yairRubin
Joined: 10 Apr 2008 |
Posts: 0 |
Location: Israel |
|
 |
Posted: Thu Apr 10, 2008 6:08 am |
|
 |
 |
 |
 |
Hi all,
I get :
C:\Program Files\RealVNC\VNC4\wm_hooks.dll: PUA.RAT.VNC-12 FOUND
C:\Program Files\RealVNC\VNC4\winvnc4.exe: PUA.RAT.VNC-5 FOUND
in the scan report. I have two adjacent computers. On one of them I have a Real VNC server service running
(version 4.1.2) and on the other computer a Win2VNC application (which uses the Real VNC server
on the other computer to share a keyboard and mouse for the two computers).
On the one running the Win2VNC I get :
C:\Program Files\RealVNC\VNC4\vncconfig.exe: PUA.RAT.VNC-6 FOUND
C:\Program Files\RealVNC\VNC4\vncviewer.exe: PUA.RAT.VNC-4 FOUND
C:\Program Files\RealVNC\VNC4\winvnc4.exe: PUA.RAT.VNC-5 FOUND
C:\Program Files\RealVNC\VNC4\wm_hooks.dll: PUA.RAT.VNC-12 FOUND
C:\Program Files\UltraVNC\vnchooks.dll: PUA.RAT.VNC-25 FOUND
in the scan report.
Is it possible that Real VNC contains known viruses, or is that a false alarm ?
|
|
b0ne
Joined: 26 Oct 2006 |
Posts: 0 |
|
|
 |
Posted: Thu Apr 10, 2008 1:38 pm |
|
 |
 |
 |
 |
PUA is potentially unwanted application. There are several trojans out in the wild which re-use VNC components to provide backdoor access to a computer after it is infected. So it is more just a warning, if the user was unaware that VNC was on their computer, they may want to remove it.
If you search the forum, you'll find threads which talk about how to whitelist those files.
|
|