Second Life Forums Archive

dragonfly Olsen

Registered User

Join date: 4 Jun 2004

Posts: 181

05-23-2005 08:34

I have a situation. My boss vnc into his computer and watched his mouse move around and open outlook express and open contacts. I am thinking virus activity. No one was using his computer in actuality but it seemed to look like it but only going through outlook. Does anyone know of this happening? And can viruses mimic human activity on a pc? It has messed up his log in and all. He went into office and unplugged from network and interent and now he can log into his pc but it blocked him from log in when connected to network. Anyone with ideas???

Artillo Fredericks

Friendly Orange Demon

Join date: 1 Jun 2004

Posts: 1,327

05-23-2005 09:06

It sounds like he has Remote Desktop enabled (Windows XP) or some sort of hijacker program is being used, definitely not virus activity.

Go to Start... Control Panel... Security Center... click on Windows Firewall...
then in the window that opens go to the Exceptions tab, and uncheck Remote Desktop.

Also, check under Control Panel, Performance & Maintenance... Administrative tools... double click on Services.... scroll down in the list and set Remote Access stuff to Manual.

I would also get Ad-Aware, Spybot Search & Destroy, HijackThis, and ZoneAlarm (all free) to guard against malicious Adware/Spyware on the pc.

Anyone else have a suggestion?

_____________________

"I, for one, am thouroughly entertained by the mass freakout." - Nephilaine Protagonist

--== www.artillodesign.com ==--

feniks Stone

At the End of the World

Join date: 25 Nov 2002

Posts: 787

05-23-2005 21:52

If he was vnc'd in, could someone have been sitting at his machine poking around?

some flavors of vnc are pretty unsecure.

Did outlook express require a password to open? Never use those save password options, they just let the boogie man right in, this is especially scary if someone steals your laptop.

fen-

_____________________

the gypsy that remains..

Garoad Kuroda

Prophet of Muppetry

Join date: 5 Sep 2003

Posts: 2,989

05-26-2005 11:33

Doesn't VNC allow multiple sessions? I could be wrong. But if so couldn't it just be someone who "found" his system, saw that VNC was setup, and guessed a password? If there's definitely nobody at the actual keyboard since VNC is involved that's one of the first things I'd suspect.

_____________________

BTW

WTF is C3PO supposed to be USEFUL for anyway, besides whining? Stupid piece of scrap metal would be more useful recycled as a toaster. But even that would suck, because who would want to listen to a whining wussy toaster? Is he gold plated? If that's the case he should just be melted down into gold ingots. Help the economy some, and stop being so damn useless you stupid bucket of bolts! R2 is 1,000 times more useful than your tin man ass, and he's shaped like a salt and pepper shaker FFS!

Welcome to the Second Life Forums Archive

Virus related?

Virus related?
dragonfly Olsen Registered User Join date: 4 Jun 2004 Posts: 181	05-23-2005 08:34 I have a situation. My boss vnc into his computer and watched his mouse move around and open outlook express and open contacts. I am thinking virus activity. No one was using his computer in actuality but it seemed to look like it but only going through outlook. Does anyone know of this happening? And can viruses mimic human activity on a pc? It has messed up his log in and all. He went into office and unplugged from network and interent and now he can log into his pc but it blocked him from log in when connected to network. Anyone with ideas???
Artillo Fredericks Friendly Orange Demon Join date: 1 Jun 2004 Posts: 1,327	05-23-2005 09:06 It sounds like he has Remote Desktop enabled (Windows XP) or some sort of hijacker program is being used, definitely not virus activity. Go to Start... Control Panel... Security Center... click on Windows Firewall... then in the window that opens go to the Exceptions tab, and uncheck Remote Desktop. Also, check under Control Panel, Performance & Maintenance... Administrative tools... double click on Services.... scroll down in the list and set Remote Access stuff to Manual. I would also get Ad-Aware, Spybot Search & Destroy, HijackThis, and ZoneAlarm (all free) to guard against malicious Adware/Spyware on the pc. Anyone else have a suggestion? _____________________ "I, for one, am thouroughly entertained by the mass freakout." - Nephilaine Protagonist --== www.artillodesign.com ==--
feniks Stone At the End of the World Join date: 25 Nov 2002 Posts: 787	05-23-2005 21:52 If he was vnc'd in, could someone have been sitting at his machine poking around? some flavors of vnc are pretty unsecure. Did outlook express require a password to open? Never use those save password options, they just let the boogie man right in, this is especially scary if someone steals your laptop. fen- _____________________ the gypsy that remains..
Garoad Kuroda Prophet of Muppetry Join date: 5 Sep 2003 Posts: 2,989	05-26-2005 11:33 Doesn't VNC allow multiple sessions? I could be wrong. But if so couldn't it just be someone who "found" his system, saw that VNC was setup, and guessed a password? If there's definitely nobody at the actual keyboard since VNC is involved that's one of the first things I'd suspect. _____________________ BTW WTF is C3PO supposed to be USEFUL for anyway, besides whining? Stupid piece of scrap metal would be more useful recycled as a toaster. But even that would suck, because who would want to listen to a whining wussy toaster? Is he gold plated? If that's the case he should just be melted down into gold ingots. Help the economy some, and stop being so damn useless you stupid bucket of bolts! R2 is 1,000 times more useful than your tin man ass, and he's shaped like a salt and pepper shaker FFS!