tip:could not connect to ......

tip:could not connect to ......

Postby huyaowen » 2010-04-27 01:43

tip:could not connect to 124.120.68.222
tip:could not connect to 221.8.56.21
tip:could not connect to 59.148.107.5

many times many ips
so many tip occure at tray zone.

why?
thanks.
huyaowen
 
Posts: 4
Joined: 2010-04-27 01:37

Re: tip:could not connect to ......

Postby B » 2010-04-27 13:38

What is "tip"? Are you using UltraVNC?
B
Super-Mod
Super-Mod
 
Posts: 2347
Joined: 2009-09-09 14:05

Re: tip:could not connect to ......

Postby supercoe » 2010-04-27 13:55

TrayTip?
http://www.chunkvnc.com - ChunkVNC - Free PC Remote control with the Open Source UltraVNC wrapper InstantSupport!
User avatar
supercoe
Super-Mod
Super-Mod
 
Posts: 1735
Joined: 2009-07-20 21:27
Location: Walker, MN

Re: tip:could not connect to ......

Postby huyaowen » 2010-04-28 00:05

yes ,it is traytip.the air bubble.

can i upload some pics?
huyaowen
 
Posts: 4
Joined: 2010-04-27 01:37

Re: tip:could not connect to ......

Postby supercoe » 2010-04-28 01:13

How about you give us more information on what you are doing first....
http://www.chunkvnc.com - ChunkVNC - Free PC Remote control with the Open Source UltraVNC wrapper InstantSupport!
User avatar
supercoe
Super-Mod
Super-Mod
 
Posts: 1735
Joined: 2009-07-20 21:27
Location: Walker, MN

Re: tip:could not connect to ......

Postby huyaowen » 2010-04-28 01:51

thanks a lot.
nothing to do when this tip appears.
vnc server program is idle, tip coms out just automately again and again.

Image

Image


Image
huyaowen
 
Posts: 4
Joined: 2010-04-27 01:37

Re: tip:could not connect to ......

Postby B » 2010-04-28 03:13

The obvious question is -- are you <b>trying</b> to allow these connections, and failing, <b>or</b> are you mystified as to why these addresses are involved?

Did you install VNC yourself? Is this a machine that is <b>supposed</b> to be in someone else's control?

I can tell that, based on a public web service, those IPs are located at:

124.120.68.222 TH THAILAND KRUNG THEP BANGKOK TRUEHISP
221.8.56.21 CN CHINA BEIJING BEIJING CHINA UNICOM JILIN PROVINCE NETWORK
59.148.107.5 HK HONG KONG HONG KONG (SAR) HONG KONG CITY TELECOM (H.K.) LTD


If you <b>don't</b> want those connections, and if you didn't install VNC, and if you don't have any relationship to those locations, and if you <b>do</b> have primary and exclusive ownership of this machine, I suggest that you uninstall VNC at the very least, and that you preferably reformat the machine as it is apparently configured to "phone home" to those locations, and may be infected with other things.

But as VNC is not often used for nefarious purposes, perhaps this was a legitimate support situation that you are unaware of?
B
Super-Mod
Super-Mod
 
Posts: 2347
Joined: 2009-09-09 14:05

Re: tip:could not connect to ......

Postby huyaowen » 2010-04-30 04:23

thank you.

i install VNC myself,and use this computer myself.

now i delete the port which opened at ROUTER.
huyaowen
 
Posts: 4
Joined: 2010-04-27 01:37

Re: tip:could not connect to ......

Postby jcbm » 2010-06-26 12:58

Hi,
I have the same problem with 3 computers in different nets, sometimes when I connect to the computer I see this "tray-tips" and I don't know why. I check the ip address and always these ip's from china or Russia or eeuu, etc...
Maybe is a botnet that try to get control of ours vnc servers??

Can someone tell me why and for what is this "traytip"?? the vnc server can get establishment connection like a viewer?? what happens??

Thanks in advance.

ps. Sorry for my english..
jcbm
 
Posts: 6
Joined: 2010-06-26 12:31

Re: tip:could not connect to ......

Postby B » 2010-06-28 14:28

Yes, "reverse connections" can be initiated FROM a server TO a viewer, or several as in this case. It does sound as if your machines are ALREADY in some kind of botnet.

I wonder if this will turn out to be some kind of UltraVNC exploit that allows infection of open VNC servers. That would be bad. :(

The more you can post about the particulars, the better.
B
Super-Mod
Super-Mod
 
Posts: 2347
Joined: 2009-09-09 14:05

Re: tip:could not connect to ......

Postby jcbm » 2010-06-29 08:06

B I have F-secure with the last updates, and Windows XP SP3 with the last updates too. I scanned all the computer for virus and the F-secure didn't find anything.

This "traytips" started to show when I was updated the VNC server to the last version 1.0.8.2 from this website.

How can I know if my computers are infected by a botnet?? Any suggestions?

Thanks in advance.
jcbm
 
Posts: 6
Joined: 2010-06-26 12:31

Re: tip:could not connect to ......

Postby jcbm » 2010-06-29 10:53

Hi again, I used the log debug option in the vnc server but is too big because every 5 seconds I have this lines:
Fri Jun 25 19:21:42 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack


I change the IP address for xxx.xxx.xxx.xxx but this IP is from another country, so I guess that somebody are mess up with my vnc server. In the middle of the log I see this:
Code: Select all
GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:21:42 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:21:47 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:21:52 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:21:57 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:02 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:07 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:12 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:17 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:22 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:27 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:32 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:34 2010
.\vsocket.cpp : VSocket() m_pDSMPlugin = NULL
.\vncsockconnect.cpp : accepted connection from xxx.xxx.xxx.xxx
.\vncserver.cpp : AddClient() started
.\vncclient.cpp : vncClient() executing...
.\vncclient.cpp : TEST 4
.\vncserver.cpp : AddClient() done
.\vncclient.cpp : client connected : xxx.xxx.xxx.xxx (1)
.\vncclient.cpp : DSMPlugin Pointer to socket OK
.\vsocket.cpp : zero bytes read2
.\vncserver.cpp : removing unauthorised client
.\vncserver.cpp : RemoveClient() done
.\vncclient.cpp : ~vncClient() executing...
.\vncclient.cpp : deleting socket
.\vsocket.cpp : closing socket
Fri Jun 25 19:22:35 2010
.\vsocket.cpp : VSocket() m_pDSMPlugin = NULL
.\vncsockconnect.cpp : accepted connection from xxx.xxx.xxx.xxx
.\vncserver.cpp : AddClient() started
.\vncclient.cpp : vncClient() executing...
.\vncclient.cpp : TEST 4
.\vncserver.cpp : AddClient() done
.\vncclient.cpp : client connected : xxx.xxx.xxx.xxx (1)
.\vncclient.cpp : DSMPlugin Pointer to socket OK
.\vncclient.cpp : m_ms_logon set to false.\vncclient.cpp : negotiated version
Entered InitAuthenticate
c:\data\ultravnc\ultravnc project root\ultravnc\winvnc\winvnc\vncPasswd.h : PASSWD : ToText called
.\vncserver.cpp : client xxx.xxx.xxx.xxx verifiedHost 0 prior to adjustment
.\vncserver.cpp : client xxx.xxx.xxx.xxx verifiedHost 0 after adjustment
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
password authenticationc:\data\ultravnc\ultravnc project root\ultravnc\winvnc\winvnc\vncPasswd.h : PASSWD : ToText called
View-only password authentication.\vncclient.cpp : authentication failed
Fri Jun 25 19:22:36 2010
.\vncserver.cpp : removing unauthorised client
.\vncserver.cpp : RemoveClient() done
.\vncclient.cpp : ~vncClient() executing...
.\vncclient.cpp : deleting socket
.\vsocket.cpp : closing socket
.\HideDesktop.cpp : Restorewallpaper 0
--El servicio especificado no existe como servicio instalado.
Fri Jun 25 19:22:38 2010
.\HideDesktop.cpp : Restorewallpaper 0
--El servicio especificado no existe como servicio instalado.
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:41 2010
.\vsocket.cpp : VSocket() m_pDSMPlugin = NULL
.\vncsockconnect.cpp : accepted connection from xxx.xxx.xxx.xxx
.\vncserver.cpp : AddClient() started
.\vncclient.cpp : vncClient() executing...
.\vncclient.cpp : TEST 4
.\vncserver.cpp : AddClient() done
.\vncclient.cpp : client connected : xxx.xxx.xxx.xxx (1)
.\vncclient.cpp : DSMPlugin Pointer to socket OK
Fri Jun 25 19:22:42 2010
.\vncclient.cpp : m_ms_logon set to false.\vncclient.cpp : negotiated version
Entered InitAuthenticate
c:\data\ultravnc\ultravnc project root\ultravnc\winvnc\winvnc\vncPasswd.h : PASSWD : ToText called
.\vncserver.cpp : client xxx.xxx.xxx.xxx verifiedHost 0 prior to adjustment
.\vncserver.cpp : client xxx.xxx.xxx.xxx verifiedHost 0 after adjustment
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
password authenticationc:\data\ultravnc\ultravnc project root\ultravnc\winvnc\winvnc\vncPasswd.h : PASSWD : ToText called
View-only password authentication.\vncclient.cpp : authentication failed
.\vncserver.cpp : removing unauthorised client
.\vncserver.cpp : RemoveClient() done
.\vncclient.cpp : ~vncClient() executing...
.\vncclient.cpp : deleting socket
.\vsocket.cpp : closing socket
Fri Jun 25 19:22:44 2010
.\HideDesktop.cpp : Restorewallpaper 0
--El servicio especificado no existe como servicio instalado.
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:47 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:48 2010
.\vsocket.cpp : VSocket() m_pDSMPlugin = NULL
.\vncsockconnect.cpp : accepted connection from xxx.xxx.xxx.xxx
.\vncserver.cpp : AddClient() started
.\vncclient.cpp : vncClient() executing...
.\vncclient.cpp : TEST 4
.\vncserver.cpp : AddClient() done
.\vncclient.cpp : client connected : xxx.xxx.xxx.xxx (1)
.\vncclient.cpp : DSMPlugin Pointer to socket OK
.\vncclient.cpp : m_ms_logon set to false.\vncclient.cpp : negotiated version
Entered InitAuthenticate
c:\data\ultravnc\ultravnc project root\ultravnc\winvnc\winvnc\vncPasswd.h : PASSWD : ToText called
.\vncserver.cpp : client xxx.xxx.xxx.xxx verifiedHost 0 prior to adjustment
.\vncserver.cpp : client xxx.xxx.xxx.xxx verifiedHost 0 after adjustment
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
password authenticationc:\data\ultravnc\ultravnc project root\ultravnc\winvnc\winvnc\vncPasswd.h : PASSWD : ToText called
View-only password authentication.\vncclient.cpp : authentication failed
.\vncserver.cpp : removing unauthorised client
.\vncserver.cpp : RemoveClient() done
.\vncclient.cpp : ~vncClient() executing...
.\vncclient.cpp : deleting socket
.\vsocket.cpp : closing socket
Fri Jun 25 19:22:50 2010
.\HideDesktop.cpp : Restorewallpaper 0
--El servicio especificado no existe como servicio instalado.
Fri Jun 25 19:22:52 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:54 2010
.\vsocket.cpp : VSocket() m_pDSMPlugin = NULL
.\vncsockconnect.cpp : accepted connection from xxx.xxx.xxx.xxx
.\vncserver.cpp : AddClient() started
.\vncclient.cpp : vncClient() executing...
.\vncclient.cpp : TEST 4
.\vncserver.cpp : AddClient() done
.\vncclient.cpp : client connected : xxx.xxx.xxx.xxx (1)
.\vncclient.cpp : DSMPlugin Pointer to socket OK
.\vncclient.cpp : m_ms_logon set to false.\vncclient.cpp : negotiated version
Entered InitAuthenticate
c:\data\ultravnc\ultravnc project root\ultravnc\winvnc\winvnc\vncPasswd.h : PASSWD : ToText called
.\vncserver.cpp : client xxx.xxx.xxx.xxx verifiedHost 0 prior to adjustment
.\vncserver.cpp : client xxx.xxx.xxx.xxx verifiedHost 0 after adjustment
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
password authenticationFri Jun 25 19:22:55 2010
c:\data\ultravnc\ultravnc project root\ultravnc\winvnc\winvnc\vncPasswd.h : PASSWD : ToText called
View-only password authentication.\vncclient.cpp : authentication failed
.\vncserver.cpp : removing unauthorised client
.\vncserver.cpp : RemoveClient() done
.\vncclient.cpp : ~vncClient() executing...
.\vncclient.cpp : deleting socket
.\vsocket.cpp : closing socket
Fri Jun 25 19:22:57 2010
.\HideDesktop.cpp : Restorewallpaper 0
--El servicio especificado no existe como servicio instalado.
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:02 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:07 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:12 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:17 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:22 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:27 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:32 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:37 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:42 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:47 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:52 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:57 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:02 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:07 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:12 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:17 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:22 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:27 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:32 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:37 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:42 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:47 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:52 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:57 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:02 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:07 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:12 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:17 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:22 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:27 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:32 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:37 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:42 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:47 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:52 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:57 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:26:02 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:26:07 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:26:12 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:26:17 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:26:22 2010
.\vncservice.cpp : @@@@@@@@@@@@@
jcbm
 
Posts: 6
Joined: 2010-06-26 12:31

Re: tip:could not connect to ......

Postby B » 2010-06-29 14:21

I am not an expert in this, so I am just guessing.

Maybe it's not an infection at all, but rather that these are simply drive-by exploit scans by hackers or infected machines in those countries? It's not clear to me whether they ever successfully logged in.

If your machine is open to the Internet, and particularly if it's using a default listening port, it's going to get scanned frequently by infected machines elsewhere in the world. Some of these malicious port scans include attempts to connect and log in to known services.

The only thing I'm not clear on is whether this "tray tip" reflection of <i>hopefully</i> failed login attempts is normal, new to version 1.0.8.2, or a reflection of something bad going on.

In other words, I'm no longer inclined to think you're infected?

Maybe a developer can chime in here and explain things better....
B
Super-Mod
Super-Mod
 
Posts: 2347
Joined: 2009-09-09 14:05

Re: tip:could not connect to ......

Postby jcbm » 2010-06-30 08:38

Maybe you're right B...

Is there a way to reject all connections except one (my IP)? Or Can I hide vnc service to the public?
jcbm
 
Posts: 6
Joined: 2010-06-26 12:31

Re: tip:could not connect to ......

Postby redge » 2010-06-30 11:14

jcbm

Is there a way to reject all connections except one (my IP)?

yes

IP restrictions, How does AuthHosts Work?

Can I hide vnc service to the public?

as my knowledge, no, but you can make it diffult to discover it changing the default port.
UltraVNC 1.0.9.6.1 (built 20110518)
OS Win: xp home + vista business + 7 home
only experienced user, not developer
redge
Super-Mod
Super-Mod
 
Posts: 6815
Joined: 2004-07-03 17:05
Location: Switzerland - Geneva

Re: tip:could not connect to ......

Postby jcbm » 2010-06-30 11:47

Thank you redge
jcbm
 
Posts: 6
Joined: 2010-06-26 12:31

Re: tip:could not connect to ......

Postby jcbm » 2010-08-03 08:21

Hi again, I still have the same problem, and now, more computers have the same "tips", I hope that with the new version of vnc, this problem will be fixed.
jcbm
 
Posts: 6
Joined: 2010-06-26 12:31

Re: tip:could not connect to ......

Postby B » 2010-08-03 13:38

Have you tried changing the listening port on the VNC servers? That would make 99.9% of the problem disappear. (Unless you're really infected after all.)
B
Super-Mod
Super-Mod
 
Posts: 2347
Joined: 2009-09-09 14:05


Return to 1.0.8.X (stable)

Who is online

Users browsing this forum: No registered users and 1 guest