Win VNC registry 1

[Hobeau]

hey guys,

Someone has installed VNC on my XP Pro computer without me knowing it. I'm trying to figure out who it was who did it and I thought if I could recover the password it might give me some clues as to whom it could be. Its the free version of VNC so its only 8 bit fixed encryption so I can decrypt the password easily, but the problem is, is that whomever did this was clever enough to change some of the source code so that the location registry entry key for the password was changed so its hidden in my registry somewhere. I've been trying to find a program or something that would help me find an 8 bit binary value in my registry (binary value="XX XX XX XX XX XX XX XX"). Can anyone tell me where I could find such a program or any other suggestions?

 

[petermeachem]

I had something similar except they (the baddies) used Radmin. They also installed a few other programmes, one was some irc thing? So it might be worth your while having a good look round. I subsequently persuaded the owner of the pc to buy a pukka firewall.

http://www.accuflight.com

http://www.lettersdirect.co.uk

http://www.ourhouseinportugal.co.uk/

 

[Hobeau]

Thanx for the reply,

Yeah we have a firewall going to block externally, unfortunately we think there is someone on our internal LAN doing this, so we're trying to figure out who did it so we can deal with this serious security issue. I've been trying to find a registry editor that would allow me to search for 8 bit registry values, but no luck. Anyone know where I could get something like that?

 

[rasETL]

You might find what you are looking for at the following site:

http://www.sysinternals.com/

Hope that helps