Hello cookie,
I can only make some suggestions, and possibly add some info that you
might not already know. First, if it showed any version of VNC running and
you don't know what it is - that is a bad thing. VNC, IF it is truly a
variant of VNC, is set of programs that would allow remote access - normally
setup by the owner of the computer for his own use. Before doing anything
else, make sure no-one else in your family, e.g. your husband or wife or...,
actually loaded and uses VNC for their work on that machine. If you didn't
install or run one of the VNC servers, then I would do my best to get rid of
it. Since, it sounds like you tried, and got an error, - as a preliminary
move - I would strongly suggest adjusting your firewall, and trying to block
the program that has this VNC package built in. To this end, I hope you
have a security package that extends the default windows firewall and will
let you look for and block it. Packages like OneCare from MS and others
should provide a means to block both outgoing and incoming traffic to this
program. Next I would at least look to (try to) stop it. Do the three
finger salute (Ctl-Alt-Del) and look for the program in the process list
(select the Process tab to see this list). Stopping the program, if you
happen to be able to identify it in the process list, may be met with any
one of a number of reactions - and will depend on what was loaded by the
rogue software maker. If you can stop it, even only for a short while, try
removing the package then - from within Defender. To be able to do this in
the shortest amount of time possible, I'd leave the panel up in Defender
listing the program and requesting what action to perform on it while you
attempt to stop the rogue program from running. That way you will only have
to return to the defender window and select 'remove all' as quickly as
possible after. Do not, however, be surprised if stopping the program
results in rebooting your machine. That is another unfortunate possibility,
and one which would require more than an email to cover removal. The above
suggestion is only the simplest of possible ways that you might be able to
get past the removal issue. I hope that it works for you. Other than that,
you may have to seek additional software or help from a local guru - someone
you trust (emphasis on trust). If you aren't able to remove it, you should
make every effort to block it with your firewall until you are able to
remove it. To give you a clearer picture, someone with a VNC client, can
connect to a PC with the server running and would have the desktop from your
machine right in front of them as if they were sitting right there in front
of your PC - yet can be anywhere in the world. Likewise, they can
manipulate your machine as if sitting there as well. That is where I would
be quite concerned. It is like letting a stranger rummage through your
house without intervention. So good luck.
BobH
