Someone just took control of my computer while I was using it
Posted 20 April 2010 - 08:39 AM
He opened up the Command Promt; Now, the only thing he was able to type was "ipconfi" and I know where that was going, so I attempted to shut down the client, but it asked me for a password ( which it has never done before) the one freaking time that I need it to shut down quickly, it takes its sweet time by asking me for a password.
The intruder was able to open it up and look for about 2-3 seconds before I finally shut him down. I just don't understand, I have windows firewall turned on, and my linksys hardware firewall is on.
This all just happened literally like 3 minutes ago.
The intruder already had access to my computer, yet he wanted my Internet IP Address?
He was already in my system, why would he need that info?
There is no way a normal human being could read an ip address that fast, my only concern is that he screen capped before i disconnected him, because it was fairly obvious that I was in front of my computer by the time I disconnected it.
Any advice, or does anybody see a reason as to why he needed my ip address?
Or is there anyway to find out the ip address of the person?
Posted 20 April 2010 - 12:18 PM
Posted 20 April 2010 - 12:31 PM
Posted 20 April 2010 - 05:34 PM
Doesn't VNC have a log for connections?
check the ip that connected to your computer, see if any failed password attempt. If he got in on 1 shot...most likely there is an exploit for the version of vnc you are running.
to be safe just uninstall vnc until its needed....
The reason he checked your ip address is to first understand if you are behind a firewall like you said you are. You have a private address ie 10.x.x.x or 172.16.x.x, 192.168.x.x this tells the person, there is a box between him and you & there could be other assets on the private network which your computer may be able to access. it could be other pcs, servers, etc.
Posted 20 April 2010 - 06:18 PM
BTW I checked the vnc log and it was empty. No trace whatsoever.