Endpoint Protection

 View Only
Back to discussions
Expand all | Collapse all

Rexesvr.exe Called out as adware

Migration User

Migration UserApr 17, 2009 10:48 PM

We're getting the same issue.
Migration User

Migration UserApr 19, 2009 01:08 AM

I believe its a heuristics issue.
Migration User

Migration UserApr 19, 2009 02:43 AM

Weird i've never had a problem with this at all..
Migration User

Migration UserApr 19, 2009 10:59 AM

Thanks Paul :)

  • 1.  Rexesvr.exe Called out as adware

    Posted Apr 17, 2009 10:44 AM
    I am having a strange problem. All of a sudden today all my PC's are getting scan risk detections of rexesvr.exe file. We are using UltraVnc throught the Boztech console and have not had any problems before with this file. Is anyone else seeing this.


  • 2.  RE: Rexesvr.exe Called out as adware

    Posted Apr 17, 2009 11:22 AM
    Did this mess up VNC for you? I havent tested mine yet but guessing since symantec deleted that file something with VNC will not work.. That file is part of VNC?


  • 3.  RE: Rexesvr.exe Called out as adware

    Posted Apr 17, 2009 02:01 PM
     Some AV always detect Remote control software as issues. Maybe they added some defs that thought this file was an issue. Maybe an exclusion would help


  • 4.  RE: Rexesvr.exe Called out as adware

    Posted Apr 17, 2009 02:06 PM
    Walked in the morning to find the same thing on my network. I just had SEP delete the file in question. The odd thing is it was only deteced on about half of the computers on the network.


  • 5.  RE: Rexesvr.exe Called out as adware

    Posted Apr 17, 2009 04:54 PM
    We saw this Endpoint warning today also.  What's going on?
    Is this a real problem or a false positive?
    What is rexesvr.exe supposed to be?


  • 6.  RE: Rexesvr.exe Called out as adware

    Posted Apr 17, 2009 06:23 PM
    Am in the SAV queue now. Our SAV and SEP clients are reporting this file as Adware.Gen. VNC broke on only one client (of only a few that we tested).

    Upgrade to UltraVNC 105 restored VNC functionality.

    Queue wait time was 7 minutes then just jumped to 20 minutes.

    Was on the phone with BESR support tech and he said an SEP Engineer buddy said they have been extremely busy today. Stay tuned!


  • 7.  RE: Rexesvr.exe Called out as adware

    Posted Apr 17, 2009 07:27 PM
    There were only a few other reports of this problem but while talking to support, calls from some big names came in garnering more attention to this issue.

    Everyone submit your sample via the below website so we can all have a solution by Monday.


  • 8.  RE: Rexesvr.exe Called out as adware

    Posted Apr 17, 2009 10:48 PM
    We're getting the same issue.



  • 9.  RE: Rexesvr.exe Called out as adware

    Posted Apr 18, 2009 06:35 PM
    So anyway submission of the rexesvr.exe file indicates that it is a "legitimate" file.

    The submission process is bugged if thats the case.

    How can you submit a file which is identified as legitimate, yet the latest definition files show it as AdAware and therefore it is quarantined.





  • 10.  RE: Rexesvr.exe Called out as adware

    Posted Apr 18, 2009 10:33 PM
    Vnc is always detected as remote threat in antivirus softwares, you need to create polices for exclusions


  • 11.  RE: Rexesvr.exe Called out as adware

    Posted Apr 19, 2009 01:08 AM
    I believe its a heuristics issue.


  • 12.  RE: Rexesvr.exe Called out as adware

    Posted Apr 19, 2009 02:43 AM
    Weird i've never had a problem with this at all..



  • 13.  RE: Rexesvr.exe Called out as adware

    Posted Apr 19, 2009 07:24 AM
    So unfortunately this was a false positive.

    It was initially introduced in rapid release defs dated: 20090416.035

    and removed from all defs dated: 20090417.055 or later

    If you run LiveUpdate, or update your clients normally now, you should get new definitions which don't have this FP.

    I apologise for the inconvenience.


  • 14.  RE: Rexesvr.exe Called out as adware

    Posted Apr 19, 2009 10:59 AM
     Thanks Paul :)