Infection Of Windows Through Remote Access/Remote Desktop

bej

New member
Power User
Local time
10:57 AM
Messages
325
Location
NV, Amerika
This morning, I heard a nationally syndicated computer expert state that some Chinese hackers were "getting into" Windows based computers through "Remote Access/Remote Desktop" even if the service is turned off. According to the guru, "They will turn it on for you."
Being very concrete, as well as, somewhat dull concerning computers, I find this hard to believe. Could someone, in layman's terms, tell me the circumstances needed that would allow a hacker to take control of someone's system when a necessary service is turned off ??
 

My Computer My Computer

At a glance

Windows 7 Home Pro SP1 64bitIntel Xeon E-3 1240v28GBNVIDIA 300
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Home Built
OS
Windows 7 Home Pro SP1 64bit
CPU
Intel Xeon E-3 1240v2
Motherboard
HP
Memory
8GB
Graphics Card(s)
NVIDIA 300
Sound Card
Onboard
Monitor(s) Displays
Hanns G 25"
Screen Resolution
1920x1080
Hard Drives
Hitachi 2GB
PSU
Seasonic 430W
Case
Antec
Cooling
Stock
Keyboard
Logitech
Mouse
Logitech
Internet Speed
5MB
Easy to do and best NOT described here.
 

My Computer My Computer

At a glance

Win 8 Release candidate 8400[email protected]4 gigsNvidia 9600M
Computer Manufacturer/Model Number
HP Pavillion dv-7 1005 Tx
OS
Win 8 Release candidate 8400
CPU
[email protected]
Memory
4 gigs
Graphics Card(s)
Nvidia 9600M
Sound Card
HD built-in
Monitor(s) Displays
17" Wxga
Screen Resolution
1440x900
Cooling
none
Internet Speed
45Mb down 5Mb up
Understand !!!
 

My Computer My Computer

At a glance

Windows 7 Home Pro SP1 64bitIntel Xeon E-3 1240v28GBNVIDIA 300
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Home Built
OS
Windows 7 Home Pro SP1 64bit
CPU
Intel Xeon E-3 1240v2
Motherboard
HP
Memory
8GB
Graphics Card(s)
NVIDIA 300
Sound Card
Onboard
Monitor(s) Displays
Hanns G 25"
Screen Resolution
1920x1080
Hard Drives
Hitachi 2GB
PSU
Seasonic 430W
Case
Antec
Cooling
Stock
Keyboard
Logitech
Mouse
Logitech
Internet Speed
5MB
This morning, I heard a nationally syndicated computer expert state that some Chinese hackers were "getting into" Windows based computers through "Remote Access/Remote Desktop" even if the service is turned off. According to the guru, "They will turn it on for you."
Being very concrete, as well as, somewhat dull concerning computers, I find this hard to believe. Could someone, in layman's terms, tell me the circumstances needed that would allow a hacker to take control of someone's system when a necessary service is turned off ??


Forum Rules and Information > General Rules >
6. No discussions of hacking someones system, network, password, etc.

FYI.
http://www.sevenforums.com/general-discussion/8-forum-rules-info-please-read.html#post15
 

My Computer My Computer

At a glance

Win 7 Ultimate 64-bit. SP1.Intel i7 -720QM.[1.6GHz Turbo Boost 2.8GHz. 6...8 DDR 3 RAM. 1066MHZATI 1024 MB. DDR3. Radeon HD5650
Computer Manufacturer/Model Number
LAPTOP. HP Pavilion dv7-4010TX .
OS
Win 7 Ultimate 64-bit. SP1.
CPU
Intel i7 -720QM.[1.6GHz Turbo Boost 2.8GHz. 6MB Cache.]
Memory
8 DDR 3 RAM. 1066MHZ
Graphics Card(s)
ATI 1024 MB. DDR3. Radeon HD5650
Monitor(s) Displays
17.3" High Definition Brightview LCD. LED Backlit.
Screen Resolution
1600 x 900.
Hard Drives
640GB
Case
Laptop / notebook.
Mouse
Logitech Anywhere mouse. MX.
Internet Speed
ADSL [ but too slow ]

My Computer My Computer

At a glance

Win 8 Release candidate 8400[email protected]4 gigsNvidia 9600M
Computer Manufacturer/Model Number
HP Pavillion dv-7 1005 Tx
OS
Win 8 Release candidate 8400
CPU
[email protected]
Memory
4 gigs
Graphics Card(s)
Nvidia 9600M
Sound Card
HD built-in
Monitor(s) Displays
17" Wxga
Screen Resolution
1440x900
Cooling
none
Internet Speed
45Mb down 5Mb up
Its not actually possible to do. Well as long as you are behind a router. Almost all consumer routers block outbound Windows network services and all unrequested network connections. I think the key piece of information you are missing is that the attackers do not turn these services on themselves, they get a user to do it. This happens via a Social Engineering attack, the currently popular tactic is claiming to be from Microsoft Support dead calling you out of the blue.

There are a few users here that have been dubbed into this kind of attack.
 

My Computer My Computer

At a glance

Windows 10 Pro (x64)Intel Core i7-3930K (3.2GHz - 4.5GHz)4x Samsung 4GB PC3-12800 DDR3 (16GB 1600MHz)Nvidia Geforce GTX 690
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Alienware Aurora ALX R4
OS
Windows 10 Pro (x64)
CPU
Intel Core i7-3930K (3.2GHz - 4.5GHz)
Motherboard
Alienware Aurora-R4 x79
Memory
4x Samsung 4GB PC3-12800 DDR3 (16GB 1600MHz)
Graphics Card(s)
Nvidia Geforce GTX 690
Sound Card
SteelSeries Siberia Elite
Monitor(s) Displays
Dell UltraSharp U3011
Screen Resolution
2560x1600
Hard Drives
Samsung 850 Pro 256 GB, Seagate 1TB Desktop Hybrid HDD, 2x Western Digital 4TB Green HDD
PSU
875W Some Dell PSU <.<
Case
Alienware Aurora ALX
Cooling
Custom Liquid Cooling (EK CPU & GPU blocks) dual EK 480RAD
Keyboard
Logitech G710+ Mechanical
Mouse
Logitech G700s
Internet Speed
Verizon Fios (50 mbps average)
Other Info
Server: Intel NUC D54250WYK: i5-4250U, 16GB, 256 GB mSATA, Windows Server 2012 R2
Back
Top