deloader worm

[Bob Clark]

Beau, you were exactly correct.  I had Norton running in minimalist mode and
hadn't bothered to check the logs.  It appears that NAV nabbed a couple of
copies of the of the deloader worm a couple of months ago, and a scan with the
latest NAV updates comes up clean.

However,  WinVNC still comes up at boot (at least the splash screen).  It must
be running as a service, because I can't find it in the startup menu (or
anywhere else), and I don't see anything in the task manager that looks like
winvnc.  There is no tray icon.  How the heck do I get it from starting at
boot???  I can't even find the darn thing on the HD.  I run a search for
winvnc and get no results.

I realize that this is a legitimate program, and probably harmless in itself.
However, it's running on a marginal system that already has fairly taxed
resources, and I'd like to get rid of the thing, since I don't forsee using it
on this system.

Regards,

Bob


You've been hit with the Deloder worm.  Read about it here:

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.dvldr.html

Regards,
  Beau