Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

Norton Anti-Virus 2008 blocks all connections

Post Reply
rbiro
Posts: 2
Joined: 2008-04-25 05:11

Norton Anti-Virus 2008 blocks all connections

Post by rbiro »

After a recent update from Norton, I can't use UltraVNC 1.0.4 RC14 on my laptop.

If I try to initiate an outbound connection using vncviewer, I get a Norton popup saying it has blocked a worm attack:

VNC Large Error Response BO

And if I try to VNC into this computer the same thing happens.
It doesn't matter if I add both the server and viewer to the list of trusted apps.
The Norton Gui doesn't appear to let me override the default behavior and allow UltraVNC to do its thing.

Below is the not entirely useful Tech-Support conversation with Symantec



-----Original Message-----
From: Symantec Tech Support [mailto:techsupport@symantec.iseva.net]
Sent: Thursday, April 24, 2008 10:00 PM
To: ---------
Subject: Technical Support [Incident: 080422-009845]



Subject
---------------------------------------------------------------
Technical Support


Discussion Thread
---------------------------------------------------------------
Response (Ramesh J) - 04/24/2008 09:59 PM
Hello Robert,

Welcome back to Symantec Support.

I understand from your message that even after following the suggested solution, you are getting the message which says "VNC Large Error Response BO".

I acknowledge your concern regarding this issue. I am here to assist you.

Our database indicates that this is may be a threat. So, I suggest you to click on the link to know more about this issue.

Web Url:

http://www.symantec.com/avcenter/attack ... 22901.html

As a workaround, I suggest you to perform the Norton Security Scan and then check for the issue. Click on the link below:

Please click on the link provided below:

Title: 'Installing Norton 2008 product on a virus infected computer'
Document ID: 2007090322510579
> Web URL:
http://service1.symantec.com/Support/no ... 0322510579

NOTE: In the reply mail please mention whether any threats have been identified. If any threats are detected then it has to be removed.

As our esteemed customer, your satisfaction is our primary concern. Please let us know if this issue has been resolved completely. If it still persists, we are always here to assist you.

Regards,

Ramesh. J
Symantec Technical Support

Disclaimer Note:

This message (including any attachments) is intended only for the use of theindividual to which it is addressed.If you are not the intended recipient, please do not follow any instructions provided within this message. Any instructions or offers contained within this message are for a specific person, system configuration, location, and situation. Following these instructions may adversely affect your system if you are not the intended recipient. If you have received this communication in error, please notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. You are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited.
Thank you.

Customer (Robert Biro) - 04/23/2008 07:57 AM
No difference.
The program was added to the list and set to always allow.
I then re-booted the PC.
When I run the app and initiate an outbound session, it still blocks it with
the same message/log about VNC Large Error Response BO. The report does not
name any specific offending program, but it identifies my computer as the
originator of the attck.

How can I specifically disable this one action - there must be some registry
setting or something so that it ignores the "VNC Large Error Response BO"
attack.

-----Original Message-----
From: Symantec Tech Support [mailto:techsupport@symantec.iseva.net]
Sent: Wednesday, April 23, 2008 12:02 AM
To: -------------


[---001:002491:49070---]
Last edited by rbiro on 2008-04-25 05:17, edited 1 time in total.
X3
100
100
Posts: 280
Joined: 2007-12-11 08:50
Location: 51.30 N 0.10 W
Contact:

Re: Norton Anti-Virus 2008 blocks all connections

Post by X3 »

try RC15 on all concerned machines including servers and viewers.

[topic=12503][/topic]

towards the end of topic you will see pgmoney supplies zip files compiled with several fixes I use those for now they are clean and stable.

if this issue still persists then I dunno
Last edited by X3 on 2008-04-25 06:04, edited 1 time in total.
Regards

Image
JSpaceCadet
Posts: 2
Joined: 2008-04-25 07:23

Re: Norton Anti-Virus 2008 blocks all connections

Post by JSpaceCadet »

After installing RC 15, the problem still exists with getting the "VNC Large ErrorResponse BO" from Norton Internet Security 2008.

---------------------------
NOTE: You *can* turn off this check/break in Norton.

Bring up Norton
Options->Norton Internet Security->Intrusion Detections->Exceptions and turn off "VNC Large Error Response BO".
---------------------------
I have not figured out how to turn this off in Norton 360 so I'm toast on those machines.
---------------------------

Note that Symantec says there are problems in bot the client and server, but only list versions up to 1.0.2.

http://www.symantec.com/avcenter/attack ... 22901.html

Any help on this is appreciated.

Joe
-----> Have you helped somebody today?
rbiro
Posts: 2
Joined: 2008-04-25 05:11

Re: Norton Anti-Virus 2008 blocks all connections

Post by rbiro »

For Norton Anti-Virus 2008, I finally found out how to disable the "VNC Large..."

Anti-Virus Option:Real-Time Protection:Internet Worm Protection : Configure
This takes you to the Signature Exclusions dialog where you can uncheck "VNC Large..." and suddenly VNC will start to work again!
JSpaceCadet
Posts: 2
Joined: 2008-04-25 07:23

Re: Norton Anti-Virus 2008 blocks all connections

Post by JSpaceCadet »

My note above pertained to turning off checking for the "intrusion" in:
Norton Internet Security *only*.

---------------------------
NOTE: You *can* turn off this check/break in Norton.

Bring up Norton
Options->Norton Internet Security->Intrusion Detections->Exceptions and turn off "VNC Large Error Response BO".
---------------------------
I have not figured out how to turn this off in Norton 360 so I'm toast on those machines.
---------------------------

Joe
-----> Have you helped somebody today?
X3
100
100
Posts: 280
Joined: 2007-12-11 08:50
Location: 51.30 N 0.10 W
Contact:

Re: Norton Anti-Virus 2008 blocks all connections

Post by X3 »

Norton 360v2 is pretty much 2008 with a few bells nd whistles that quite useless for me

You can use V2 instead of V1 with same serial in fact you can update from v1 to v2 at

Update/Upgrade

Choose your version from drop down menu and you will be given choice to download update that allows any of those version to be upgraded to the latest for free with current serial (until your current time to expiry is over) so if you have 10 moths left you will enjoy the same on a spam spanking version fer free.
Regards

Image
Post Reply