool performs no full malware scan or forensic investigation.
It reads existing active Microsoft Defender findings when protection is active
and security intelligence was updated within 7 days. Other antivirus products
are not queried. Missing checks never count as a clean result. No result
guarantees freedom from compromise or proves whether anyone accessed data.

The browser popup receives only the status, check count, UTC time, version,
selected display names, categorical source/status labels, total entry count,
and whether the installed-program inventory completed. Raw evidence records,
command lines, and the full technical report are excluded. The handoff uses a
URL fragment processed in the customer's browser, not sent in the HTTP request
to the server. The page clears it before third-party scripts, skips its Google
Analytics and Clarity on result views, masks the popup from session recording,
and does not upload or store the result. Results and names clear after five
minutes or when the customer chooses Clear results. Refreshing loses the result.

The handoff includes up to 20 entries within a 1900-character URL limit. A partial
list is labeled with shown/total counts; the complete list remains in the helper.
Older helpers can still display a summary-only popup. The page shows a
helper-reported result, not an independent scan or authenticated evidence.

The helper itself makes no network requests, installs no agent, creates no
persistent access, removes nothing, and changes no system settings. Optional
technician reports are saved locally only after an explicit save action. Reports
can include technical software names, evidence, and paths containing user names.
They are not encrypted. Share only with a trusted technician if you choose.

If access appears unauthorized, stop sensitive work, disconnect the network if
access is active, preserve evidence, and contact your IT team or CPN from a
trusted device. Account security and other systems may also need review.
Businesses should involve legal counsel when protected information may have
been exposed. Availability, scope, and pricing are confirmed before work begins.

Source included: Program.cs and Checks.ps1. The checks script is embedded in the
EXE; editing the included source does not change the EXE. Diagnostic options:
--self-test (synthetic classification, privacy, and URL-bound tests)
--verify-checks (read-only actual checks; outputs only counts/status)
--verify-web-result (read-only actual checks; outputs a temporary browser handoff
that includes selected names; keep that diagnostic URL private)
--render-preview PATH (off-screen example UI rendering; no device checks)

Sources:
https://www.cisa.gov/resources-tools/resources/guide-securing-remote-access-software
https://www.ftc.gov/business-guidance/resources/data-breach-response-guide-business
