The 1040 series countermeasure kits contain all the tools necessary to physically disassemble a room (sweep area), check it for surreptitious listening devices and put it back together. Included in the kit are radio frequency (RF) detectors for locating transmitters and carrier-current devices, audio
frequency (AF) amplifiers for tracing and locating wired devices, an optical probe for infrared (IR) devices and an assortment of test equipment, cables and accessories and tools.
There are several versions of the 1040 Kit. The 1040 (followed by no letter) kit contains two (2) 1059 general purpose audio amplifiers, two (2) special high impedance 1059H headsets, a 2050CA RF transmitter
locator, a 2030A carrier-current detector, a 2040B RF and optical test oscillator, a 1059IR optical probe, a 1040-4
Hot Pack for testing and hi-potting AC and telephone lines, a specially modified AM/FM radio, a general purpose test meter, a variety of test leads and adapters, two (2) adjustable focus flashlights and assorted mechanical and electrical hand tools. The 1040A kit contains one (1) 1059, one (1) 1059H headset and one (1) Lightstick instead of two (2) each. The 1040S has the same contents as the 1040A but a 2045B RF detector is substituted for the 2050CA.
Instruction sheets on each of the major components are found by clicking on the highlighted part number.
Designed with multiple input/output impedances the 1059 provides a good match for most microphones, lines and recorders. It is specifically designed to drive the special 2,000 ohm 1059H headset supplied. A tone generator is
included for testing amplifier performance and unknown line pairs. A two position high pass-low pass filter switch helps eliminate unwanted signals and a switchable excitation voltage is available
for supplying power to external accessories. The 1059H headset can be used with the ear hook and adjusted for either ear. When used with the gray stethoscope tube, the tube is worn under the chin with the sound output holes facing slightly forward (30 degrees). The stethoscope tube is the preferred method.
The 2050CA RF locator is a sensitive hand-held relative field strength indicator with visual, tonal and aural readouts. It is not designed to replace a sensitive
countermeasure receiver. A six (6) position BAND switch selects either a broadband detector or one of five tunable frequency bands. An RF signal intercepted by the antenna is amplified to drive the meter and/or HEADPHONES jack. A separate circuit produces a tone with pitch proportional to signal strength. With the AUDIO/TONE switch on TONE the unit functions much like the well known "Geiger" counter. With the switch on AUDIO the audible component of the transmission can, under many conditions, be monitored through the headset.
The 2030A RF/Carrier-Current detector is used in conjunction with the1059 and 1059H. Plugging it into J3 and connecting it to either an AC or telephone line will determine the presence of signals on these lines. The 2040B provides operational field checks of the 2030A/1059 combination, the 2050CA and 1059IR
probe. The unit operates on an internal 9 volt battery supply and not via the AC power cord.
The 1040-4 Hot-Pack is included as an aid in testing for devices which do not conduct current until after an initial "breakdown" voltage is applied. The unit contains a high voltage inverter powered by 6 Alkaline "AA" batteries. Other devices contained in the kit, that are later described on individual instruction sheets, are the AUT9 tone generator, multimeter, video countermeasure device (VCD) and specially modified AM/FM radio.
The most important aspect of ANY countermeasure survey (sweep) is knowing what to look for and where to look for it. There is no way this manual or countermeasure kit can provide that primary function. The purpose of the 1040 kit is to assist the technician accomplish an effective sweep.
PLANNING: Two approaches to the sweep may be taken; one alerting (where the opposition knows the sweep is in progress), the other non-alerting (where the opposition is kept from knowing the sweep is in progress). The following procedures should be adjusted as required for each sweep.
Make sure all equipment is operable and in place in the 1040 Kit. On entering the suspect area , the first step is to draw a simple floor plan. This information is of invaluable assistance when later describing the suspect area to others.
PHYSICAL SEARCH: The next step is to perform as thorough a physical search as possible. Remove all cover plates from power sockets, light switches and telephone jacks. Remove the mounting screws of the sockets and switches and pull them out as far as the wires permit.
USE EXTREME CAUTION WHEN WORKING WITH HOT AC LINES!
Use the flashlight to visually inspect the inside of every socket and switch housing. Use the handle end of the insulated fuse puller to push the wires to assure they are rigid. Flexible and/or soft wire may indicate a shielded or coaxial cable leading to a microphone or circuit. If such a cable is located, mark its location for future evaluation. Microphones hidden within the housing need no further explanation. There are, however, microphones connected to small diameter tubing (tube microphones) that can be mounted outside the housing and the tube fed inside. Look carefully for any small tube extending into the housing.
After all the sockets and switches have been visually inspected, test them for normal voltages. Use the multimeter which has been set on the appropriate range, normally 110 volts AC. Again, EXERCISE CAUTION. Measure the voltage across the sockets; it should be 110 volts. If a socket shows no voltage make sure it is not the result of a switch not being turned on. The following test should be performed if there is no logical reason why voltage is not present. Plug the 1059H headset into J6 and the mini-plug to clip cable into J1 if the 1059. With one hand inserted in a rear pocket, use the other hand to connect the BLACK clip (shield) to the side of the socket with the WHITE wire (neutral). Connect the RED clip to the other side. Advance the VOLUME control one quarter of a turn clockwise. Slowly turn the J1 GAIN control clockwise while listening for room sounds. If a loud hum is heard, it is probably AC so CAREFULLY, USING ONE HAND ONLY, disconnect the clips. If, when J1 GAIN reaches full range, room noise is recovered, it is safe to assume that a microphone is concealed in the socket. Replace the sockets, switches and covers at this time.
Remove the clip cable from J1 and insert the 2030A into J3 of the 1059. Adjust the 2030A/ 1059 for normal operation. Insert the 2030A into each and every outlet in the search area and proceed as outlined in the instructions. Remember, there are two sockets per outlet; check both. Leave the telephone lines for later.
Use the 1059 to locate and trace any speaker wires to their destination and source. This includes the speaker in the speaker-phone portion of the telephone.
Where possible, inspect all air ducts by removing the grill plates. Lift any drop ceiling tiles and inspect. The flashlight and hand held mirror are useful at this point. A step ladder comes in handy too. Use the pry bar to slightly lift floor and corner molding to check for hidden wires. Visually inspect the underside of drawers, desks, chairs, tables or any other piece of movable furniture for suspect devices. The 8010G metal detector (optional) could be helpful here. Set the multimeter on the R X 1K position. On wooden doors, the DC resistance between any combination of hinges and latches should be infinite. On metal doors, of course, it will be zero. If a relatively low resistance is detected between the hinges or latch, use the 1059 across those points to listen for room sounds. Again with the multimeter set on R X 1K test all AC powered appliances. Incandescent lamps should be turned on then unplugged (before the bulb gets too hot). Remove the bulb but leave the appliance turned on. Without touching the metal portions of the multimeter probes or lamp plug measure the resistance across the power cord. It should be infinite. After touching the plug for a few seconds to make the measurement quickly reverse the two test leads while carefully watching the meter for capacitive "kick". The meter should not budge.
Clocks, fluorescent lamps, certain types of "instant on" TV sets will show a relatively low resistance at all times. These appliances will require visual inspection of the interior. Unplug them before inspecting! Bear in mind that most power leads are of the two wire type. If a power lead is discovered which has three or more wires, inspect very carefully.
Most chairs within a room are moved on a frequent basis and normally do not provide a good location for direct wired microphones. Desks, however, remain in the same spot over great periods of time. Move any desks slightly to look for wires or contacts. If the desk is too heavy to move, raise each leg one at a time and slide a credit card underneath it to push out any wires.
Do a complete physical inspection of every object in the room. Use common sense. This completes the physical search.
Follow the instructions for the 2050CA and 2030A/1059 to locate RF sources.
Follow the instructions for using the VCD to locate video transmitters.
Follow the instructions for the 1059IR/1059 combination to locate IR transmitters.
TELEPHONE TESTS: The telephone represents a genuine threat simply because it contains too many microphones to leave unattended in a room. The mouthpiece, earpiece and speaker portion of the speaker-phone all are effective microphones. Anyone who even leaves a telephone in a secure area should be questioned as to their intent! Do not take this instrument too lightly.
Thanks to the breakup of A T & T there is now a proliferation of telephones and telephone systems....far too many to describe in individual detail. A common thread usually runs throughout any telephone system. The first is that all the telephones in the system are like peas in a pod. The insides of one telephone will look just like another. For this reason it is best to have on hand a spare telephone that can be placed besides the one being inspected for comparison. Look carefully for add-on circuits or evidence of tampering with the circuit boards i.e. jumpers, external components, etc. Make a log which contains as much detail as possible about each telephone and keep it for future reference. Once a thorough physical inspection is made proceed with the electronic testing.
Prepare the 1059IR/1059 for normal operation. With the telephone hung up, point the IR probe, at a distance of one foot, at the front, top, back and each side of the telephone. Listen for room audio. Pick up the telephone handset and punch up the first line (if there is more than one line). Again, point the probe at the front, top, back and both sides of the telephone while listening for the dial tone or room audio. Do the same on all remaining lines. Prepare the 2050CA for normal operation. Place the unit on BAND 3 and the white line on the TUNING control pointing directly away from the words LOW END. With the telephone hung up, pass the antenna over the telephone while listening for the presence of RF. Do the same on bands 4 and 5. Pick up the telephone handset and punch up the first line (if there is more than one line). Pass the 2050CA antenna over the telephone on bands 3, 4 and 5. Do the same on all remaining lines.
Most telephone systems are either 4, 6, 8, 25 or 50 wire type. A 1080E is helpful, but not necessary, when checking 4, 6 and 8 wire systems. The 1080H with 1080HVS is necessary for complete testing of 25 and 50 wire systems.
With the telephone hung up, use the 1059 to listen to every possible pair combination for room audio. Then use the 2030A/1059 to listen for room audio on all combinations. While still using the 2030A/1059 punch up the first line and listen for recovered audio. Test the remaining lines in the same fashion. Next, use the multimeter to measure the voltage, both DC and AC, on every pair combination. Log this information. Checking another telephone in the same system should produce the same results.
By far, the best way to perform the above tests using the1059 and 2050CA is to use the "feedback" technique. Run the mini plug to mini plug cable from the 1059 J6 or 2050CA HEADPHONES jack to the audio jack on the back of the AM/FM radio, place the radio next to the telephone instrument and proceed with tests.
Use the AUT9 and 1059 or radio to trace the telephone wires to their termination. Inspect every step of the way. Keep on the lookout for spare wires or pairs of wires seemingly leading to nowhere. Make no assumption. Test until there is no further logical conclusion.
3/00