Re: Windows xp remote control

From: Robert Moir (bofh_at_mvps.org)
Date: 11/30/03 

Date: Sun, 30 Nov 2003 13:15:34 -0000

Sameh Ahmed wrote:
> Hello there
> administrating a network of 400 PCs running XP.
> 3 Cases in which somebody controlled a user machine remotely, mouse
> moving user watching!
> the connect remotely is not enabled, but the remote assistance is.
> Norton antivirus is installed on all machines and updated.
> is there any vulnerability that can do that?
> which software if not the MSN?

There is *no end* of software out there that can do this. WinVNC springs to
mind but there are many many other things that can do this. Rather than us
listing them all and missing a few, I'd strongly suggest that what you need
to do is take an afflicted machine out of service for a few days and compare
it to your "standard" build and see what different processes are running,
and go from there. 

-- 
-- 
Rob Moir
Microsoft MVP for servers & security
http://www.robertmoir.co.uk
"802.11bofh - the *other* power over ethernet standard"

Relevant Pages

  • Remote Desktop + local session
    ... I have two PCs running XP Pro and I have setup RDP between them (its ... Whenever I launch a remote session I get told that there is a local session ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Connecting Remotely
    ... I'd like to be able to connect to a PC on our network either via Remote ... Desktop, Remote Assistance, or any way possible (both PCs running XP ... Allow your account to use Remote Desktop on the host machine. ...
    (microsoft.public.windowsxp.general)
  • Windows xp remote control
    ... administrating a network of 400 PCs running XP. ... Cases in which somebody controlled a user machine remotely, mouse moving ... the connect remotely is not enabled, ...
    (microsoft.public.security)
  • Offer Remote Assistance - "Permission denied" - Windows XP SP2
    ... We are having problems getting "Offer Remote Assistance" to work in our ... Access this computer from the network MYDOMAIN\Domain Admins,MYDOMAIN\Domain ... Back up files and directories Administrators ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Remote desktop over a VPN
    ... I understand the issue to be: you have created VPN ... from SBS to remote network, however you can not VPN to remote network from ... This issue may occur because the ISA Server Firewall Client program does ...
    (microsoft.public.windows.server.sbs)