UltraVNC

That's correct, I was forwarding the port to the local ip address of my pc.

No viruses / malware have been found with 3 different scans so I don't think I'm infected - but who knows, I will at some point reinstall my system to be safe. My original settings when this occurred was: PORT 5900 opened on the router, no other ports opened norton firewall was supposed to block it ...

I tried using housecall from trendmicro last night and that also revealed I had no virus / malware. The only port on my router that was opened was 5900 (which because of this I have shut down). Is it possible that somehow they could have tried to initiate an outgoing call through that port? I'll try ...

I was on the machine when it occurred, and I wasn't testing VNC... I only could find the one occurence in the norton log, didn't see anything odd anyplace else. I rescanned my entire computer - norton didn't find anything wrong with it. I would think if it was malware it would attempt to try to ...

It's definitely outbound - which is why I thought it was the vnc server (vnc viewer wasn't running at the time). I looked at TCP view - didn't see anything odd with that. I checked my norton log, it's only happened that one time - here is the exact message: "Network traffice from OWNER-PC matches ...

Right now I just have Ultravnc working internally, I'd like to eventually open it up so I can connect to my computer via the internet. In order for me to do that I know I need to remove the signature from Norton 360 otherwise I won't be able to get through to my box. However wouldn't that make me ...

can someone explain this notification I received from Norton 360 a few days after installing UltraVNC 1.0.9.5:

Risk Name: VNC Large Error Response BO
Attacking computer: 192.168.1.6,5900
Destination: 121.8.103.14, 3789

Why would UltraVNC server try to connect to 121.8.103.14 on port 3789?