Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

tip:could not connect to ......

Post Reply
huyaowen
Posts: 4
Joined: 2010-04-27 01:37

tip:could not connect to ......

Post by huyaowen »

tip:could not connect to 124.120.68.222
tip:could not connect to 221.8.56.21
tip:could not connect to 59.148.107.5

many times many ips
so many tip occure at tray zone.

why?
thanks.
B
800
800
Posts: 2338
Joined: 2009-09-09 14:05

Re: tip:could not connect to ......

Post by B »

What is "tip"? Are you using UltraVNC?
User avatar
supercoe
400
400
Posts: 1732
Joined: 2009-07-20 21:27
Location: Walker, MN
Contact:

Re: tip:could not connect to ......

Post by supercoe »

TrayTip?
http://www.chunkvnc.com - ChunkVNC - Free PC Remote control with the Open Source UltraVNC wrapper InstantSupport!
huyaowen
Posts: 4
Joined: 2010-04-27 01:37

Re: tip:could not connect to ......

Post by huyaowen »

yes ,it is traytip.the air bubble.

can i upload some pics?
User avatar
supercoe
400
400
Posts: 1732
Joined: 2009-07-20 21:27
Location: Walker, MN
Contact:

Re: tip:could not connect to ......

Post by supercoe »

How about you give us more information on what you are doing first....
http://www.chunkvnc.com - ChunkVNC - Free PC Remote control with the Open Source UltraVNC wrapper InstantSupport!
huyaowen
Posts: 4
Joined: 2010-04-27 01:37

Re: tip:could not connect to ......

Post by huyaowen »

thanks a lot.
nothing to do when this tip appears.
vnc server program is idle, tip coms out just automately again and again.

Image

Image


Image
B
800
800
Posts: 2338
Joined: 2009-09-09 14:05

Re: tip:could not connect to ......

Post by B »

The obvious question is -- are you <b>trying</b> to allow these connections, and failing, <b>or</b> are you mystified as to why these addresses are involved?

Did you install VNC yourself? Is this a machine that is <b>supposed</b> to be in someone else's control?

I can tell that, based on a public web service, those IPs are located at:
124.120.68.222 TH THAILAND KRUNG THEP BANGKOK TRUEHISP
221.8.56.21 CN CHINA BEIJING BEIJING CHINA UNICOM JILIN PROVINCE NETWORK
59.148.107.5 HK HONG KONG HONG KONG (SAR) HONG KONG CITY TELECOM (H.K.) LTD
If you <b>don't</b> want those connections, and if you didn't install VNC, and if you don't have any relationship to those locations, and if you <b>do</b> have primary and exclusive ownership of this machine, I suggest that you uninstall VNC at the very least, and that you preferably reformat the machine as it is apparently configured to "phone home" to those locations, and may be infected with other things.

But as VNC is not often used for nefarious purposes, perhaps this was a legitimate support situation that you are unaware of?
huyaowen
Posts: 4
Joined: 2010-04-27 01:37

Re: tip:could not connect to ......

Post by huyaowen »

thank you.

i install VNC myself,and use this computer myself.

now i delete the port which opened at ROUTER.
jcbm
Posts: 6
Joined: 2010-06-26 12:31

Re: tip:could not connect to ......

Post by jcbm »

Hi,
I have the same problem with 3 computers in different nets, sometimes when I connect to the computer I see this "tray-tips" and I don't know why. I check the ip address and always these ip's from china or Russia or eeuu, etc...
Maybe is a botnet that try to get control of ours vnc servers??

Can someone tell me why and for what is this "traytip"?? the vnc server can get establishment connection like a viewer?? what happens??

Thanks in advance.

ps. Sorry for my english..
B
800
800
Posts: 2338
Joined: 2009-09-09 14:05

Re: tip:could not connect to ......

Post by B »

Yes, "reverse connections" can be initiated FROM a server TO a viewer, or several as in this case. It does sound as if your machines are ALREADY in some kind of botnet.

I wonder if this will turn out to be some kind of UltraVNC exploit that allows infection of open VNC servers. That would be bad. :(

The more you can post about the particulars, the better.
jcbm
Posts: 6
Joined: 2010-06-26 12:31

Re: tip:could not connect to ......

Post by jcbm »

B I have F-secure with the last updates, and Windows XP SP3 with the last updates too. I scanned all the computer for virus and the F-secure didn't find anything.

This "traytips" started to show when I was updated the VNC server to the last version 1.0.8.2 from this website.

How can I know if my computers are infected by a botnet?? Any suggestions?

Thanks in advance.
jcbm
Posts: 6
Joined: 2010-06-26 12:31

Re: tip:could not connect to ......

Post by jcbm »

Hi again, I used the log debug option in the vnc server but is too big because every 5 seconds I have this lines:
Fri Jun 25 19:21:42 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador
--Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
I change the IP address for xxx.xxx.xxx.xxx but this IP is from another country, so I guess that somebody are mess up with my vnc server. In the middle of the log I see this:

Code: Select all

GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:21:42 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:21:47 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:21:52 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:21:57 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:02 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:07 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:12 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:17 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:22 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:27 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:32 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:34 2010
.\vsocket.cpp : VSocket() m_pDSMPlugin = NULL 
.\vncsockconnect.cpp : accepted connection from xxx.xxx.xxx.xxx
.\vncserver.cpp : AddClient() started
.\vncclient.cpp : vncClient() executing...
.\vncclient.cpp : TEST 4
.\vncserver.cpp : AddClient() done
.\vncclient.cpp : client connected : xxx.xxx.xxx.xxx (1)
.\vncclient.cpp : DSMPlugin Pointer to socket OK
.\vsocket.cpp : zero bytes read2
.\vncserver.cpp : removing unauthorised client
.\vncserver.cpp : RemoveClient() done
.\vncclient.cpp : ~vncClient() executing...
.\vncclient.cpp : deleting socket
.\vsocket.cpp : closing socket
Fri Jun 25 19:22:35 2010
.\vsocket.cpp : VSocket() m_pDSMPlugin = NULL 
.\vncsockconnect.cpp : accepted connection from xxx.xxx.xxx.xxx
.\vncserver.cpp : AddClient() started
.\vncclient.cpp : vncClient() executing...
.\vncclient.cpp : TEST 4
.\vncserver.cpp : AddClient() done
.\vncclient.cpp : client connected : xxx.xxx.xxx.xxx (1)
.\vncclient.cpp : DSMPlugin Pointer to socket OK
.\vncclient.cpp : m_ms_logon set to false.\vncclient.cpp : negotiated version
Entered InitAuthenticate
c:\data\ultravnc\ultravnc project root\ultravnc\winvnc\winvnc\vncPasswd.h : PASSWD : ToText called
.\vncserver.cpp : client xxx.xxx.xxx.xxx verifiedHost 0 prior to adjustment
.\vncserver.cpp : client xxx.xxx.xxx.xxx verifiedHost 0 after adjustment
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
password authenticationc:\data\ultravnc\ultravnc project root\ultravnc\winvnc\winvnc\vncPasswd.h : PASSWD : ToText called
View-only password authentication.\vncclient.cpp : authentication failed
Fri Jun 25 19:22:36 2010
.\vncserver.cpp : removing unauthorised client
.\vncserver.cpp : RemoveClient() done
.\vncclient.cpp : ~vncClient() executing...
.\vncclient.cpp : deleting socket
.\vsocket.cpp : closing socket
.\HideDesktop.cpp : Restorewallpaper 0
 --El servicio especificado no existe como servicio instalado.
Fri Jun 25 19:22:38 2010
.\HideDesktop.cpp : Restorewallpaper 0
 --El servicio especificado no existe como servicio instalado.
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:41 2010
.\vsocket.cpp : VSocket() m_pDSMPlugin = NULL 
.\vncsockconnect.cpp : accepted connection from xxx.xxx.xxx.xxx
.\vncserver.cpp : AddClient() started
.\vncclient.cpp : vncClient() executing...
.\vncclient.cpp : TEST 4
.\vncserver.cpp : AddClient() done
.\vncclient.cpp : client connected : xxx.xxx.xxx.xxx (1)
.\vncclient.cpp : DSMPlugin Pointer to socket OK
Fri Jun 25 19:22:42 2010
.\vncclient.cpp : m_ms_logon set to false.\vncclient.cpp : negotiated version
Entered InitAuthenticate
c:\data\ultravnc\ultravnc project root\ultravnc\winvnc\winvnc\vncPasswd.h : PASSWD : ToText called
.\vncserver.cpp : client xxx.xxx.xxx.xxx verifiedHost 0 prior to adjustment
.\vncserver.cpp : client xxx.xxx.xxx.xxx verifiedHost 0 after adjustment
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
password authenticationc:\data\ultravnc\ultravnc project root\ultravnc\winvnc\winvnc\vncPasswd.h : PASSWD : ToText called
View-only password authentication.\vncclient.cpp : authentication failed
.\vncserver.cpp : removing unauthorised client
.\vncserver.cpp : RemoveClient() done
.\vncclient.cpp : ~vncClient() executing...
.\vncclient.cpp : deleting socket
.\vsocket.cpp : closing socket
Fri Jun 25 19:22:44 2010
.\HideDesktop.cpp : Restorewallpaper 0
 --El servicio especificado no existe como servicio instalado.
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:47 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:48 2010
.\vsocket.cpp : VSocket() m_pDSMPlugin = NULL 
.\vncsockconnect.cpp : accepted connection from xxx.xxx.xxx.xxx
.\vncserver.cpp : AddClient() started
.\vncclient.cpp : vncClient() executing...
.\vncclient.cpp : TEST 4
.\vncserver.cpp : AddClient() done
.\vncclient.cpp : client connected : xxx.xxx.xxx.xxx (1)
.\vncclient.cpp : DSMPlugin Pointer to socket OK
.\vncclient.cpp : m_ms_logon set to false.\vncclient.cpp : negotiated version
Entered InitAuthenticate
c:\data\ultravnc\ultravnc project root\ultravnc\winvnc\winvnc\vncPasswd.h : PASSWD : ToText called
.\vncserver.cpp : client xxx.xxx.xxx.xxx verifiedHost 0 prior to adjustment
.\vncserver.cpp : client xxx.xxx.xxx.xxx verifiedHost 0 after adjustment
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
password authenticationc:\data\ultravnc\ultravnc project root\ultravnc\winvnc\winvnc\vncPasswd.h : PASSWD : ToText called
View-only password authentication.\vncclient.cpp : authentication failed
.\vncserver.cpp : removing unauthorised client
.\vncserver.cpp : RemoveClient() done
.\vncclient.cpp : ~vncClient() executing...
.\vncclient.cpp : deleting socket
.\vsocket.cpp : closing socket
Fri Jun 25 19:22:50 2010
.\HideDesktop.cpp : Restorewallpaper 0
 --El servicio especificado no existe como servicio instalado.
Fri Jun 25 19:22:52 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:22:54 2010
.\vsocket.cpp : VSocket() m_pDSMPlugin = NULL 
.\vncsockconnect.cpp : accepted connection from xxx.xxx.xxx.xxx
.\vncserver.cpp : AddClient() started
.\vncclient.cpp : vncClient() executing...
.\vncclient.cpp : TEST 4
.\vncserver.cpp : AddClient() done
.\vncclient.cpp : client connected : xxx.xxx.xxx.xxx (1)
.\vncclient.cpp : DSMPlugin Pointer to socket OK
.\vncclient.cpp : m_ms_logon set to false.\vncclient.cpp : negotiated version
Entered InitAuthenticate
c:\data\ultravnc\ultravnc project root\ultravnc\winvnc\winvnc\vncPasswd.h : PASSWD : ToText called
.\vncserver.cpp : client xxx.xxx.xxx.xxx verifiedHost 0 prior to adjustment
.\vncserver.cpp : client xxx.xxx.xxx.xxx verifiedHost 0 after adjustment
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
password authenticationFri Jun 25 19:22:55 2010
c:\data\ultravnc\ultravnc project root\ultravnc\winvnc\winvnc\vncPasswd.h : PASSWD : ToText called
View-only password authentication.\vncclient.cpp : authentication failed
.\vncserver.cpp : removing unauthorised client
.\vncserver.cpp : RemoveClient() done
.\vncclient.cpp : ~vncClient() executing...
.\vncclient.cpp : deleting socket
.\vsocket.cpp : closing socket
Fri Jun 25 19:22:57 2010
.\HideDesktop.cpp : Restorewallpaper 0
 --El servicio especificado no existe como servicio instalado.
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:02 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:07 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:12 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:17 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:22 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:27 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:32 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:37 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:42 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:47 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:52 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:23:57 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:02 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:07 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:12 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:17 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:22 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:27 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:32 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:37 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:42 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:47 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:52 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:24:57 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:02 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:07 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:12 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:17 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:22 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:27 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:32 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:37 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:42 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:47 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:52 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:25:57 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:26:02 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:26:07 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:26:12 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:26:17 2010
.\vncservice.cpp : @@@@@@@@@@@@@ GetCurrentUser - UserNAme found: Administrador 
 --Se está ejecutando la operación de E/S superpuesta.
.\vncmenu.cpp : ########### vncMenu::TIMER TrayIcon 5s hack
Fri Jun 25 19:26:22 2010
.\vncservice.cpp : @@@@@@@@@@@@@ 
B
800
800
Posts: 2338
Joined: 2009-09-09 14:05

Re: tip:could not connect to ......

Post by B »

I am not an expert in this, so I am just guessing.

Maybe it's not an infection at all, but rather that these are simply drive-by exploit scans by hackers or infected machines in those countries? It's not clear to me whether they ever successfully logged in.

If your machine is open to the Internet, and particularly if it's using a default listening port, it's going to get scanned frequently by infected machines elsewhere in the world. Some of these malicious port scans include attempts to connect and log in to known services.

The only thing I'm not clear on is whether this "tray tip" reflection of <i>hopefully</i> failed login attempts is normal, new to version 1.0.8.2, or a reflection of something bad going on.

In other words, I'm no longer inclined to think you're infected?

Maybe a developer can chime in here and explain things better....
jcbm
Posts: 6
Joined: 2010-06-26 12:31

Re: tip:could not connect to ......

Post by jcbm »

Maybe you're right B...

Is there a way to reject all connections except one (my IP)? Or Can I hide vnc service to the public?
redge
1000
1000
Posts: 6797
Joined: 2004-07-03 17:05
Location: Switzerland - Geneva

Re: tip:could not connect to ......

Post by redge »

jcbm
Is there a way to reject all connections except one (my IP)?
yes

[topic=13901][/topic]
Can I hide vnc service to the public?
as my knowledge, no, but you can make it diffult to discover it changing the default port.
UltraVNC 1.0.9.6.1 (built 20110518)
OS Win: xp home + vista business + 7 home
only experienced user, not developer
jcbm
Posts: 6
Joined: 2010-06-26 12:31

Re: tip:could not connect to ......

Post by jcbm »

Thank you redge
jcbm
Posts: 6
Joined: 2010-06-26 12:31

Re: tip:could not connect to ......

Post by jcbm »

Hi again, I still have the same problem, and now, more computers have the same "tips", I hope that with the new version of vnc, this problem will be fixed.
B
800
800
Posts: 2338
Joined: 2009-09-09 14:05

Re: tip:could not connect to ......

Post by B »

Have you tried changing the listening port on the VNC servers? That would make 99.9% of the problem disappear. (Unless you're really infected after all.)
Post Reply