Stealth Connections?

[James Weatherall]

Pedro,

When John referred to "hacking" the registry, he just meant modifying it.

You originally asked about how to hide the tray icon, but you say that you
were using VNC 3.3.7 - are you saying that you were using it but without the
tray icon visible?

VNC 3.3.7 doesn't log anything very useful, by default, I'm afraid.  If you
send me (off-list) a dump of the contents of HKLM/Software/ORL/WinVNC3 then
I can have a look for any tell-tale signs of misconfiguration, though.

Note that you will need to remove the Password line if you want to ensure
that I can't decrypt it and read your old VNC password! :)

Cheers,

Wez @ RealVNC Ltd.


> -----Original Message-----
> From: Pedro Hermida @ Hotmail [mailto:phermi "at" hotmail.com] 
> Sent: 03 March 2005 13:18
> To: 'James Weatherall'; 'John Aldrich'; vnc-list "at" realvnc.com
> Subject: RE: Stealth Connections?
> 
> Dear John,
> 
> I read what you said earlier and maybe I did not explain 
> myself well enough.
> I was using a prior version, 3.3.X when a report came to me 
> of an unusual PC
> mouse moves and keystrokes, file left open, etc. I took 
> copies of registry
> and log files before upgrading to 4. If there is a way to 
> know if we were
> hacked by looking at changes in the registry, we will have a logical
> explanation.
> 
> Thanks in advance
> Pedro Hermida