New
#1
Someone has Remoted into a PC on my network!
I have an urgent situation. I have several PC at home on a network. I'm lazy so I use Real VNC
from one PC, to hit my other PC on the netork (all password protected). I VNC onto one of my PC
and noticed the lock/logon screen was up, and a message "The PC is logged on remotly by
bobs-MacBook-Pro.local
Ut oh!! so I put in my password, and I see my mouse moving, its on a paypal page, he logged out!
(lucky for him!)...the user id was Richard@arrowpointint.com (not me see below).
http://www.aanning.com/ajissues/Hacked/Hacked1.jpg
He also was on this page:
http://www.aanning.com/ajissues/Hacked/Hacked2.jpg
I have the lot file from windows "HAcked.evtx", i'm not sure what to make of it.
(I was unable to upload the "HAcked.evtx" file here, so I attached screen shots
of one of the 20+ events there he logged in)
My only guess is, he RDP into my PC, but I have no idea as to his end game.
I have turned OFF RDP on all my PC, and made the locked screen come up after 1 minute of inactivity
for all PC.
Any advice, clues or suggestions is greatly needed here!