deloader worm

[Beau.Haefke@fedgroup.com]

Symantec had some removal instructions at the bottom of the page I gave you:

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.dvldr.html#re
movalinstructions

Have you tried running through those instructions yet?

Regards,
  Beau

 -----Original Message-----
From: 	MIME :reclark@amaonline.com [mailto:MIME :reclark@amaonline.com] Sent:	Tuesday, September 16, 2003 1:27 PM
To:	vnc-list@realvnc.com
Subject:	deloader worm

Beau, you were exactly correct.  I had Norton running in minimalist mode and
hadn't bothered to check the logs.  It appears that NAV nabbed a couple of
copies of the of the deloader worm a couple of months ago, and a scan with the
latest NAV updates comes up clean.

However,  WinVNC still comes up at boot (at least the splash screen).  It must
be running as a service, because I can't find it in the startup menu (or
anywhere else), and I don't see anything in the task manager that looks like
winvnc.  There is no tray icon.  How the heck do I get it from starting at
boot???  I can't even find the darn thing on the HD.  I run a search for
winvnc and get no results.

I realize that this is a legitimate program, and probably harmless in itself.
However, it's running on a marginal system that already has fairly taxed
resources, and I'd like to get rid of the thing, since I don't forsee using it
on this system.

Regards,

Bob


You've been hit with the Deloder worm.  Read about it here:

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.dvldr.html

Regards,
  Beau
_______________________________________________
VNC-List mailing list
VNC-List@realvnc.com
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list

 << File: ENVELOPE.TXT >>