- Joined
- Apr 29, 2010
- Messages
- 2
- Reaction score
- 0
- Points
- 1
So at my job, we primarily use macs. I had a suspicion I was being watched through VNC either by my boss or possibly thought I had a trojan virus. I had these 3 messages:
4/27/10 1:56:55 PM com.apple.launchd[224] (com.apple.RemoteDesktop.agent[27601]) Stray process with PGID equal to this dead job: PID 28725 PPID 1 AppleVNCServer
4/27/10 1:57:03 PM com.apple.launchd[224] (com.apple.RemoteDesktop.agent[28778]) Stray process with PGID equal to this dead job: PID 28779 PPID 1 AppleVNCServer
4/27/10 1:57:44 PM com.apple.launchd[224] (com.apple.RemoteDesktop.agent[28784]) Stray process with PGID equal to this dead job: PID 28785 PPID 1 AppleVNCServer
Does this mean someone was viewing me through AppleVNC? I was able to disable it after that, but I don't know if I'm just being paranoid. It looked like VNC was taking up a huge chunk of memory at the time. I had suspicions because my mouse randomly was moving and even resized a window.So after a couple days of me turning off Remote Management I recieved these messages today on the console:
4/29/10 4:44:18 PM org.x.startx[3796] AllocNewConnection: client index = 6, socket fd = 17
4/29/10 5:11:17 PM login[6064] USER_PROCESS: 6064 ttys000
4/29/10 5:11:19 PM login[6064] DEAD_PROCESS: 6064 ttys000
Do these refer to someone trying to login and seeing what I'm doing again, or are these just normal messages. (During this time frame all I was using was matlab and safari). Basically, besides VNC, are there any other ways someone can watch what you are doing on screen if you turn off remote management. Any information would be appreciated.
4/27/10 1:56:55 PM com.apple.launchd[224] (com.apple.RemoteDesktop.agent[27601]) Stray process with PGID equal to this dead job: PID 28725 PPID 1 AppleVNCServer
4/27/10 1:57:03 PM com.apple.launchd[224] (com.apple.RemoteDesktop.agent[28778]) Stray process with PGID equal to this dead job: PID 28779 PPID 1 AppleVNCServer
4/27/10 1:57:44 PM com.apple.launchd[224] (com.apple.RemoteDesktop.agent[28784]) Stray process with PGID equal to this dead job: PID 28785 PPID 1 AppleVNCServer
Does this mean someone was viewing me through AppleVNC? I was able to disable it after that, but I don't know if I'm just being paranoid. It looked like VNC was taking up a huge chunk of memory at the time. I had suspicions because my mouse randomly was moving and even resized a window.So after a couple days of me turning off Remote Management I recieved these messages today on the console:
4/29/10 4:44:18 PM org.x.startx[3796] AllocNewConnection: client index = 6, socket fd = 17
4/29/10 5:11:17 PM login[6064] USER_PROCESS: 6064 ttys000
4/29/10 5:11:19 PM login[6064] DEAD_PROCESS: 6064 ttys000
Do these refer to someone trying to login and seeing what I'm doing again, or are these just normal messages. (During this time frame all I was using was matlab and safari). Basically, besides VNC, are there any other ways someone can watch what you are doing on screen if you turn off remote management. Any information would be appreciated.