The macosxhints Forums

The macosxhints Forums (http://hintsforums.macworld.com/index.php)
-   Applications (http://hintsforums.macworld.com/forumdisplay.php?f=5)
-   -   My Mac is hacked by OSXvnc server? (http://hintsforums.macworld.com/showthread.php?t=98014)

cwtnospam 01-21-2009 09:36 PM

Quote:

Originally Posted by Marsh (Post 514697)
With my job I really can't do this until the weekend. I have found the VineServer in App support and deleted it. Now I cannot log in from my iphone. That's good. I want to put my computer to sleep and use a password to wake it up. Do I need to change my master admin account password to accomplish this? If I do that, what other complications will it cause? Thanks.

You're not reading correctly. You don't need to put your computer to sleep. YOU NEED TO SHUT IT DOWN! Boot it up again on the weekend when you're ready to backup your files, wipe the entire system, reinstall system software and applications from their installer disks, and then restore your data files. In the mean time, use another computer.

Marsh 01-22-2009 12:28 AM

Thanks the advice. I think I stopped the peeping by deleting the VineServer, Deleting the VNC log and putting up some more security. When I do connect my computer to the internet and open console, I get this message every 10 seconds:
1/21/09 9:24:10 PM com.apple.launchd[119] (VineServer[1634]) open("/Library/Logs/VineServer.log", ...): Permission denied
1/21/09 9:24:10 PM com.apple.launchd[119] (VineServer[1634]) open("/Library/Logs/VineServer.log", ...): Permission denied
1/21/09 9:24:10 PM com.apple.launchd[119] (VineServer[1634]) posix_spawnp("/Library/Application Support/VineServer/OSXvnc-server", ...): No such file or directory
1/21/09 9:24:10 PM com.apple.launchd[119] (VineServer[1634]) Exited with exit code: 1
1/21/09 9:24:10 PM com.apple.launchd[119] (VineServer[1634]) Exited with exit code: 1
1/21/09 9:24:10 PM com.apple.launchd[119] (VineServer) Throttling respawn: Will start in 10 seconds

hayne 01-22-2009 01:08 AM

You don't seem to get it that if your computer has been compromised, you need to erase everything that is there and start fresh - not try to fix the symptoms.

Marsh 01-22-2009 12:57 PM

I WILL ERASE and reinstall ----- BUT, in the interim in case anyone else has this problem. To stop the Vine Server from constantly trying to connect every 10 seconds, I followed these instructions and now it is not doing it. http://discussions.apple.com/thread....8933&tstart=85

Every incident of hacking corresponded to a Vine Server breach in console. By deleting VineServer, it's log files, and the LaunchDaemons and Agents... my computer is no longer being hacked - FOR NOW. I will reinstall this weekend just to be sure. Thanks.


All times are GMT -5. The time now is 01:41 PM.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.
Site design © IDG Consumer & SMB; individuals retain copyright of their postings
but consent to the possible use of their material in other areas of IDG Consumer & SMB.