Someone has Remoted into a PC on my network!

Page 2 of 2 FirstFirst 12

  1. Posts : 11,247
    Windows / Linux : Arch Linux
       #11

    Hi there

    Why on earth do people always start at the most complicated places from which to solve problems !!!!

    Why not first start with your ROUTER - look at its logs - you should see inbound logon requests -- the router also can give you a HUGE better set of security than Windows firewalls etc (although of course don't disable the firewall).

    To get access to most domestic routers logon to typically 192.168.0.1 (the 0 could often be replaced by 1 or 2) - check the router literature for the exact configuration. Some cable routers also require a pin number at logon - usually these will be stuck on to the bottom of the router / cable box.

    For starters if you have known sets of PC's restrict the Internet usage by MACID -- any even half decent router should be able to do that.

    From there you should be able to tell if you've got any open ports etc -- then block those.

    Once you've isolated the router you should then look at the Windows system to see where "Ingress" is occurring -.

    Teamviewer IMO isn't worth it -- if you can run Linux there's so many ways of securing it - I won't start here other than suggest you could make a Linux server act as your Internet gateway. Plenty of info on Linux Forums for that topic. Simply set up the gateway and on Windows machines set the browsers Internet settings to use a "proxy server" i.e your gateway. There's a zillion ways and options here so it depends on what you want from a full blown secure VPN server to something a bit more basic than standard windows with a lot more security in it.

    Install package XRDP on it if you have a Linux system with a GUI - that way standard RDP from Windows will access your Linux system identically to the way you can RDP to another windows system.

    SSH on Linux systems is also a good idea too.

    Cheers
    jimbo
      My Computer


  2. Posts : 70
    Windows 10 Pro, 64 bit
    Thread Starter
       #12

    Excellent idea....DUH! The router. Although i disagree about windows firewall...FRIST thing I always do is disable that nightmare. I over two decades with 2 to now 20+ PC running 24.7...this is THE first issued I've EVER had. I've never run any antivirus,,,and I've never had a virus too. Honestly i'm surprised its taken this long to be hacked.
    As for my router, I know it inside and out...i currently have 75 ports forwarded ...Yes I need ALL each n every one.
    I have 3 WEB servers, 2 mail servers, and any type app, like VNC or RDP has to use ports forwarded.
    (however, this Team Viewer......AWESONE app, = and FREE..does not appear to require me going in and forwarding any ports, and has far more flexibility and features than even the paid version of REAL VNC)
    My plan at this point is to get team viewer going, uninstall Real VNC, release and block the 20+ ports VNC was using...then go scrub the router logs. Im running Microsoft IIS for WEB server, it has a great log feature...but, if he did not hit my WEB site......it will not log it.
      My Computer


  3. Posts : 70
    Windows 10 Pro, 64 bit
    Thread Starter
       #13

    I wont be able to see any router logs. It has the capability, but you must have linux box (I do), and I need to install, a UNIX-compatible syslog client for this feature. (I have not). Its taken 4 hours but I have TeamViewer installed on all my devices. (17 PC) I like it, its cleaner, and for certain faster. I have 3 older PC, that every remoting app I have used, is like being back in the EARLY days of dial up...only LESS stable. TeanView is still slower and lil shaky on these 3 but, over 1000% better than the others..maybe 10,000% better Next...its good bye to Real VNC
      My Computer


  4. Posts : 70
    Windows 10 Pro, 64 bit
    Thread Starter
       #14

    bro67 said:
    Read the information in the link that was posted and also the information is on VNC's website. This has zero to do with RDP. Concentrate only on VNC or just make your life easy and use Team Viewer.
    bro67...AWESOME app! I've been setting them all up for 7 hours now..almost done. I only need to release all the ports that were forwarded to each PC. I do find one thing I do not like about TeamViewer...I've looked and do not see a way, to Remote into more than one PC at a time. I have to have at least 2 at once..do you know a way or setting to do this? I can't find anything on if this is possible or not?
      My Computer


  5. Posts : 5,452
    Windows 11 Home
       #15

    TeamViewer Support – Help regarding licensing and technical issues

    Try TeamViewer Portable in addition, but not sure, if it is gonna to work, once you login to your account.
      My Computer


  6. Posts : 70
    Windows 10 Pro, 64 bit
    Thread Starter
       #16

    TairikuOkami said:
    TeamViewer Support – Help regarding licensing and technical issues

    Try TeamViewer Portable in addition, but not sure, if it is gonna to work, once you login to your account.
    Yes, I finally found, where the free version, is only 1 session. That is THE only con with this app, the rest is incredible, it far far far exceeds Real VNC Enterprise which is $30+
    But, the paid version ot TeamV is outrageously expensive, the low end is over $850. Its nice to open several sessions at once, however, not doing it is a small price to pay for the other benefits. It uses VPN, so its secure, Once I disabled VNC, I was able to release over 20 ports, no longer forwarding and are now closed.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 18:00.
Find Us




Windows 10 Forums