Was hacked today

Discussion in 'Network questions and troubleshooting' started by T1tan, May 23, 2016.

  1. T1tan

    T1tan Ancient Guru

    Messages:
    2,910
    Likes Received:
    13
    GPU:
    RTX 4090 24GB GDDR
    Hello Gurus,

    ... I was watching game of thrones a couple of hours ago in my living room via HBO GO. I have a password protected VNC client I use on my iphone to connect to my PC. To be honest with you guys I had a pirated version of a very popular VNC server/host software installed. I've had the copy for over a year with no issues.

    So my and a girl I had over were watching GOT and like I said I use my VNC app to connect to my PC to fast forward, change volume etc and all of a sudden some scripts start running in the background (my TV is connected to my PC via HDMI) I can see the VLC player kind of jiggling and stuttering around. This lasted for about ten seconds.. and then they opened note pad and typed something along the line of "hacked by czteam :) thank you" they opened and closed it so quickly, it might have been a script or something but I am not 100% sure if it was "czteam" but the typing did have "team" in it. The person I had over doesn't remember the name either but she is freaked out this happened..

    First thing I did is unplug my modem and router
    - ran MAB scan
    - uninstalled VNC server client and duckdns...
    - cleared all system cache (I hope it didn't clear log files, honestly I don't even know how to read TCIP logs anyways)
    - changed all of my important PWs
    - reset my router settings to factory default (all the open ports and crap are all gone now)
    - flushed DNS cache
    - reset host files
    - installed Zonealarm maximum security firewall 30 day free trial (please let me know if there is something better, I don't care how much it costs)
    - hid my SSID



    this is what MAB found

    Registry Values: 1
    PUP.Optional.FasterWeb, HKLM\SOFTWARE\WOW6432NODE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|jid1-xNAj4KGyf5wyhg@jetpack, C:\Program Files (x86)\Faster Web\faster-web.xpi, , [1277f8e01c7d3105e439ffdd8d7616ea]


    Folders: 1
    PUP.Optional.Amonetize, C:\ProgramData\1454640166, , [2168b02860397cbacc78cf0e12f1a25e],

    Files: 1
    PUP.Optional.Amonetize, C:\ProgramData\1454640166\S9.ZIP.DL, , [2168b02860397cbacc78cf0e12f1a25e],

    -----------------



    Would there by any possible way of finding out who connected to my PC? via ISP or log files etc. any advice or suggestions would be very greatly appreciated.

    Thank you guys in advance, I am super paranoid right now, I've never actually seen this happen with my own eyes
     
  2. T1tan

    T1tan Ancient Guru

    Messages:
    2,910
    Likes Received:
    13
    GPU:
    RTX 4090 24GB GDDR
    .......

    guys I completely played myself...

    .......


    I am speechless right now...

    I am so embarrassed right now lol..

    I remember that I had two version of GOT.. some reason my volume on HBO GO was not loud enough on my TV. So I downloaded a copy from a website... and the message on the notepad was actually in the video itself...

    Yup.. I deserve to be made fun of. Definitely just uber failed...

    Sorry to waste your time :x
     
  3. jbmcmillan

    jbmcmillan Guest

    Messages:
    2,760
    Likes Received:
    277
    GPU:
    Gigabyte G1 GTX970
    Ok I must admit I laughed. sorry :funny:
     
  4. BuildeR2

    BuildeR2 Ancient Guru

    Messages:
    3,219
    Likes Received:
    443
    GPU:
    ASUS 4090 TUF OG OC
    Hah, I just finished reading the whole post and was starting to type a reply. For my time and stress, all you need to do is buy me a GTX1080. :nerd:
     

  5. vase

    vase Guest

    Messages:
    1,652
    Likes Received:
    2
    GPU:
    -
    apart from the funny outcome.

    why would you use a "pirated" vnc tool?

    there are so many free fully functional vnc servers out there and just as much tools for android/ios to connect to your server.
     
  6. fantaskarsef

    fantaskarsef Ancient Guru

    Messages:
    15,759
    Likes Received:
    9,652
    GPU:
    4090@H2O
    HBO Go, pirated episodes and chill? :D
     
  7. Extraordinary

    Extraordinary Guest

    Messages:
    19,558
    Likes Received:
    1,638
    GPU:
    ROG Strix 1080 OC
    Best wake up/coffee story of the day :D
     
  8. XxTeHBroomZxX

    XxTeHBroomZxX Guest

    Messages:
    1
    Likes Received:
    0
    GPU:
    gtx 960
    Same thing happened to me too, i ended up reinstalling my os and half of my steam games to get rid of it, and only realised it wasnt real when i saw this thread, kicking myself right now
     
  9. Extraordinary

    Extraordinary Guest

    Messages:
    19,558
    Likes Received:
    1,638
    GPU:
    ROG Strix 1080 OC
    We're beggars and blighters and ne'er do-well cads,
    Drink up me 'earties, yo ho.
    Aye, but we're loved by our mommies and dads,
    Drink up me 'earties, yo ho.
    Yo ho, yo ho, a pirate's life for me.
     
  10. fantaskarsef

    fantaskarsef Ancient Guru

    Messages:
    15,759
    Likes Received:
    9,652
    GPU:
    4090@H2O
    Arrrr?
     

  11. Extraordinary

    Extraordinary Guest

    Messages:
    19,558
    Likes Received:
    1,638
    GPU:
    ROG Strix 1080 OC
  12. fantaskarsef

    fantaskarsef Ancient Guru

    Messages:
    15,759
    Likes Received:
    9,652
    GPU:
    4090@H2O
    [​IMG]

    My kind of (Canadian <3) pirate :banana:
     
  13. Extraordinary

    Extraordinary Guest

    Messages:
    19,558
    Likes Received:
    1,638
    GPU:
    ROG Strix 1080 OC
  14. CalculuS

    CalculuS Ancient Guru

    Messages:
    3,283
    Likes Received:
    504
    GPU:
    GTX 1660Ti
    whahahahaa
     
  15. T1tan

    T1tan Ancient Guru

    Messages:
    2,910
    Likes Received:
    13
    GPU:
    RTX 4090 24GB GDDR
    I use the enterprise version of a popular VNC client because it has more features, however if there is one you recommend I will def try it out (still haven't reinstalled VNC or DNS routing)

    The funny/sad part is that I told my roomate to change all of his passwords on his PC lol. I am to embarrassed to admit to him what happened. He thought we got hacked and is still very concerned. I will never tell him! haha
     

  16. cyclone3d

    cyclone3d Master Guru

    Messages:
    419
    Likes Received:
    1
    GPU:
    ASUS R9 390
    You could have lots of fun with this.

    Since it sounds like you have multiple PCs, what you do is this.

    While he is away, install UltraVNC server on his machine and the client on your machine. Get it working and then have some fun.

    When he is there, remote into his machine (nothing will pop up on his end at all), and screw around with him.

    Move the mouse around, open web pages, type in Notepad, etc.

    Mwahahahaha :evilgrin:
     
  17. T1tan

    T1tan Ancient Guru

    Messages:
    2,910
    Likes Received:
    13
    GPU:
    RTX 4090 24GB GDDR
    I will do that this weekend :) I'll use hirens and login to his PC and mess with him haha. He's the kinda guy that irons his shirts everyday before work.. and pays his rent two weeks early (does not like surprises). Just gotta look up how to hide the VNC server processes so there is no notifications or icons

    :)
     
  18. Mikcannon

    Mikcannon Guest

    Messages:
    218
    Likes Received:
    24
    GPU:
    Asus GTX980 Strix w/c
    Dunno about the pirate but that beer looks good.

    Oh yeah, hello all. Been busy for the last .... maybe a year. Or I'm just to old to remember stuff.
    And I do like funny stories.
     
  19. Marringu

    Marringu Guest

    Messages:
    41
    Likes Received:
    0
    GPU:
    Asus 1070 OC
    This is hilarious! I'm glad you didn't get hacked after all. ;)
     

Share This Page