Link to home
Start Free TrialLog in
Avatar of life014542
life014542

asked on

Remote VNC Installation | Welchia worm removal

Hi,
I'm stuck with about 80 windows 2000 systems that are being use as point of sale system terminals, and  I'm looking for a remote installation utility that allows me to install VNC remotely so I can have access to them.  Unfortunately these terminals do not have Antivirus installed, and they are infected with the Welchia worm.  This worm cannot be quarantined from a network virus scan, and it must be removed from directly from the system.  I welcome any input you may have.  Your input is greatly appreciated.

Thank you,

Life
Avatar of 99star
99star
Flag of United States of America image

Ideal Administrator software is one such utility which can provide remote installation of VNC etc and does more so please check www.pointdev.com
Avatar of simpsonehh
simpsonehh

Are they on a dialup or connected by intranet of a fast connection.  You can create an msi installer and push down the package(depending on connection capability).  If the welchia worm already infected the computer, make sure you also get the stinger so it can remove the registry entries put there by the blaser worm.
Try VNC fastpush (http://www.darkage.co.uk/).  It will allow for the remote deployment of VNC packages.

Good luck!

--spinn
Avatar of John Gates, CISSP, CDPSE
And afterwards Visit symantec's website and get the removal tools for the worm virus http://www.symantec.com =-)
ASKER CERTIFIED SOLUTION
Avatar of juliancrawford
juliancrawford

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
got you all beat

all you need for this is PSexec, free tool from
http://www.sysinternals.com/ntw2k/freeware/psexec.shtml

i use this script alot! feel free to remove the Remarks (REM) They are just there to tell you what each section does
............................................
set ComputerName=Put IP/dns here
set username=Put username here

NET USE \\%computerName%\IPC$ /user:%username%


REM Copy your local VNC files to the remote PC.
xcopy "C:\temp\VNCInstall\vnc" "\\%computerName%\C$\Program Files\ultraVNC\*.*" /r/i/c/h/k/e

REM Export your current VNC registry to the below path. you can use regedit to export this section[HKEY_LOCAL_MACHINE\SOFTWARE\ORL]

xcopy "C:\temp\VNCInstall\Reg" "\\%computerName%\C$\" /r/i/c/h/k/e

REM Use Regedit to export the local VNC registry settings to the remote PC. Note: If you prefer you can export the file locally and then copy it.

REM import the above registry file on the remote PC.

psexec \\%computerName% -s -i -d regedit /s C:\import.reg

REM PsExec to install the remote winvnc service.

psexec \\%computerName% -s -i -d "C:\Program Files\ultravnc\winvnc.exe" -install

REM Use PsExec to start the remote "VNC Server" service.

psexec \\%computerName% -s -i -d net start "VNC Server"