VNC Help!
Page 1 of 1
headshot
VIP Member



Posts: 35908
Location: UK
PostPosted: Mon, 7th Aug 2006 18:36    Post subject: VNC Help!
I use realvnc so I can connect to my home pc from work but just lately I am getting constant hassle from an unauthorized outsider! All of a sudden they will gain control of my pc and icons appears on my desktop usually executable files and they then attempt to start them using the run command. I look at the realvnc icon in my system tray and it is black which means someone is connected to my pc. So I then click disconnet clients or shut down realvnc altogether but this is an occurring issue and its beginning to get annoying. I have changed my realvnc password and it has made no difference. I have asked my ISP to change my IP address since it is static and that too has made no difference. I have checked the upd.exe and msconfig2.exe on Google and they appear to be trojans! Has anyone get any ideas how I can get rid of this pest?! Any help would be greatly appreciated.


May the NFOrce be with you always.
Back to top
BushDoctor




Posts: 371

PostPosted: Mon, 7th Aug 2006 19:02    Post subject:
You should update your RealVNC software to the newest version, there's a know exploit in older versions (v4.1.0-4.1.1). With the exploit you can gain access to people who are running the server without knowing the password.
Back to top
headshot
VIP Member



Posts: 35908
Location: UK
PostPosted: Mon, 7th Aug 2006 20:06    Post subject:
But I have changed my IP. Shouldnt that help or is it likely to be an attack from a different source? The newest version on realvnc.com appears to be 4.1.

Edit: I see 4.2.6 on Usenet Very Happy


May the NFOrce be with you always.
Back to top
BushDoctor




Posts: 371

PostPosted: Mon, 7th Aug 2006 20:11    Post subject:
They are probably using a vnc exploit IP scanner that scans a range of ips for vulnerable computers. So even if you change your IP they can use the scanner and find you again.
Back to top
headshot
VIP Member



Posts: 35908
Location: UK
PostPosted: Mon, 7th Aug 2006 20:18    Post subject:
Sonsofbitches Mad

Edit: Thanks for your replies and help BushDoctor.


May the NFOrce be with you always.
Back to top
[sYn]
[Moderator] Elitist



Posts: 8374

PostPosted: Mon, 7th Aug 2006 20:51    Post subject:
Or they have accessed you machine enough to have a trojan installed feeding IP information back to the "hacker" .. I would do a full scan, also check what ports are open on your machine (jet me a PM with your IP if you want and I'll do an nmap scan from my server)..
Back to top
BushDoctor




Posts: 371

PostPosted: Mon, 7th Aug 2006 21:17    Post subject:
headshot wrote:
Sonsofbitches Mad

Edit: Thanks for your replies and help BushDoctor.


No problem ! Smile
Back to top
Page 1 of 1 All times are GMT + 1 Hour
NFOHump.com Forum Index - Applications
Signature/Avatar nuking: none (can be changed in your profile)  


Display posts from previous:   

Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB 2.0.8 © 2001, 2002 phpBB Group