| |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Hello and welcome to CertForums.co.uk, here we host free active certification forums with links to the best free resources for Microsoft's MCSA MCSE MCDBA Cisco's CCNA CCDA and CCNP, and CompTIA's A+ Network+ i-NET+ and Security+ certifications in the UK. If you wish to post or use other advanced features you will need to register first. Registration is absolutely free and takes only a few minutes to complete so sign up today! If you have any problems with the registration process or your account login, please contact support |
|
|||||||
| Home | Forums | Community | Register | Search | Today's Posts | Mark Forums Read |
|
|
|
laptop compromised |
  |
|
|
Thread Tools | Display Modes |
|
#1
13-May-2008, 06:06 PM
|
||||
|
||||
|
laptop compromised
Hi all, long time no speak
Got a bit of a worrying problem, on 2 occasions I have been remotely controlled by an unknown person via vnc. Each time the person has opened up Task Manager, ended a few services and minimized it, then on one occasion they navigated to a website and started downloading something, but i had a mouse battle and cancelled it, eventually just whacked the power button Then, just now, about 2 weeks after the first attack, it happens again while im not looking, but this time they signed me out of MSN and started to type "\systemroute" in the username box, i quickly closed the VNC icon in the system tray and closed down task manager which was opened again. Ive done a full system virus scan, route kit scan, spyware scan, you name it, ive done it. no scary results though Its the latest version of VNC, downloaded about a month ago. How is someone doing this? and what can they do with \systemroute in the msn username field?  Any ideas? Cheers
|
|
|
|
#2
13-May-2008, 06:17 PM
|
|||||
|
|||||
|
Having VNC installed is probably part of the problem.
 If you've been rootkitted, you won't see anything on a scan. I'd suggest backing up your data, formatting, and reinstalling from scratch. BosonMichael MCSE+I, MCSE: Security, MCDST, MCDBA, OCP, CCNP, CCDP, CNE, SCSA, Security+, Linux+, Server+, Network+, A+ Served proudly, US Army, 98C Intelligence Analyst, '89-'92
|
|
#3
13-May-2008, 06:30 PM
|
|||||
|
|||||
|
Are you wireless?
Are you broadcasting your ip address? HND Bussiness Computing, GNVQ IT, NVQ 1 & 2 IT, A+
|
|
#4
13-May-2008, 06:35 PM
|
|||||
|
|||||
|
What verision of VNC are you using? From what I am finding you should not use the free vnc for the internet. And you should use SSH to secure your network. I have 2 different google. I let you search though them.
Securing your VNC http://www.google.com/search?hl=en&q=Securing+your+VNC How to prevent hacking though the vnc http://www.google.com/search?hl=en&q...though+the+vnc
|
|
#6
13-May-2008, 07:34 PM
|
||||
|
||||
|
VNC on its own should be behind a firewall as it is insecure.
The *only* way to run VNC safely is over SSH, and if you do that then it is safe. To run the SSH server the easiest way is to run the cygwin version (which is free). Harry
|
Spread this thread:
|
|
|
|
||||||
«
Previous Thread
|
Next Thread
»
| Thread Tools | |
| Display Modes | |
Linear Mode
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Intel wireless problem on laptop? | dude182 | Wireless Networking | 4 | 24-Apr-2008 09:59 AM |
| Dead Laptop | mojorisin | Hardware & Upgrading | 3 | 08-Apr-2008 06:08 PM |
| Laptop Batteries | Fergal1982 | Just for Laughs | 1 | 20-Dec-2007 10:28 AM |
| Laptop TFT panel help | TimoftheC | Hardware & Upgrading | 6 | 30-Nov-2007 01:16 AM |
All times are GMT. The time now is 02:02 AM.