John,

VNC Server has a "logmessages.dll" as a standard part of the installation,
which is obviously not a virus.  The standard logmessages.dll is 2Kb in
size, so a trivial check is to verify that the one on your system is 2Kb
rather than 12Kb as stated in the article.  If it's 12Kb then this may
indicate that the standard logmessages.dll has been replaced by some sort of
malware.

Regards,

Wez @ RealVNC Ltd.
 

> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of john
> Sent: 02 January 2006 14:41
> To: vnc-list@realvnc.com
> Subject: LOGMESSAGES.DLL 
> 
>      * Hi
>      * sorry  to  start  with  this but I just installed 
> something called
>        prevx and it apparently thinks the logmessages.dll
>      * is malware.
> 
>    So is it or not ?
>    from the website
>      *
>      * This  Dynamic Link Library uses the file names 
> LOGMESSAGES.DLL and
>        A0005784.DLL  and at least 26 other file names, the 
> latest we have
>        seen  is  A0084451.DLL.  It has a file size of 12,288 
> bytes and is
>        found    in    the    folder   
> [%PROGRAMFILES%\REALVNC\VNC4\]   or
>        [%PROGRAMFILES%\GENESIS\NAVIGATOR SUITE\INFO\REMOTE\] 
> and at least
>        79  other  folders.  This  Dynamic  Link Library also 
> appears with
>        different  file  types.  This  is  quite  rare  and is 
> a technique
>        sometimes used to disguise malware.
> 
>    
> http://info.prevx.com/pxparall.asp?LANG=en&CMD=appinfo&PX5=27bea9e2005
>    
> e751d30c200816e208500d1fc145b&MID=c0e1e44ca8c4066b71809072afc19f8ab901
>    
> 8ec0d92cf8a3c91b446c2b4a8ef0&LC=3C36F993-AF1F-49A2-B058-120D938E68FD
>    hopefully  someone  can  clarify  this and if it isn't 
> malware perhaps
>    tell these folk it isn't
>    regards
>    John
> _______________________________________________
> VNC-List mailing list
> VNC-List@realvnc.com
> To remove yourself from the list visit:
> http://www.realvnc.com/mailman/listinfo/vnc-list
_______________________________________________
VNC-List mailing list
VNC-List@realvnc.com
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to