Sample already sent to AVERT, thnx all you guys who thought allong with me !
Regards
Maikel van Mierlo
-----Original Message-----
From: Kieran Coughlan [mailto:[EMAIL PROTECTED]]
Sent: Thursday, February 08, 2001 2:05 PM
To: '[EMAIL PROTECTED]'
Subject: RE: Antwort: VNC + Mcaffee Virusscan
Folks,
Why no-one checked the McAfee site before this is a bit of a mystery.
This is what it has to say about "New Backdoor":
Virus Name
New BackDoor
Date Added
8/15/00 12:52:07 PM
Virus Characteristics
This is a heuristic detection which indicates a file is possibly a new
BackDoor or AOL password-stealing trojan. Send a sample to AVERT for
analysis.
See that: a _heuristic_ detection. It's not saying that it is a backdoor
- it just looks like one. Switch off heuristic detection (of
questionable value anyway IMHO) and all should be fine.
KC
> -----Original Message-----
> From: Maikel van Mierlo [SMTP:[EMAIL PROTECTED]]
> Sent: Thursday, February 08, 2001 12:25 PM
> To: '[EMAIL PROTECTED]'
> Subject: RE: Antwort: VNC + Mcaffee Virusscan
>
> If this is true what you say , then why does another "brand new this
> morning
> downloaded" version of TridiaVNC get the same result ? ( after i
> deleted the
> WinVNC.exe.vir )
> For your info , i'm using WINVNC on all my workstation and Servers (
> +\- 500
> workstations and 35 servers ) i automaticly update my virusdefinations
> and
> until yesterday i never had any problem. Now on each and every machine
> wich
> get the new virus definitions Mcafee tells met that WinVNC.exe is a
> backdoor
> virus.
>
> My idea of this whole problem is that someone at mcaffee's thinks that
> VNC
> is a backdoor virus like Back Orifice.
> Like you can see it's Mcafee is telling me that it's not infected by
> any
> virus but it IS a backdoor virus.
>
> But if i'm the only one having this problem i just don't get it.
---------------------------------------------------------------------
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------
This message has been checked for all known viruses by KPN IV-Scan,
Powered by MessageLabs.
For further information visit:
http://www.veiliginternet.nl
This message has been checked for all known viruses by KPN IV-Scan,
Powered by MessageLabs.
For further information visit:
http://www.veiliginternet.nl
---------------------------------------------------------------------
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------
