On Thu Nov 09, 2006 at 08:54:52PM +0200, Craig Fitt wrote:
> Hi Guys
>
> If anyone can help it would be much appreciated.
>
> I had VNC free edition running on a server of one of my clients, about
> 1month ago, I noticed someone was logging in and running scripts getting
> past all passwords, it was also happening to other clients of mine. The
task
> were like get wintask32.exe etc etc.
>
Presumably this was on version 4.1 or 4.1.1?
> I know have a problem on the one server where when I startup windows after
> about 5min a script runs that I cant even see, and every 3-4 hours a
process
> starts called vnc_bypath.exe which hogs my bandwidth and I either need to
> restart the server or end the process and then everythings work on the
> internet again.
>
> Is there anyway to resolve this?
>
Well, to be quite frank, the only way you can be sure you've got rid of
any malware on there is to backup, wipe & reinstall. You can then
restore any needed files (making sure to virus scan them!).
If this is not an option, then you'll have to boot from CD or another
disk (to prevent any malware loading at bootup), then run whatever virus
scanners, rootkit checkers, spyware removers, etc. you can find.
HTH,
Robin
--
___
( ' } | Robin Hill <[EMAIL PROTECTED]> |
/ / ) | Little Jim says .... |
// !! | "He fallen in de water !!" |
[demime 1.01d removed an attachment of type application/pgp-signature]
_______________________________________________
VNC-List mailing list
VNC-List@realvnc.com
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list
