Antwort: VNC + Mcaffee Virusscan

James ''Wez'' Weatherall jnw22 "at" cam.ac.uk
Thu, 08 Feb 2001 12:54:52 +0000


> Like you can see it's Mcafee is telling me that it's not infected by any
> virus but it IS a backdoor virus.

> szActualMessage=The file C:\Program Files\ORL\VNC\WinVNC.exe is infected
                                                               ^^^^^^^^^^^
> with New BackDoor Known Virus.
  ^^^^

What is happening is that the virus checker is matching the WinVNC.exe
executable against a heuristic for the types of program that are likely to
be backdoor viruses.  This means that it thinks the executable contains a
backdoor-type virus, even though it doesn't.

The quick-fix is to disable heuristic virus detection.  A better fix is to
tell McAfee, so they can update their heuristic.

Cheers,

James "Wez" Weatherall
--
          "The path to enlightenment is /usr/bin/enlightenment"
Laboratory for Communications Engineering, Cambridge - Tel : 766513
AT&T Labs Cambridge, UK                              - Tel : 343000
---------------------------------------------------------------------
To unsubscribe, send a message with the line: unsubscribe vnc-list
to majordomo "at" uk.research.att.com
See also: http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------