Sophos Bug in latest update.

Discussion in 'Business & Enterprise Computing' started by Simwah, Jul 27, 2010.

  1. Simwah

    Simwah Member

    Joined:
    Aug 6, 2005
    Messages:
    1,998
    Location:
    Brisbane
    Just thought i'd let you guys know as alot of you use sophos.

    There latest update classes winvnc and a virus/spyware therefore not allowing you to authorize it.

    Engineers are working on it now.

    Work around is to turn off desktop messaging to stop annoying the users. (alltho this is not ideal.

    I will make another post when they call back to tell me its fixed.
     
  2. Doc-of-FC

    Doc-of-FC Member

    Joined:
    Aug 30, 2001
    Messages:
    3,293
    Location:
    Canberra
    vnc is overrated.

    real men use ssh.
     
  3. Skitza

    Skitza Member

    Joined:
    Jun 28, 2001
    Messages:
    3,746
    Location:
    In your street
    Thank god, I thought it was just me. Getting hundreds of emails for ultravnc\winvnc.exe

    Thanks
     
  4. eyeLikeCarrots

    eyeLikeCarrots Member

    Joined:
    Jan 1, 2002
    Messages:
    4,327
    Location:
    Canberra Is Shit Sex: Yes
    Because ssh is useful for a Windows machine.

    Instead of trying to e-peen all over someone else's useful post, think about how you'd enjoy working in an environment where every single last noob lost thier point/click interface and had to use a command line and you were working on the helpdesk.
     
  5. Nyarghnia

    Nyarghnia (Taking a Break)

    Joined:
    Aug 5, 2008
    Messages:
    1,274
    CA E-Trust ITM also did this to us on a few older boxes about a week or so ago, doesn't bother me as we don't really use it anymore. (Umm.. SSH convert here too).

    Feedback on the issue when I reported it was that the older versions of VNC are no longer accepted on pattern matching for 'Commercial RAT' signatures, therefore get picked up as 'RAT', the important difference being that if you have a policy which was based on categories of application, those policies to exclude VNC will no longer be applied, hence the nukage of your VNC software.

    But it seems that ALL versions of VNC are getting clobbered, and not just by sophos either...

    -NyarghNia
     
  6. mrpats

    mrpats Member

    Joined:
    Dec 18, 2002
    Messages:
    415
    we had the same issue today. resolved by 4:30pm.
     
  7. youngpro

    youngpro Member

    Joined:
    Jun 18, 2006
    Messages:
    1,451
    haha yeah i saw this one today on 500 machines, and yeah as stated either surpressing messages to desktop or %programfiles%\winvnc dir to the exclusion are a quick temp fix

    100 users coming at once saying they had a virus, nice way to start the day
     
  8. Basslin3r

    Basslin3r Member

    Joined:
    Jul 21, 2006
    Messages:
    6
    Location:
    brisbane
    yeah i just added winvnc.exe as an authorized process in the policy...
    hopefully that fixed it i only added it tonight, ill find out tomorrow.
     
  9. millsy_c

    millsy_c Member

    Joined:
    Mar 31, 2007
    Messages:
    12,655
    Location:
    Brisbane
    Lol I saw my lecturer cop this today as he was trying to demonstrate a program :lol:
     
  10. Squeezer

    Squeezer Member

    Joined:
    Feb 25, 2002
    Messages:
    6,852
    Location:
    Adelaide
    So patch has been released ? or resolved via workaround
     
  11. T-O-D

    T-O-D Member

    Joined:
    Oct 23, 2003
    Messages:
    1,316
    Location:
    Brisvegas!
    Welcome to UQ
     
  12. OP
    OP
    Simwah

    Simwah Member

    Joined:
    Aug 6, 2005
    Messages:
    1,998
    Location:
    Brisbane
    patch was released late yesterday
     
  13. millsy_c

    millsy_c Member

    Joined:
    Mar 31, 2007
    Messages:
    12,655
    Location:
    Brisbane
    No it was QUT actually, I didn't realise they had pc's at UQ :confused:


    :lol:
     
  14. 7nothing

    7nothing Member

    Joined:
    Feb 15, 2002
    Messages:
    1,434
    Location:
    Brisbane
    PCs maybe, but they'd probably run clamav or avg-free.
     
  15. T-O-D

    T-O-D Member

    Joined:
    Oct 23, 2003
    Messages:
    1,316
    Location:
    Brisvegas!
    PC's???

    We have some kinda sandstone around here.......
     

Share This Page

Advertisement: