Re: Getting rid of WinVNC

From: Alexander (alexander_dei&)
Date: 05/26/03 

Date: Mon, 26 May 2003 08:38:38 -0500

Check to make sure it is explorer.exe and not Explorer .exe (note space
after explorer).
If there is indeed a space before .exe, your pc may have been the target of
a trojan.
If so, then check out SARC.com.

"Yaroslav Bulatov" <bulatov@engr.orst.edu> wrote in message
news:4d642979.0305260122.1009d333@posting.google.com...
> Khayman <khayman_psp@yaho.se> wrote in message
news:<Xns9387572A2BD53khaymanpspyahose@217.209.241.189>...
> > bulatov@engr.orst.edu (Yaroslav Bulatov) wrote in
> > news:4d642979.0305252206.25059dc@posting.google.com:
> >
> > > I have a suspicion that someone had installed WinVNC on my computer
> > > and I'd like suggestions on how I can get rid of it. The reason I
> > > suspect that is because when I shut-down windows I get a dialog box
> > > "Program not responding -- WinVNC tray icon, closing in 10 seconds"
> >
> > Do a 'netstat -an' and look for this line (or similar), if you have it
then
> > VNC is there, listening on the standard port...
> >
> > TCP 0.0.0.0:5800 0.0.0.0:0 LISTENING
> > TCP 0.0.0.0:5900 0.0.0.0:0 LISTENING
> >
> > Get a program called 'fport' and check again if you are unsure..
> >
> > Khay.
>
> OK, I found it. I used TCPview and it showed that I had a connection
> open on port 5800 from explorer.exe Apparently this was WinVNC
> executable renamed to explorer

Quantcast