| Author |
Message |
![[Post New]](/Sysforums/templates/default/images/icon_minipost_new.gif) 07/10/2011 13:43:41
|
Croatian
SysAider
Joined: 21/07/2008
Messages: 12
Offline
|
Dear Ilient,
We are using the latest and greatest SysAid v8.1.02 Pro Plus Edition. All of a sudden within the last week the Malwarebytes is showing a spyware threat warning about the VNCHOOKS.DLL file, which is a part of your VNC based remote desktop software package, on all of my remote controlled workstations and servers as well as my own SysAid Admin Tool equipped computers. This is very annoying as I do believe deep in my heart that your software has no ill intentions on spying on people's passwords, as the Malwarebytes warning message suggests. Thankfully I can just tell it to ignore, but this pops up every single time an anti-virus scan is performed or, which is even more embarrassing, every time I try to remote into a client's computer who has Malwarebytes installed. They receive the warning from Malwarebytes that says they are infected by this password spyware. I know this is not your problem because you're not the anti-virus company that has mislabeled your own software as a threat, essentially having a false positive, but after simply searching using Google for VNCHOOKS.DLL I found out that half of all very popular anti-virus companies are listing this file as a threat. I sincerely hope that you will be able to work together with those companies on getting this resolved because it is becoming very annoying and looks very unprofessional. It makes me look bad in the eyes of my clients and it makes my life more difficult.
Thank you!
|
|
|
10/10/2011 12:37:08
|
wka
Elite SysAider
Joined: 15/07/2010
Messages: 134
Offline
|
The VNC product always gets identified as that, long before I had ilient I had that, just put exceptions in to the AV its far easier
Its basically a false postive, MS never seem to to fix it, other proper AV do about 80% have 20% have not
This message was edited 1 time. Last update was at 10/10/2011 12:40:00
|
|
|
10/10/2011 13:08:02
|
Croatian
SysAider
Joined: 21/07/2008
Messages: 12
Offline
|
Yes, I agree, but one thing that makes it impossible for me to teach Malwarebytes to permanently ignore it is that the product doesn't have any way of permanent exclusion of a folder or a file. Malwarebytes is great at what it does, but it lacks any way of fine tuning what you wan it to scan. So, I'm doomed, I guess.
|
|
|
10/10/2011 14:21:00
|
Welsh
Elite SysAider
Joined: 21/06/2010
Messages: 125
Offline
|
You can in the paid version of MalwareBytes
|
|
|
10/10/2011 14:37:42
|
Croatian
SysAider
Joined: 21/07/2008
Messages: 12
Offline
|
We are running the paid for version, that's why it blocks it as soon as I remote in, but there is no way for me to exclude something unless I first manually run a full scan on the C: drive of every computer and once it finds an instance of it I can then click the ignore button. However, clicking the other ignore button that happens during the real time detection isn't a permanent thing. That's very inefficient from the time consumption point of view because it takes a long time to scan each drive, but that's a complaint I should file with Malwarebytes folks.
|
|
|
10/10/2011 17:03:02
|
Croatian
SysAider
Joined: 21/07/2008
Messages: 12
Offline
|
Never mind, I looked again and there is an "Ignore List" tab available, which I've never noticed before. I guess I'll have to do it for every computer on the network. Case closed.
|
|
|
![[Up]](/Sysforums/templates/default/images/icon_up.gif){kind=icon}
