T
tlum
I ran it and it freaked me out. 3 threats, how could that
be! I'm an SA. The only worms, viruses, and spyware I have
are in my sand box and I know about all of them.
Good thing I know something about what I'm looking at and
I decided to look at what it was having trouble with
rather than just blindly letting it reap havoc with my
computer.
InstSrv (Trojan) turned out to be the harmless instsrv.exe
tool in the MICROSOFT WINDOWS RESOURCE KIT that allows you
to register an .exe application to run as a service.
WinLog (Trojan) turned out to be the harmless srvany.exe
in the MICROSOFT WINDOWS RESOURCE KIT that allows
registered .exe applications to run as a service.
Cyanure (RAT) turned out to be the remote.exe application
in the MICROSOFT WINDOWS 2000 SUPPORT TOOLS that allows
you to establish remote command line access between a
client and server.
You would think that Microsoft could at least manage not
to identify its own software as malware. It's troubling to
think that in the hands of inexperienced users this thing
might go fourth and gobble up critical O/S files. This
thing is not ready for users who cannot make
recommendations on their own. It's nice that it flags
potential trouble, but is currently in a state where an
experienced SA must be making the final informed decision
since you may or may not actually have the problem that it
says that you have. It's probably safe to say, though,
that it will eliminate the threat - a system that won't
function really isn't a threat to anyone.
be! I'm an SA. The only worms, viruses, and spyware I have
are in my sand box and I know about all of them.
Good thing I know something about what I'm looking at and
I decided to look at what it was having trouble with
rather than just blindly letting it reap havoc with my
computer.
InstSrv (Trojan) turned out to be the harmless instsrv.exe
tool in the MICROSOFT WINDOWS RESOURCE KIT that allows you
to register an .exe application to run as a service.
WinLog (Trojan) turned out to be the harmless srvany.exe
in the MICROSOFT WINDOWS RESOURCE KIT that allows
registered .exe applications to run as a service.
Cyanure (RAT) turned out to be the remote.exe application
in the MICROSOFT WINDOWS 2000 SUPPORT TOOLS that allows
you to establish remote command line access between a
client and server.
You would think that Microsoft could at least manage not
to identify its own software as malware. It's troubling to
think that in the hands of inexperienced users this thing
might go fourth and gobble up critical O/S files. This
thing is not ready for users who cannot make
recommendations on their own. It's nice that it flags
potential trouble, but is currently in a state where an
experienced SA must be making the final informed decision
since you may or may not actually have the problem that it
says that you have. It's probably safe to say, though,
that it will eliminate the threat - a system that won't
function really isn't a threat to anyone.