Stealth Connections?
Pedro Hermida @ Hotmail
phermi "at" hotmail.com
Thu Mar 3 13:20:01 2005
Dear John,
I read what you said earlier and maybe I did not explain myself well enough.
I was using a prior version, 3.3.X when a report came to me of an unusual PC
mouse moves and keystrokes, file left open, etc. I took copies of registry
and log files before upgrading to 4. If there is a way to know if we were
hacked by looking at changes in the registry, we will have a logical
explanation.
Thanks in advance
Pedro Hermida
-----Original Message-----
From: James Weatherall [mailto:jnw "at" realvnc.com]
Sent: Thursday, March 03, 2005 8:12 AM
To: 'Pedro Hermida @ Hotmail'; 'John Aldrich'; vnc-list "at" realvnc.com
Subject: RE: Stealth Connections?
Pedro,
As I said earlier, VNC 4 does not have the vulnerability found in VNC 3.3
that allows the tray icon to be disabled.
Regards,
Wez @ RealVNC Ltd.
> -----Original Message-----
> From: Pedro Hermida @ Hotmail [mailto:phermi "at" hotmail.com]
> Sent: 03 March 2005 12:37
> To: 'John Aldrich'; 'James Weatherall'; vnc-list "at" realvnc.com
> Subject: RE: Stealth Connections?
>
> John,
>
> Can you tell what to look for in the registry to determine if it was
> "hacked". Sadly, I was using 3.3.7 (guess) until recently.
> Now I'm on 4.
>
> Thanks
>
> -----Original Message-----
> From: John Aldrich [mailto:JAldrich "at" covista.com]
> Sent: Wednesday, March 02, 2005 11:24 AM
> To: 'James Weatherall'; 'phermi'; vnc-list "at" realvnc.com
> Subject: RE: Stealth Connections?
>
> One could always hack the registry to not show the icon at
> all. There've
> been several posts in various places I've seen discussing how
> to hide the
> tray icon altogether. But I agree with James -- VNC should
> not be used to
> "snoop" on people.