Radeon wrote:I’m confused as to what your "scVista.zip" actually achieves, other than more danger of it not reverting to original settings and les flexibility?
We ran the scvnc and it was picked up by Bit Defender, McAfee and Norton as malicious! On top of that, Norton and McAfee, terminated the scvnc (named winvnc.exe)
The file was uploaded for one person. It took all of 10 minutes to code something they specifically requested.
1 - There is not an scVnc.exe in the zip file I uploaded. The scvnc.exe is your own local winvnc.exe you had to manually rename to scvnc.exe
2 - scVista.exe is a digitally signed exe scanned by Norton, McAfee and Avg.
3 - If scVista.exe was terminated by your virus software it would never have been able to make any changes, execute any commands or launch any files.
4 - If winvnc was terminated, scVista would have continued it's processes.
Besides, a program like Aero.exe with no internal termination method other than to use an external kill program like tskill that SHOULD already be on the remote system to end it is deeply flawed. What if the kill program is missing, restricted, corrupt, not available or the kill fails? Your program would never stop running. Closed loops like that are unwise.
Which brings up another point. scVista restores the original settings, it doesn't assume it was enable and enable UAC if the user had already disabled it.
I've updated the readme text to explain more fully how it actually works.
You will need to launch scVista instead of the original
winvnc.exe
1 - Rename the UVNC SC winvnc.exe to scvnc.exe
2 - Rename scVista.exe to winvnc.exe
3 - Include both files in your package when you build
your customer modules.
- If not running under vista:
- Runs scvnc.exe (original name winvnc.exe) and waits for it to exit
- If it is running under vista:
- Checks to see if it was previously terminated abnormally and restores
original settings if it was.
- Reads current regsitry settings
- Makes a backup of the settings to reregscv.reg
- Disables 'ConsentPromptBehaviorAdmin'
- Disables 'PromptOnSecureDesktop'
- Temporarilly disables Aero if it is enabled
- Starts and waits for scvnc.exe (original name winvnc.exe) to exit
- restores 'PromptOnSecureDesktop' back to original values
- restores 'ConsentPromptBehaviorAdmin' back to original values
- restores Aero back to it's original mode if applicable.
- deletes the backup reregscv.reg
- this is the error message: No file with this name for download.
