laptop compromised

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Hi all, long time no speak

Got a bit of a worrying problem, on 2 occasions I have been remotely controlled by an unknown person via vnc.

Each time the person has opened up Task Manager, ended a few services and minimized it, then on one occasion they navigated to a website and started downloading something, but i had a mouse battle and cancelled it, eventually just whacked the power button

Then, just now, about 2 weeks after the first attack, it happens again while im not looking, but this time they signed me out of MSN and started to type "\systemroute" in the username box, i quickly closed the VNC icon in the system tray and closed down task manager which was opened again.

Ive done a full system virus scan, route kit scan, spyware scan, you name it, ive done it. no scary results though

Its the latest version of VNC, downloaded about a month ago.

How is someone doing this? and what can they do with \systemroute in the msn username field?

Any ideas?

Cheers

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Having VNC installed is probably part of the problem.

If you've been rootkitted, you won't see anything on a scan. I'd suggest backing up your data, formatting, and reinstalling from scratch.

 

Are you wireless?

Are you broadcasting your ip address?

 

What verision of VNC are you using? From what I am finding you should not use the free vnc for the internet. And you should use SSH to secure your network. I have 2 different google. I let you search though them.

Securing your VNC
http://www.google.com/search?hl=en&q=Securing+your+VNC

How to prevent hacking though the vnc

http://www.google.com/search?hl=en&q=How+to+prevent+hacking+though+the+vnc

 

VNC on its own should be behind a firewall as it is insecure.

The *only* way to run VNC safely is over SSH, and if you do that then it is safe.

To run the SSH server the easiest way is to run the cygwin version (which is free).

Harry