Weird App Running???

[MalRic]

I just did a fresh install of Win2K on a frieds computer and its launching an app at startup that I have never seen in all the times I've worked on win2k. The heading on the app is: WinVNC: Current User Properties. This program is asking for a password and is refering to incomming connection. I am afraid is some kind of trojan. Does anyone know what this is? and if its a trojan How do I remove. Please refer to this doc with picture of app:

PS. I just went to the add and remove programs and I have an app installed: mirC that i know i did not installed, could that be it and is it safe to remove?

[AllGamer]

IT is a perfectly safe and normal software

i use it all the time

is a remote control desktop

if you did not install it, some one else did

so, just go to ADD/REMOVE program and un-install it

:t

here you can find out more about it
http://www.uk.research.att.com/vnc/download.html
and maybe get the newest version ;)

[MalRic]

Are you talking about mirC or the app that i submited pic of? I ask because I removed mirC from the add/remove programs and it seems to be gone, however, I am still getting that app asking for pw when I restart. As far as someone else, I just did the fresh install and no one but my self has installed any software, which is why I am concern and even more so now since you said someone else might have. No one at this location has.

[AllGamer]

just follow the link :rolleyes:

[MalRic]

Ok, I do trust your opinion:)

[Ammok]

I had a copy of a VNC program, let me control the mouse and desktop on other peoples pc's so they thought they a ghost in the machine. So, it is a trojan in a way, allowing remote control of other peoples machines.

[AllGamer]

VNC is not a trojan, it's a legit software in the same gategory of pcAnywhere, and Windows Terminal server

:t

[Ammok]

It's a trojan if you don't know it's on your system, legit or otherwise.....:)

[BipolarBill]

Ammok is right. The only difference between a program and a trojan is the user's awareness or lack thereof.

[Bigjakkstaffa]

I used to run VNC on my home network, im just wondering is it limited to lans or is it capable of running over the net :eek:

--Jakk:t

[ShawnD1]

it works over the net. i used VNC to help a buddy setup a forum on his computer :D

[AllGamer]

yeah i use VNC too almost everyday from work to home, and viceversa

also to do TS support for other peoples on other contries

:t

[MalRic]

Let me add to the issue. This program was not installed by me or the owner of the computer. In addition it can't be found in the ADD/REMOVE tool from Win2K. I can however locate it using Reg Cleaner, in which case I do uninstall it but when I restart the system the program re-installs it self again. Basically I am finding it impossible to remove. Also right after I encounter this software Norton detected Backdoor virus which my research says can be used to install programs to allow access into ones computer.:mad:

[BipolarBill]

This wouldn't be a problem if the user had set a decent Admin password. Remote connections are subject to the same rules as local ones. No password or a simple one open the PC up to hackers. They can actually make a new Admin account for themselves and demote the default account to a plain old User if they like.

[MalRic]

That's a good Idea and I did not know that. Thanks I'll have him make that change.:t

[Ammok]

My opinion, if you suspect a comprised pc, and you cannot get rid of of the installation, completely zap it, full reformat and reinstallation and then add anti virus and anti trojan and firewall protection first.

Any machine I come across that has been infected usually gets a real good washing down. Not always necessary but trojans are a funny breed.

Try www.anti-trojan.net for a free (14 days trial) trojan specific scanning software, identifies most and removes some. Worth a go.