Tue Sep 16 19:33:01 2003
Symantec had some removal instructions at the bottom of the page I gave you:
Have you tried running through those instructions yet?
From: MIME :firstname.lastname@example.org [mailto:MIME :email@example.com] Sent: Tuesday, September 16, 2003 1:27 PM
Subject: deloader worm
Beau, you were exactly correct. I had Norton running in minimalist mode and
hadn't bothered to check the logs. It appears that NAV nabbed a couple of
copies of the of the deloader worm a couple of months ago, and a scan with the
latest NAV updates comes up clean.
However, WinVNC still comes up at boot (at least the splash screen). It must
be running as a service, because I can't find it in the startup menu (or
anywhere else), and I don't see anything in the task manager that looks like
winvnc. There is no tray icon. How the heck do I get it from starting at
boot??? I can't even find the darn thing on the HD. I run a search for
winvnc and get no results.
I realize that this is a legitimate program, and probably harmless in itself.
However, it's running on a marginal system that already has fairly taxed
resources, and I'd like to get rid of the thing, since I don't forsee using it
on this system.
You've been hit with the Deloder worm. Read about it here:
VNC-List mailing list
To remove yourself from the list visit:
<< File: ENVELOPE.TXT >>