RealVNC

VNC (Virtual Network Computing) software makes it possible to view and fully-interact with one computer from any other computer or mobile device anywhere on the Internet. It is remote control software which allows you to view and interact with one computer (the 'server') using a simple program (the 'viewer') on another computer anywhere on the Internet. The two computers don't even have to be the same type, so for example you can use VNC to view an office Linux machine on your Windows PC at home. VNC is freely and publicly available and is in widespread active use by millions throughout industry, academia and privately.0

General information:

Malware Name: RealVNC
Malware Type: Commercial Remote Control
Company Name: RealVNC
Company URL: http://www.realvnc.com/
Threat Level: Low Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

It commercially develops, enhance and promote VNC, the innovative remote access software with a widespread international user base. VNC (Virtual Network Computing) software makes it possible to view and fully-interact with one computer from any other computer or mobile device anywhere on the Internet. VNC software is cross-platform, allowing remote control between different types of computer. For ultimate simplicity, there is even a Java viewer, so that any desktop can be controlled remotely from within a browser without having to install software.

Spyware Description:

VNC (Virtual Network Computing) software makes it possible to view and fully-interact with one computer from any other computer or mobile device anywhere on the Internet. It is remote control software which allows you to view and interact with one computer (the 'server') using a simple program (the 'viewer') on another computer anywhere on the Internet. The two computers don't even have to be the same type, so for example you can use VNC to view an office Linux machine on your Windows PC at home. VNC is freely and publicly available and is in widespread active use by millions throughout industry, academia and privately.0

Characteristics/Symptoms:

    -> It is a network application that allows to manage and control PCs or networks from a remote location. -> It allows to access another computer without explicit authorization. -> It can also be used to monitor and steal information from the remote computer -> Slows down the performance of PC0

Additional information might be found here:

google Search at Google for RealVNC
bing Search at Bing for RealVNC
yahoo Search at Yahoo for RealVNC

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\RealVNC\VNC4\logmessages.dll 6632 Application Extension
C:\Program Files\RealVNC\VNC4\unins000.dat 5665 DAT File
C:\Program Files\RealVNC\VNC4\winvnc4.exe 439248 Application

Folder information Created after Installation:

Folder Location
C:\Documents and Settings\All Users\Start Menu\Programs\RealVNC\VNC Viewer 4
C:\Program Files\RealVNC\VNC4

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\RealVNC_is1 Changed
HKEY_LOCAL_MACHINE \SOFTWARE\RealVNC\WinVNC4 QueryConnect
HKEY_LOCAL_MACHINE \SOFTWARE\RealVNC\WinVNC4 SecurityTypes