loder/deloder_loads_vnc_password
.pdf
Message: 1
From: "James ''Wez'' Weatherall" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Subject: Re: deloader worm
Date: Wed, 17 Sep 2003 12:20:49 +0100
---
However, WinVNC still come
---
However, WinVNC still comes up at boot (at least the splash screen). It
must be running as a service, because I can't find it in the startup menu
(or anywhere else), and I don't see anything in the task manager that looks
like winvnc. There is no tray icon. How the heck do I get it from sta
> Have you tried running through those instructions yet?
>
> Regards,
> Beau
Yeah, did all that, and the splash screen still came up on boot.
> check your tasklist for explorer.exe, see if it's there twice...
> to remove it, download ANY vnc-server, run it like this;
> winvnc -kill
> winvnc -r
PROTECTED] [mailto:MIME :[EMAIL PROTECTED] Sent: Tuesday,
September 16, 2003 1:27 PM
To: [EMAIL PROTECTED]
Subject:deloader worm
Beau, you were exactly correct. I had Norton running in minimalist mode and
hadn't bothered to check the logs. It appears that NAV nabbed a coup
Beau, you were exactly correct. I had Norton running in minimalist mode and
hadn't bothered to check the logs. It appears that NAV nabbed a couple of
copies of the of the deloader worm a couple of months ago, and a scan with the
latest NAV updates comes up clean.
However, WinVNC still com