Remote Admin

Gleaned from the VirtualPairProgramming page ...

Package from Famatech ( http://www.famatech.com/ ) to compete with VNC.

From http://vil.nai.com/vil/content/v_100246.htm ...

This detection is of application type for "potentially unwanted applications". It is not a virus or a trojan.

RemoteAdmin.svr is the server component of a popular remote control program which is provided by Famatech. It runs as a service on the remote xp/2000 computer. The service name can be "Remote Administrator service". Once the service is running, user using a client program can see the remote computer's screen. Mouse movements and keypresses are transferred to the remote computer.

This application may have been installed by your system administrator for providing support for your machine. If this is the case then the alert on this detection should be ignored.

However, this application has been used by several trojan authors and included in other trojans for malicious purposes.

Users who would like to check for the presence of this program on their system should run the command line scanner with the /PROGRAM switch. Please note that VirusScan? 7 has an option, which enables users to detect this kind of program automatically.

Symptoms

Existence of the service mentioned above. Port 4899 is left open.

Method Of Infection

This may be installed by your system administrator to provide support to your machine.

This may be installed by other trojans or self-extracting executables.


Appears to be Windows only ...


EditText of this page (last edited September 23, 2004) or FindPage with title or text search