Ultra VNC SC and vnchooks.dll

[LunchBox]

Greetings,

I never wanted to use U VNC but I been reading that some of use do use it as part a few remote tools. I though I would also add it to my tool box.

I downloaded my sourceforge.
I learned to how make the tiny app that I can give to my client and they can launch as needed (this would be for the ones that do not want a remote tool installed in their PCs).

I my vista test machine, when I launch the exe (SC) the box comes up as it supposed to, then my AV goes crazy telling me I havea RemAdm-VNC located in a temp folder, the actual file name is VNCHOOKS.DLL

My AV is not able to remote it and it tells me that I need to remove it using the program. The reason for Ultra VNC SC is so there is nothing to install.
I know I can remove the file forcefully so removing is not the issue.

My question is why does the file get placed in my PC if the EXE is supposed to be a stand alone?
If it makes my vista AV come up what can I do for my clients.
I know I can use the regular install but I wanted to give this a try.

I googled but everything says is either bad or not bad but it should be removed.

What suggestions do you guys, gals (if any) recommend?


Thank you for your time and support.

[LunchBox]

Upon further investigation I noticed that whatever is detected by the AV is removed automatically after the connection is over.

The questions now is Ultra VNC SC is there a way to make it work without the AV going crazy?

[MrUnknown]

That is up to the AV company. A lot of them have been now searching for "unwanted" applications. I would consider a remote administration tool unwanted on my computer if I didn't know it was there.

It may be hard to explain to your customers, but if they have AV installed and it is detected, you need to tell them to have the AV ignore it. Just let them know that the notice is a good thing, as under normal circumstances they should allow the AV to remove or block it.

[purple_minion]

It's because it allows others access to the computer, much like a hacker might use. There are a lot of false positives that get flagged, many in perfectly good programs that have nothing at all to do with remote access or compromising a system.

[LunchBox]

Thanks Purple. Yeah, I may have to do that. I just want to add another remote tool to my bag of goodies and I figured this should be one of them.

[purple_minion]

Thanks Purple. Yeah, I may have to do that. I just want to add another remote tool to my bag of goodies and I figured this should be one of them.

I agree, it seems very simple from what I read about it a while back, haven't played too much. There is also TightVNC that seems nice, but not as easy as Ultra SC. There is also crossloop that seems to be close to the easiness of single click.

[PCERTtimh]

Many AV programs though do have an allowlist, that you can setup either manually or after the fact to be remember fo later usage. This will then offset that of the message of it being potentially harmful.

An example would be Microsoft's Windows Defender - It will actually give you the option when it finds the program what to do (ignore, remove, or quarantine).

Additional What my company does to assure our clients of remote access programs:

Many clients will ask what that is and once you explain the fact that it is only their computer making sure that they are aware that a remote access program is installed on that particular system they are more relieved.

What I try to stress to people is that any program that allows for remote access can be potentially bad if used incorrectly. That is why the operating system or AV program warns users of that particular (dameware, logmein, single-click, etc.) program being installed.

Hope this helps,