Symantec had some removal instructions at the bottom of the page I gave you:
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.dvldr.html#re movalinstructions Have you tried running through those instructions yet? Regards, Beau -----Original Message----- From: MIME :[EMAIL PROTECTED] [mailto:MIME :[EMAIL PROTECTED] Sent: Tuesday, September 16, 2003 1:27 PM To: [EMAIL PROTECTED] Subject: deloader worm Beau, you were exactly correct. I had Norton running in minimalist mode and hadn't bothered to check the logs. It appears that NAV nabbed a couple of copies of the of the deloader worm a couple of months ago, and a scan with the latest NAV updates comes up clean. However, WinVNC still comes up at boot (at least the splash screen). It must be running as a service, because I can't find it in the startup menu (or anywhere else), and I don't see anything in the task manager that looks like winvnc. There is no tray icon. How the heck do I get it from starting at boot??? I can't even find the darn thing on the HD. I run a search for winvnc and get no results. I realize that this is a legitimate program, and probably harmless in itself. However, it's running on a marginal system that already has fairly taxed resources, and I'd like to get rid of the thing, since I don't forsee using it on this system. Regards, Bob You've been hit with the Deloder worm. Read about it here: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.dvldr.html Regards, Beau _______________________________________________ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list << File: ENVELOPE.TXT >> _______________________________________________ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
